This is the record of an abcd-managed repository

abcdBetav0.16.2 · 2026-11-06

Development record

A custom domain with `"recall": ["the"]` in `.abcd/rules.json` fires on ordinary English prose (reproduced at v0.7.0: it injected on "update the roadmap"), so a repository can make any domain — and any override text — inject on nearly every prompt. Recall matching (`termHit`, internal/core/rules/rules.go) is word-bounded and stemmed but has no notion of a keyword too common to be a signal. Whether to refuse or warn on stop-word recall terms, and against which list, is a policy question rather than a mechanical fix; captured so the decision has a marker. Sibling of GHSA-22f8-qf5r-gjgq: the provenance marker that fix adds makes such a domain visible as a repo override but does not stop it firing.

issueopenminoriss-2609012039220931

A custom domain with "recall": ["the"] in .abcd/rules.json fires on ordinary English prose (reproduced at v0.7.0: it injected on "update the roadmap"), so a repository can make any domain — and any override text — inject on nearly every prompt. Recall matching (termHit, internal/core/rules/rules.go) is word-bounded and stemmed but has no notion of a keyword too common to be a signal. Whether to refuse or warn on stop-word recall terms, and against which list, is a policy question rather than a mechanical fix; captured so the decision has a marker. Sibling of GHSA-22f8-qf5r-gjgq: the provenance marker that fix adds makes such a domain visible as a repo override but does not stop it firing.

Remedy grounds (2026-09-29)

  • The Snowball project publishes an English stop-word list built for the same stemming family recall matching uses (https://snowballstem.org/algorithms/english/stop.txt, checked 2026-09-30).
  • The loader already reports a skipped domain on stderr, so either answer reuses that seam. Rejected: frequency-based detection over a corpus, which adds a data file with no gain over a fixed list for a single-token check.

Frontmatter

idiss-2609012039220931
typeissue
lifecycleopen
severityminor

mentions1