Development record
2026-10-16 — The refusal of a bash -c or sh -c script built from variables that deletes (iss-2610161612200864) is read in code beside the payload reading, under the reserved id shell-c-variable-delete, and its SHELL rule is generated beside it, as the script reading's is (guard.ScriptLesson). Not a registry entry: the pattern language matches one command's words, and cannot say a -c string that holds a variable and a deleting command. Not a hand-written rule in defaults/rules.json: SHELL may not be declared there, and a new domain would be a second copy of the refusal's words, free to drift. Where the refusal and rm-unguarded-variable-path fire on the same line, the refusal speaks, because its rewrite includes that entry's; every other blocker keeps its own message.
2026-10-16 — The refusal of a bash -c or sh -c script built from variables that deletes (iss-2610161612200864) is read in code beside the payload reading, under the reserved id shell-c-variable-delete, and its SHELL rule is generated beside it, as the script reading's is (guard.ScriptLesson). Not a registry entry: the pattern language matches one command's words, and cannot say a -c string that holds a variable and a deleting command. Not a hand-written rule in defaults/rules.json: SHELL may not be declared there, and a new domain would be a second copy of the refusal's words, free to drift. Where the refusal and rm-unguarded-variable-path fire on the same line, the refusal speaks, because its rewrite includes that entry's; every other blocker keeps its own message.
Frontmatter
| id | dcn-2610161621088050 |
|---|---|
| type | decision |
| date | 2026-10-16 |
.abcd/work/decisions/dcn-2610161621088050-the-refusal-of-a-bash-c-or-sh-c-script.md
open on GitHub ↗ · commit history ↗
mentions1
- iss-2610161612200864Agents stall at the host's permission prompt when they write a command the host cannot check. On 2026-10-16 a background agent ran a bash -c script built from variables that deleted files. The host could not check it, so it asked 'This shell -c script runs rm and could not be checked. Do you want to proceed?', and the agent waited for a person. No bundled rule teaches the forms the host can check.