Security

MCP Trust Model

How Sonny decides which MCP servers may run: the allowlist, binary and realm pinning, the integration gate, egress policy, untrusted-pack environment …