Cursor 3.6 Auto-Review: What the Classifier Blocks - and What Still Gets Through
Cursor 3.6 (May 29, 2026) routes Shell, MCP, and Fetch calls through a classifier before they run. Our independent assessment: where the gate is real, where allowlists bypass it, and the settings that keep production repos safe.
What changed
No material change recorded since 3 July 2026. How records are made
Timeline
No events attached in current seed. Method
PSF mapping
This entity's public record implicates D1-INPUT-BOUNDARY-REGISTER, D2-OUTPUT-VALIDATION-CONTRACT, D3-DATA-HANDLING-RECORD, D4-OBSERVABILITY-SIGNALS, D5-MODEL-CHANGE-GATE, D6-AUTONOMY-OVERSIGHT-MATRIX, D7-TOOL-PERMISSION-REGISTER, D8-PROVIDER-FALLBACK-PLAN: inspect linked events and sources before changing production controls.
| Assessment | Type | Confidence |
|---|---|---|
| Cursor 3.6 Auto-Review: What the Classifier Blocks - and What Still Gets Through — insight article record | insight article | 74% |