feat(guard): treat any non-protected branch as agent-managed - #626
Merged
NagyVikt merged 1 commit intoJun 4, 2026
Merged
Conversation
Agents were forced onto agent/* (plus a fixed claude/codex/cursor allowlist) to edit or commit; ad-hoc names like vendor/* were blocked at both the skill_guard.py PreToolUse layer and the git pre-commit hook. Being OFF a protected base is the only load-bearing rule, so accept any non-protected branch by default. - skill_guard.py: is_agent_branch() allows any non-protected branch; prefix allowlist now applies only under GUARDEX_AGENT_BRANCH_PREFIXES_ONLY lockdown. Callers pass the repo-resolved protected set. - templates/githooks/pre-commit: non-protected branches allowed for all agent sessions; new GUARDEX_REQUIRE_AGENT_BRANCH / multiagent.requireAgentBranch lockdown re-imposes agent/*. Protected blocking + Codex managed-only exception preserved. - AGENTS.md/CLAUDE.md quickstart + OpenSpec change documenting the policy. - Tests updated/added for default-allow, lockdown, and configured-protected.
NagyVikt
deleted the
agent/claude/accept-any-non-protected-branch-name-as-2026-06-05-00-40
branch
June 4, 2026 23:06
NagyVikt
added a commit
that referenced
this pull request
Jun 5, 2026
Cross-repo agent coordination release. Minor bump (new gx mcp feature + backward-compatible default changes) covering PRs #626-#633. Release notes in the OpenSpec change notes; GitHub release v7.1.0 published separately. Manual bump + manual npm publish this cycle. Co-authored-by: NagyVikt <nagy.viktordp@gmail.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Automated by gx branch finish (PR flow).