docs(voice-call): lead msteams setup snippets with the safe allowlist posture

ahenawy · claude · ahenawy · commit 2d78bbe811de · 2026-06-06T08:28:44.000Z
Reviewer follow-up: the setup examples showed `inboundPolicy: "open"` as the
headline, which undercuts the safe default. The README and public-docs snippets
now use `inboundPolicy: "allowlist"` with a sample AAD `allowFrom` entry, and
note `"open"` only as the explicit accept-all alternative. Matches the code/
schema default (allowlist) and the now-corrected PR description.

Co-Authored-By: Claude Opus 4.8 (1M context) &lt;noreply@anthropic.com&gt;
diff --git a/docs/plugins/voice-call.md b/docs/plugins/voice-call.md
@@ -669,10 +669,11 @@ calls).
 ```json5
 {
   provider: "msteams",
-  // Inbound default is a safe "allowlist" (never "open"): with an empty
-  // allowFrom no caller is accepted until you opt callers in, or set
-  // inboundPolicy: "open" explicitly to accept any authenticated Teams caller.
-  inboundPolicy: "open",
+  // Inbound default is a safe "allowlist" (never "open"). List the caller's AAD
+  // object id in allowFrom; an empty allowFrom accepts no one. Set
+  // inboundPolicy: "open" only to accept any authenticated Teams caller.
+  inboundPolicy: "allowlist",
+  allowFrom: ["00000000-0000-0000-0000-000000000000"], // caller AAD object ids
   responseModel: "openai/gpt-5.4", // agent model for the streaming path
 
   msteams: {
diff --git a/extensions/voice-call/README.md b/extensions/voice-call/README.md
@@ -112,7 +112,8 @@ When `inboundPolicy` is unset, msteams defaults to a **safe `"allowlist"`** (nev
 ```json5
 {
   provider: "msteams",
-  inboundPolicy: "open", // accept any authenticated Teams caller; or "allowlist" + allowFrom (the safe default)
+  inboundPolicy: "allowlist", // safe default; accept only listed callers
+  allowFrom: ["00000000-0000-0000-0000-000000000000"], // caller AAD object ids (use "open" to accept any authenticated Teams caller)
   responseModel: "microsoft-foundry/gpt-5.4", // agent model for the streaming path
 
   msteams: {

Original file line number	Diff line number	Diff line change
@@ -112,7 +112,8 @@ When `inboundPolicy` is unset, msteams defaults to a safe `"allowlist"` (nev
`112`	`112`	```json5
`113`	`113`	`{`
`114`	`114`	`provider: "msteams",`
`115`		`- inboundPolicy: "open", // accept any authenticated Teams caller; or "allowlist" + allowFrom (the safe default)`
	`115`	`+ inboundPolicy: "allowlist", // safe default; accept only listed callers`
	`116`	`+ allowFrom: ["00000000-0000-0000-0000-000000000000"], // caller AAD object ids (use "open" to accept any authenticated Teams caller)`
`116`	`117`	`responseModel: "microsoft-foundry/gpt-5.4", // agent model for the streaming path`
`117`	`118`
`118`	`119`	`msteams: {`