Skip to content

Harden grind against other repositories - #21

Merged
telivity-otaip merged 6 commits into
mainfrom
cursor/asil-level-15-harden-c6f9
Oct 16, 2026
Merged

telivity-otaip merged 6 commits into
mainfrom
cursor/asil-level-15-harden-c6f9

Conversation

@telivity-otaip

@telivity-otaip telivity-otaip commented Oct 16, 2026 •

Copy link
Copy Markdown
Collaborator

Summary

  • Skill files load from the configured skills directory as name.md or name/SKILL.md, including aliases and both rationalization-table headings.
  • Git and gh use an allowlisted environment and do not inherit model API keys. Commits skip hooks in the target repository. Worktree directories are namespaced per repository, and deletion is limited to those directories.
  • Patch reads stay inside the target repository. Relative data paths cannot leave it. An absolute path is used as given unless a .. segment resolves outside the repository. Pull request bodies and diff patches are written under the system temp directory.
  • auto grind does not commit, push, or open a pull request unless --apply is passed. Tasks that pass the gates stay queued for a later run.
  • Documentation matches runLoop(config, deps), the workspace-root .env location, and TelivityAI/asil.

Test plan

  • pnpm test
  • pnpm typecheck
  • Confirm auto grind help text states that --apply is required to push
Open in Web Open in Cursor 

cursoragent and others added 6 commits October 16, 2026 03:25
Load skills from the configured directory as name.md or name/SKILL.md,
with a compatibility pass for a nested skills/ folder and aliases onto
upstream skill names. Recognize both Anti-Rationalization and Common
Rationalizations headings so those tables reach the executor prompt.

Co-authored-by: telivity-otaip <telivity-otaip@users.noreply.github.com>
Git and gh no longer inherit model API keys, and commits skip the
target repository's hooks. Worktrees are namespaced per repository
and deletion is limited to those directories. File reads, coverage
paths, and relative data paths stay inside the repository. Pull
request bodies and diff patches are written under the system temp
directory.

Co-authored-by: telivity-otaip <telivity-otaip@users.noreply.github.com>
grind still runs the review gates and commits on a local auto/ branch.
Push and pull request creation happen only when --apply is passed.
Programmatic runLoop callers keep the previous publish behavior unless
openPullRequests is set to false.

Co-authored-by: telivity-otaip <telivity-otaip@users.noreply.github.com>
Load .env from the workspace root, document runLoop(config, deps), and
point package metadata at TelivityAI/asil. Describe --apply, the skill
file layout, and the fact that a dry run still executes scanner commands.
Usage reports are Markdown only.

Co-authored-by: telivity-otaip <telivity-otaip@users.noreply.github.com>
A grind without --apply no longer commits. Tasks that pass the gates
stay queued and do not consume a retry, and they are not picked again
in the same run.

Co-authored-by: telivity-otaip <telivity-otaip@users.noreply.github.com>
Reject configured paths whose parent segment leaves the repository.
Describe git and gh as an allowlisted environment, and remove the
unpublished notes file from the tree.

Co-authored-by: telivity-otaip <telivity-otaip@users.noreply.github.com>
@telivity-otaip
telivity-otaip marked this pull request as ready for review October 16, 2026 09:59
@telivity-otaip
telivity-otaip merged commit ee5609c into main Oct 16, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants