You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
orchestrating-projects author filter for worker text (#311, rank 1 of the control candidates in docs/security.md): the worker spec template has a Trusted authors: line. A worker follows issue, pull request, review and comment text only from the policy's trustedAuthors, the repository owner and users with write access (authorAssociation OWNER, MEMBER or COLLABORATOR), and reads any other text, bots included, as data, never instructions. The coordinator picks only issues written by a trusted author. Breaking, before 7.0 (no compatibility path): a review bot's comments are no longer followed unless its login is in trustedAuthors of docs/agents/orchestration.json (new optional policy field, example in policy.example.json).
Skill lint: .github/scripts/skill-lint.mjs fails a skill whose files mention a worker and hand it issue or pull request text without the Trusted authors: line and the words "data, never instructions" (a failing and a passing fixture in skill-lint.test.mjs). The filter is wording in the worker session, so it lowers the hit rate and is no boundary.
