Forbid WebFetch/Playwright/manual-encoding fallbacks when MCP commit tools exist #260

New Issue

2026-07-06T12:09:29-05:00

jcwalker3 commented

2026-07-06 12:09:29 -05:00

Problem

When shell encoding fails, agents attempted httpbin WebFetch base64 decode, Playwright browser automation, and manual LLM-generated base64 instead of using gitea_commit_files from the main agent with profile gitea.repo.commit.

Proposal

Agent/runbook rule: if gitea.repo.commit is allowed and gitea_commit_files is reachable, that is the only commit path.
Explicitly forbid WebFetch, Playwright, external websites, and manual LLM base64 as workarounds.
If base64 is required and shell is unavailable, stop with recovery report (do not improvise).

Acceptance

Documented in workflow runbooks / safety model.
Optional lint on agent transcripts for forbidden fallback patterns.

Context

#152 subagent failure 2026-07-06.

## Problem When shell encoding fails, agents attempted httpbin WebFetch base64 decode, Playwright browser automation, and manual LLM-generated base64 instead of using `gitea_commit_files` from the main agent with profile `gitea.repo.commit`. ## Proposal - Agent/runbook rule: if `gitea.repo.commit` is allowed and `gitea_commit_files` is reachable, that is the only commit path. - Explicitly forbid WebFetch, Playwright, external websites, and manual LLM base64 as workarounds. - If base64 is required and shell is unavailable, stop with recovery report (do not improvise). ## Acceptance - Documented in workflow runbooks / safety model. - Optional lint on agent transcripts for forbidden fallback patterns. ## Context #152 subagent failure 2026-07-06.

jcwalker3 referenced this issue

2026-07-06 12:21:31 -05:00

Map gitea_commit_files in the task capability resolver #262

jcwalker3 referenced this issue

2026-07-06 12:21:33 -05:00

Provide native MCP-safe commit payload preparation without shell #263

jcwalker3 added the status:in-progress label 2026-07-06 13:44:03 -05:00

jcwalker3 commented

2026-07-06 13:44:03 -05:00

Claimed. Branch: docs/issue-260-forbid-commit-fallbacks. Worktree: branches/docs-issue-260-forbid-commit-fallbacks.

Plan: document MCP-native gitea_commit_files as the only commit path when gitea.repo.commit is allowed; forbid WebFetch/Playwright/manual base64 workarounds in runbooks and safety model; add doc tests.

Claimed. Branch: `docs/issue-260-forbid-commit-fallbacks`. Worktree: `branches/docs-issue-260-forbid-commit-fallbacks`. Plan: document MCP-native `gitea_commit_files` as the only commit path when `gitea.repo.commit` is allowed; forbid WebFetch/Playwright/manual base64 workarounds in runbooks and safety model; add doc tests.

jcwalker3 referenced this issue from a commit

2026-07-06 13:44:48 -05:00

docs: forbid improvised commit fallbacks when MCP commit exists (#260)

jcwalker3 referenced a pull request that will close this issue

2026-07-06 13:46:07 -05:00

docs: forbid improvised commit fallbacks when MCP commit exists (Closes #260) #279

jcwalker3 referenced this issue

2026-07-06 13:53:23 -05:00

docs: add Shell Spawn Hard-Stop Rule for agent workflows (Closes #258) #281

sysadmin closed this issue

2026-07-07 01:01:17 -05:00

sysadmin referenced this issue from a commit