fix(claude): drop the Write memory deny the harness cannot match #936

Merged

coilyco-ops merged 1 commit from aos/claude/sy55 into main

2026-08-25 23:17:57 +00:00

coilyco-ops commented

2026-08-25 23:16:19 +00:00

Owner

Claude Code matches file permission rules on the Edit(path) spelling, which covers Write, Edit, MultiEdit, and NotebookEdit alike. Write(path) matches nothing, so this repo-local copy carried a dead rule the harness warned about at session start.

Enforcement is unchanged. The sibling Edit rule already denies the whole memory surface, and it is the spelling the file permission check actually reads.

The fleet writer this mirrors loses the same rule in the agentic-os pull request at coilyco-flight-deck/agentic-os#1244, which also adds a prune pass so hosts that already converged the dead rule get it removed rather than keeping it forever behind an append-only merge.

Co-Authored-By: Claude Opus 5 (1M context) noreply@anthropic.com

Claude Code matches file permission rules on the `Edit(path)` spelling, which covers Write, Edit, MultiEdit, and NotebookEdit alike. `Write(path)` matches nothing, so this repo-local copy carried a dead rule the harness warned about at session start. Enforcement is unchanged. The sibling `Edit` rule already denies the whole memory surface, and it is the spelling the file permission check actually reads. The fleet writer this mirrors loses the same rule in the agentic-os pull request at https://forgejo.coilysiren.me/coilyco-flight-deck/agentic-os/pulls/1244, which also adds a prune pass so hosts that already converged the dead rule get it removed rather than keeping it forever behind an append-only merge. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

coilyco-ops added 1 commit

2026-08-25 23:16:19 +00:00

fix(claude): drop the Write memory deny the harness cannot match

CI / lint (pull_request) Successful in 42s

Details

TruffleHog / Scan for secrets (pull_request) Successful in 50s

Details

57b6356e5a

Claude Code matches file permission rules on the Edit(path) spelling, which
covers Write, Edit, MultiEdit, and NotebookEdit alike, so this repo-local copy
carried a dead rule the harness warned about at session start. The sibling
Edit rule already denies the whole memory surface, so enforcement is unchanged.

The fleet writer this mirrors loses the same rule in agentic-os, which also
gains a prune pass so hosts that already converged it get it removed.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Co-authored-by: Kai Siren <coilysiren@gmail.com>
Co-authored-by: Claude <noreply@anthropic.com>
Agent-Role: platform

coilyco-ops referenced this pull request

2026-08-25 23:17:36 +00:00

AGENTS.md tells agents the merge is director-gated, which inverts the pull-request-and-merge lane and strands finished work #937

coilyco-ops merged commit 94868a7a56 into main

2026-08-25 23:17:57 +00:00

coilyco-ops deleted branch aos/claude/sy55

2026-08-25 23:17:58 +00:00

coilyco-ops referenced this pull request from a commit

2026-08-25 23:17:58 +00:00

fix(claude): drop the Write memory deny the harness cannot match (#936)