Development record
A command that writes into a directory (tar -x, unzip -d, cp -r, git apply, git checkout) is judged by the headless approver by the directory it writes into, not by the files that land inside it, so a protected file arriving inside that directory is not checked. The OS sandbox for launched agents, spc-2610161751056096, is the change that bounds those writes. <!-- record-lint: forward-looking -->
issueopenminoriss-2610161930104545
A command that writes into a directory (tar -x, unzip -d, cp -r, git apply, git checkout) is judged by the headless approver by the directory it writes into, not by the files that land inside it, so a protected file arriving inside that directory is not checked. The OS sandbox for launched agents, spc-2610161751056096, is the change that bounds those writes.
Frontmatter
| id | iss-2610161930104545 |
|---|---|
| type | issue |
| lifecycle | open |
| severity | minor |
.abcd/work/issues/open/iss-2610161930104545-a-command-that-writes-into-a-directory.md
open on GitHub ↗ · commit history ↗
mentions1
- spc-2610161751056096a-person-who-leaves-abcd-to-run-on-its