Skip to content

docs(preallow): order the README by reader task, correct claims the code does not back, and write AGENTS.md as paragraphs - #18

Merged
liby merged 2 commits into
mainfrom
feature/preallow-docs-by-reader
Oct 29, 2026
Merged

liby merged 2 commits into
mainfrom
feature/preallow-docs-by-reader

Conversation

@liby

@liby liby commented Oct 29, 2026

Copy link
Copy Markdown
Member

The preallow README now opens with installing, then what the judge allows, what it leaves to native approval, the settings, what the judge reads, and how a judge decides, with its checks, model calls, verdict, and cache in one section. The judged log fields get a list of their own instead of one long sentence.

Several statements claimed more than the code does. The message and input limits count JSON text, not raw characters. A parent's restatement of the task in a subagent's brief cannot supply the explicit words an irreversible effect needs. A file's modification time does not show who made it, and the newest FETCH_HEAD does not date the fetch of the ref being checked. A judge that runs out of time answers review, which the second judge takes up, instead of sending the call to the classifier. Calls can read the cache, but do not always. The gitleaks rule behind the known sourcegraph false positive has an entropy floor, so it takes almost any 40-character hex string, not every one. The code comments and the 0.0.9 CHANGELOG entry that repeated these claims are corrected too, and the /config descriptions name the other settings by the titles shown beside them.

Both AGENTS.md files are written as paragraphs instead of lists, with no rule, exception, or reason dropped; preallow's run from the ownership boundary to output withholding.

No behavior changes; the policy bullets in the README keep their wording, which follows JUDGE_SYSTEM.

liby added 2 commits October 29, 2026 18:14
…e code does not back

Installing comes first, then what the judge allows and what it leaves to
native approval, the settings, what the judge reads, and how a judge
decides, with its checks, model calls, verdict, and cache in one place.
The log's `judged` fields get a list of their own instead of one
sentence.

Several statements said more than the code does. The message and input
limits count JSON text, not raw characters. A parent's restatement of
the task in a subagent's brief cannot supply the explicit words an
irreversible effect needs. A file's modification time does not show who
made it, the newest FETCH_HEAD does not date the fetch of the ref
checked, and the cache is something calls can read, not one they always
do. A judge that runs out of time answers review, which the second
judge takes up, rather than sending the call to the classifier, and
the gitleaks rule behind the `sourcegraph` false positive takes almost
any 40-character hex string, not every one.

The `/config` descriptions name the other settings by the titles shown
beside them.
Each item was a paragraph of rules and their reasons, so the list
markup added nothing an agent reads by. preallow's paragraphs now run
from the ownership boundary through what reaches the judge, its policy,
the user's words, facts, verdicts, and stages to output withholding;
no rule, exception, or reason is dropped.
@liby
liby merged commit 60e862e into main Oct 29, 2026
4 checks passed
@liby
liby deleted the feature/preallow-docs-by-reader branch October 29, 2026 10:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant