Development record
An AI-written interview's role can slow the change guard by planting a link to a huge directory tree where the guard follows links (for example its turn directory's preflight-receipts made a symlink and registered as a worktree): followLink content-hashes up to maxWatched (500,000) files before refusing. The guard still fails closed (the interview stops and nothing is accepted), but a turn can take minutes first.
issueresolvedminoriss-2610040847166532
An AI-written interview's role can slow the change guard by planting a link to a huge directory tree where the guard follows links (for example its turn directory's preflight-receipts made a symlink and registered as a worktree): followLink content-hashes up to maxWatched (500,000) files before refusing. The guard still fails closed (the interview stops and nothing is accepted), but a turn can take minutes first.
Grounds
- pursued: no legitimate followed target (git's hooks and info, a dotfiles hooks directory, at most 50 push receipts) comes near the budget, so no real interview is refused by it; a person's linked hooks directory past 1,024 entries or 64 MiB being refused would show the budget too small
Frontmatter
| id | iss-2610040847166532 |
|---|---|
| type | issue |
| lifecycle | resolved |
| severity | minor |
.abcd/work/issues/resolved/iss-2610040847166532-an-ai-written-interview-s-role-can-slow.md
open on GitHub ↗ · commit history ↗
mentions2
- iss-2610050315146044An AI-written interview's role can slow the change guard by writing core.hooksPath into .git/config, naming a large directory outside the tree: the reading after the turn hashes every file there (toward the 500,000-path bound, with no byte bound) before it reports the configuration change. A probe with a 16 GiB sparse file held the reading about 7 seconds, growing with the size. The guard still fails closed (the change to .git/config and the planted directory are named), but a turn can take minutes first. The followed-link budget (iss-2610040847166532) does not cover it, because the hooks directory is resolved and read whole, not reached through a followed link.
- spc-2610040847280931plain-terminal-interviews-remaining-work