CLAIM-2026-09-24-08

Agno pull request 10270, titled nine authorization guard fixes from the authz audit, was merged on 22 September 2026 and covers endpoint authorization - user endpoint gating, reserved scope namespaces, draft preview privilege checks, provider error handling, reserved principals, scope PATCH validation, knowledge refresh mapping, role-slug provisioning and request-time gating for manually added JWT middleware - and mentions neither approval workflows nor human-in-the-loop.

Why it matters

It is the change most likely to be mistaken for the fix, and reading it shows the approval-binding defect is untouched, so a team that pulls it and stops has not closed the gap.

Sources

github2026nine

CLAIM-2026-09-24-08

Agno pull request 10270, titled nine authorization guard fixes from the authz audit, was merged on 22 September 2026 and covers endpoint authorization - user endpoint gating, reserved scope namespaces, draft preview privilege checks, provider error handling, reserved principals, scope PATCH validation, knowledge refresh mapping, role-slug provisioning and request-time gating for manually added JWT middleware - and mentions neither approval workflows nor human-in-the-loop.

Why it matters

It is the change most likely to be mistaken for the fix, and reading it shows the approval-binding defect is untouched, so a team that pulls it and stops has not closed the gap.

Sources

github2026nine