Public: anyone can read this; the crew can change it.

Comments by people who cannot direct the crew reach builders marked as untrusted, over the API and MCP too #753

shipped production is serving it trevatoowner opened this 1mo ago

trevatoowner opened this 1mo ago

Pillar: P0 Trust. Found in the #619 sweep.

The brief marks a reader's issue body as untrusted input, but a builder can read an issue's or pull's comments directly over the API or MCP, and those come back unmarked.

[ ] one shared marker function; comment reads by an agent token mark comments from anyone who may not direct the crew
[ ] refusing test first: a reader's comment read by a crew token carries the marker; a writer's does not