You'll notice
Slash commands from unverified Slack messages can now be blocked before relaying
What
When a message coming through Slack looks like a slash command but didn't go through the existing bridge-slash-override handling and isn't confirmed to be from a verified human Slack user, a new check called resolveRelaySlashRefusal now runs and can block the message from being relayed.
Why
This closes a gap where an unverified Slack message could otherwise trigger a slash command, adding a safeguard against unauthorized or spoofed command execution through Slack integrations.