Restrict finder tools to inspection capabilities #4
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Finder instructions prohibit modifying files and running builds or arbitrary programs, but the Goose developer extension exposes shell execution and editing.
Enforce inspection-only capabilities for discovery, including delegated lanes, while preserving reading source, inspecting diffs, loading trusted skills, delegation, and structured reporting. Keep bounded reproduction execution available to the sandboxed verifier. Audit inherited tools and update prompts to match the actual tool boundary.
Validation: inspect effective finder and delegate tool sets, reject execution and mutation attempts, and exercise normal discovery and verifier workflows. Avoid dependency-pin changes.