pub const ISOLATION_FLAGS: &[&str];Expand description
The flags that make a spawned CLI see MUR’s tools and nothing else.
One constant, not three arguments assembled at the call site. Measured
2026-09-16: --tools "" alone still left 44 tools mounted — every MCP
server in the user’s own config — and none of those pass MUR’s handler,
entitlements or HITL gate. --strict-mcp-config is what empties the
list, so the three travel together or the isolation is not there.