A god session holds every right in the MCP gateway, in every org

Shipped

November 15, 2026 at 6:02 AM UTC

Author

Kamo

Commit

b934542

Owner GOD RULE 2026-11-14: ***SessionReader gives a human, non-SI-delegated session every tenant right when it is god (GD, or an open window; a System User / impersonation session with SUDO_MEMBER_ID still needs the window, as shared **************** Every tool call is still written to mcp_tool_call_audit; a [GOD-AUDIT] line marks the god standing. An SI is never god.