docs: forbid improvised commit fallbacks when MCP commit exists (Closes #260) #279

2026-07-06T13:46:07-05:00

jcwalker3 commented

2026-07-06 13:46:07 -05:00

Closes #260

Summary

When gitea.repo.commit is allowed and gitea_commit_files is visible, agents must use the MCP-native commit path. This documents forbidden WebFetch, Playwright, and manual base64 workarounds plus fail-closed recovery when shell and MCP commit are both unavailable.

Changes

docs/llm-workflow-runbooks.md — § MCP-native commit path (#260)
docs/safety-model.md — § Agent Commit Path (no improvised fallbacks)
tests/test_workflow_commit_path_docs.py — doc regression tests (3)

Validation

pytest tests/test_workflow_commit_path_docs.py -q → 3 passed
git diff --check → clean

LLM Handoff Metadata

LLM-Agent-SHA: 2f4672218c
Branch: docs/issue-260-forbid-commit-fallbacks
Worktree: branches/docs-issue-260-forbid-commit-fallbacks

Closes #260 ## Summary When `gitea.repo.commit` is allowed and `gitea_commit_files` is visible, agents must use the MCP-native commit path. This documents forbidden WebFetch, Playwright, and manual base64 workarounds plus fail-closed recovery when shell and MCP commit are both unavailable. ## Changes - `docs/llm-workflow-runbooks.md` — § MCP-native commit path (#260) - `docs/safety-model.md` — § Agent Commit Path (no improvised fallbacks) - `tests/test_workflow_commit_path_docs.py` — doc regression tests (3) ## Validation - `pytest tests/test_workflow_commit_path_docs.py -q` → 3 passed - `git diff --check` → clean ## LLM Handoff Metadata - LLM-Agent-SHA: 2f4672218c7edb0641a098b8ad4e4b3ed50fc06c - Branch: docs/issue-260-forbid-commit-fallbacks - Worktree: branches/docs-issue-260-forbid-commit-fallbacks

jcwalker3 added 1 commit 2026-07-06 13:46:08 -05:00

docs: forbid improvised commit fallbacks when MCP commit exists (#260 ) 2f4672218c

Document MCP-native gitea_commit_files as the only approved commit path when
gitea.repo.commit is allowed; ban WebFetch, Playwright, and manual base64
workarounds in runbooks and safety model. Add doc tests.

Closes #260.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

sysadmin added 1 commit 2026-07-07 00:59:32 -05:00

Merge branch 'master' into docs/issue-260-forbid-commit-fallbacks d0e250e860

sysadmin approved these changes 2026-07-07 01:01:01 -05:00

sysadmin left a comment

Review of PR 279: Documentation and tests for MCP-native commit path rules are correct and complete. All tests pass successfully. Approved.

sysadmin merged commit 95603b24a8 into master

2026-07-07 01:01:17 -05:00

jcwalker3 referenced this pull request

2026-07-07 01:08:52 -05:00

Reviewer workflows must prove worktree ownership before reset or validation #312

Sign in to join this conversation.