SikongJueluo 24153412c9 feat(pi-permission-inner-cmd): authorize inner commands behind timeout wrappers ...

- recover the full bash command from the session by tool-call id
- add recognizer for the strict timeout wrapper grammar
- add authorizer mapping inner allow/ask/deny and forwarding agent name
- defer fail-closed on session mismatch, nested wrappers, and errors
- add unit tests for recovery, recognizer, authorizer, and lifecycle
- document the decision in ADR 0001

2026-08-11 16:33:08 +08:00

..

adr

feat(pi-permission-inner-cmd): authorize inner commands behind timeout wrappers

2026-08-11 16:33:08 +08:00

agents

docs: add agent guidance and permission research docs

2026-08-09 00:23:24 +08:00

research

docs(ai-bash-judge): add minimal-evidence research report

2026-08-10 17:22:57 +08:00