ffaerber merged pull request gitea/agents#39 2026-07-04 10:55:40 +02:00
@senior: One comment per agent run
ffaerber deleted branch security/agent-isolation from gitea/agents 2026-07-04 10:54:37 +02:00
ffaerber closed pull request gitea/agents#37 2026-07-04 10:54:36 +02:00
security: isolate agent behavior from the caller repo
ffaerber commented on pull request gitea/agents#37 2026-07-04 10:54:35 +02:00
security: isolate agent behavior from the caller repo

Closing — abandoning the opencode.json quarantine approach. Decision: a caller repo's opencode.json permission block is the intended per-repo control (e.g. homelab's read-only node1 ssh…

ffaerber commented on issue gitea/agents#38 2026-07-04 10:40:10 +02:00
One comment per agent run

@senior please proceed with issue #38 per the plan above (delegated by pm).

ffaerber commented on issue gitea/agents#38 2026-07-04 10:39:55 +02:00
One comment per agent run

@pm yes

ffaerber opened issue gitea/agents#38 2026-07-04 10:36:21 +02:00
One comment per agent run
ffaerber commented on pull request gitea/agents#37 2026-07-04 10:21:16 +02:00
security: isolate agent behavior from the caller repo

Update after checking homelab: it has no opencode.json/.opencode/ (so config quarantine costs it nothing), but its AGENTS.md carries repo-specific ops knowledge agents need — the…

ffaerber pushed to security/agent-isolation at gitea/agents 2026-07-04 10:21:05 +02:00
5601dfe8d6 security: keep caller AGENTS.md as subordinate repo notes, not rules
ffaerber created pull request gitea/agents#37 2026-07-04 10:06:07 +02:00
security: isolate agent behavior from the caller repo
ffaerber created branch security/agent-isolation in gitea/agents 2026-07-04 10:05:47 +02:00
ffaerber pushed to security/agent-isolation at gitea/agents 2026-07-04 10:05:47 +02:00
06df6320a1 security: isolate agent behavior from the caller repo
ffaerber pushed to main at gitea/agents 2026-07-04 09:47:44 +02:00
9a3ca95f9e Merge pull request '@junior: Add runtime .agents-workflow/ checkout to .gitignore' (#36) from ai/issue-35 into main
f0f1152545 Add runtime .agents-workflow/ checkout to .gitignore
Compare 2 commits »
ffaerber merged pull request gitea/agents#36 2026-07-04 09:47:42 +02:00
@junior: Add runtime .agents-workflow/ checkout to .gitignore
ffaerber closed issue gitea/agents#35 2026-07-04 09:47:42 +02:00
Add runtime .agents-workflow/ checkout to .gitignore
ffaerber commented on issue gitea/agents#35 2026-07-04 09:45:09 +02:00
Add runtime .agents-workflow/ checkout to .gitignore

@junior please proceed with issue #35 per the plan above (delegated by pm).

ffaerber commented on issue gitea/agents#35 2026-07-04 09:44:53 +02:00
Add runtime .agents-workflow/ checkout to .gitignore

@pm yes, proceed.

ffaerber opened issue gitea/agents#35 2026-07-04 09:44:03 +02:00
Add runtime .agents-workflow/ checkout to .gitignore
ffaerber pushed to main at gitea/agents 2026-07-04 09:43:30 +02:00
13148ea68c Merge pull request 'Single source of truth for agent model IDs (fixes #31)' (#32) from ai/issue-31 into main
cafd36eae1 fix(agent): single source of truth for model IDs (route.sh + install-opencode.sh)
Compare 2 commits »
ffaerber closed issue gitea/agents#31 2026-07-04 09:43:29 +02:00
Prevent agent model-ID drift between route.sh and install-opencode.sh