Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
Enterprise PolicyArea: what it touches
Bug FixesKind: in v2.1.228,
Bug FixesSection of the release
What
Settings returned by an administrator's policy helper executable now have both policyHelper and policyHelpers stripped before validation, with a warning logged for each, so a helper cannot point at a further helper. Previously the key was only discarded after validation.
Details
The salvage pass over the helper's parsed output now only rescues individual MCP server entries, and keeps a malformed field whole so the strict schema rejects it instead of quietly dropping it.
Evidence
policyHelper: stripped ${f} from helper output (no recursion), policyHelpers
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
