Skip to content

fix: land a grok brief without the hidden trust prompt - #336

Open
douglasjarquin wants to merge 1 commit into
mainfrom
sum-dev/grok-trust
Open

douglasjarquin wants to merge 1 commit into
mainfrom
sum-dev/grok-trust

Conversation

@douglasjarquin

Copy link
Copy Markdown
Owner

Summary

A Grok worker now receives its opening brief instead of stopping on a hidden trust prompt for the repository that owns the task worktree.

The prompt was why the brief never landed. The 20 second launch deadline stays where it is.

Sum records the directory Grok asks about, the parent of the checkout's common .git, as trusted in that worker's GROK_HOME before the process starts. An existing trusted = false stays false. Workers already stopped on the prompt are not restarted.

Validation

  • I followed the contributor checklist.
  • I recorded the canonical verification command, result, and evidence path.
  • I recorded applicable manual or live checks, including anything not run.
  • I stated deployment or release impact when relevant.

MISE_ENABLE_TOOLS=go,python,node python3 .agents/skills/verify/scripts/verify_run.py --base <merge-base of origin/main> passed on a clean tree. The record is .artifacts/verification/20261102T025820Z-d3b6d020/run.json. It certifies 5fb55589991d89b5479fb209634c33ff0c1303f9 (outcome pass, exit 0, 241 scenarios pass, 46 not-run).

mise run test-live was not run. The dispatch lab writes the trust file against a fake terminal and does not start Grok. The two workers already stopped on the prompt were left running.

Four scenarios still have no visual comparison for this candidate. questions.structured-decisions and verify.fixture-git-isolation passed their automated coverage with that note. pipeline.review-threads and pipeline.review-thread-actions were not exercised.

The installed helper keeps the previous behavior until this merges and that installation is updated. There is no schema change. grok-bots/sum/ and grok-bots/square/ are unchanged: this writes one local trust file when a Grok worker is launched.

Two launches that both see the folder as missing can each append it. Both lines say trusted = true.


Compound Engineering

A Grok worker stops on a hidden prompt for the parent of the checkout's common .git, so the brief never lands.
Record that directory under the worker's GROK_HOME before terminal.run, and leave an explicit refusal unchanged.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant