Skip to content

fix: registry note for sandboxed harness builds; guard hook names the remote in its rebase hint - #103

Merged
devondragon merged 1 commit into
mainfrom
fix/harness-registry-doc-and-guard-rebase
Oct 13, 2026
Merged

devondragon merged 1 commit into
mainfrom
fix/harness-registry-doc-and-guard-rebase

Conversation

@devondragon

Copy link
Copy Markdown
Owner

Bumps to 3.20.3.

  • docs/harness.md: a sandboxed session can pull FROM images (including the # syntax= frontend) only from registries whose token host is on the egress allowlist; today that is Docker Hub's auth.docker.io on Cyrus.
  • hooks/pre-tool-use-guard.sh: the force-push message now says git pull --rebase origin <branch>, since sandboxed branches have no upstream.
  • tests: baseline-diff test updated for the one changed hook line; new test that the message names origin.

Tests: bash tests/run.sh 385 passed, 0 failed; shellcheck clean.

@devondragon
devondragon merged commit ad5f632 into main Oct 13, 2026
2 checks passed
@devondragon
devondragon deleted the fix/harness-registry-doc-and-guard-rebase branch October 13, 2026 03:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant