Repository navigation
fix(policy): reject committed private files instead of mentions - #39
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Reject committed private execution files instead of text that mentions them.
The source policy rejected any added line mentioning
.agent/,PLANS.mdor*.plan.md. Its intent is that private execution files never enter these public repositories, but the check also blocked documentation that describes those conventions. For example, a planning skill cannot name where agent plans live without failing..workspace/paths. Mentions of.agent/,PLANS.mdand*.plan.mdare allowed..agentor.workspace, or its basename isPLANS.mdor ends with.plan.md. Deleting such a file is allowed.Every local consumer checkout was surveyed: none tracks a file the new path rule would reject on modification.
Validation: 67 unit tests,
Scripts/check(generated copies, profile, actionlint) and diff checks passed. An independent read-only review found no functional defects; its coverage suggestions are included as tests. A consumer run against this commit is linked below once it completes.Risk: medium. Shared policy used by every consuming repository; behavior becomes less strict for text and stricter for committed paths.