You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Commit 4c35e19
Browse filesBrowse the repository at this point in the historyBrowse files
and permitted dispatch/monitoring/audit. Do not ask the user to perform these
31
+
technical steps. Prepare a concise evidence packet for any required human
32
+
validation; retain genuine authorization and protected-environment gates.
33
+
Report a concrete unresolved blocker, not a generic preflight checklist.
34
+
35
+
Workflow registration/activation and secret presence, validity, or expiry are
36
+
not pre-dispatch gates. Let dispatch and workflow startup/authentication establish
37
+
readiness; do not require inventories or organization-admin metadata access.
38
+
Missing readiness metadata alone does not block an otherwise authorized run.
39
+
Credential-flow review, destination authorization, and the live gates below still
40
+
apply. Report actual readiness failures without automatically enabling workflows,
41
+
provisioning secrets, escalating credentials, or retrying dispatch.
42
+
26
43
## Strategy
27
44
28
45
1.**Anchor intent and failure.** First [capture developer intent from the current session](debug-security-review.md#capture-session-intent-first). Clarification is optional when the user is available; otherwise record unknown intent, continue static diagnosis/clearly authorized work and block uncertain execution/upload/effects. Record revisions, versions, trigger/inputs. [Collect existing evidence](#collect-existing-evidence) from supplied accessible runs or cached logs; otherwise start from source/fixtures, never dispatch for evidence. Compare existing runs with `gh aw audit RUN_ID RUN_ID_2 --group` for recurrence. Label observed/local/fixture/inferred/unavailable evidence.
29
46
30
-
2.**Preflight MCP startup.** Read declarations/imports, credential references, startup commands/destinations without resolving secrets. Follow the [agentic security-review instructions](debug-security-review.md) before executing changed code or starting servers, including local reproductions and dry-run tooling. Before `gh aw mcp list WORKFLOW`, `gh aw mcp list-tools WORKFLOW --server NAME` or `gh aw mcp inspect WORKFLOW --server NAME`, account for startup/connections. Require isolated scoped test bindings, reviewed startup effects and metadata-only calls; otherwise use cached schemas. Do not mutate ambient credentials.
47
+
2.**Preflight MCP startup.** Read declarations/imports, credential references, startup commands/destinations without resolving secrets. Follow the [agentic security-review instructions](debug-security-review.md) before executing changed code or starting servers, including local reproductions. Trusted compile-only dry runs may produce evidence before final review, under that reference's snapshot/restore rules; they do not authorize workflow or MCP execution. Before `gh aw mcp list WORKFLOW`, `gh aw mcp list-tools WORKFLOW --server NAME` or `gh aw mcp inspect WORKFLOW --server NAME`, account for startup/connections. Require isolated scoped test bindings, reviewed startup effects and metadata-only calls; otherwise use cached schemas. Do not mutate ambient credentials.
31
48
32
49
3.**Reproduce one boundary.** Choose compilation/prompt/MCP/agent/safe outputs. Run the real component with existing edge test doubles, minimal inputs, output assertions, disposable files and a timeout. Mock missing context/APIs/credentials. Never contact production or disable the firewall; leave OIDC, approvals, hosted tokens and runners unverified.
33
50
@@ -37,10 +54,16 @@ URLs before replay/report. Never retrieve secrets.
37
54
38
55
## Live Debug Loop
39
56
40
-
Before each upload/dispatch, require a completed [agentic security review](debug-security-review.md) for the current source/lock hashes and human validation: source/lock hashes,
external writes and changed approval protections. Specify run-count, time/spend
57
+
Before each upload/dispatch, require a completed [agentic security review](debug-security-review.md) for the current source/lock hashes and valid human authorization: source/lock hashes,
58
+
triggers/imports/pins, permissions/OIDC, declared credential sources and flows, destinations,
59
+
external writes and changed approval protections. The agent gathers and reviews
60
+
this evidence; the human validates the agent-prepared packet and authorizes
61
+
effects, rather than performing the technical review. Specify run-count, time/spend
43
62
caps and monitoring deadline/poll interval; default to one run.
63
+
An explicit [session authorization](debug-security-review.md#session-authorization)
64
+
may cover subsequent agent-reviewed iterations within the recorded scope and
65
+
bounds without repeated human approval. Any compiler security warning revokes it;
66
+
a later clean compile does not reinstate it.
44
67
Record host/repo, workflow, inputs, reviewed commit and remote ref. Recheck the
45
68
ref before `gh aw run WORKFLOW --ref REVIEWED_REF`; verify the resulting run SHA.
46
69
@@ -69,6 +92,12 @@ after explicitly authorized authentication/SSO repair and renewed live validatio
69
92
70
93
## Development Compilation
71
94
95
+
The agent runs these checks. `--dry-run` must emit locks and cannot be combined
96
+
with `--no-emit`. It is permitted to compile in the current checkout, preserve
97
+
diagnostic outputs in session artifacts, and restore only the compiler's
98
+
changes afterward. Follow the [compile-only snapshot/restore rules](debug-security-review.md#compile-only-validation);
99
+
do not discard user edits or treat restoration as a way to bypass findings.
100
+
72
101
```bash
73
102
gh aw compile WORKFLOW --dry-run
74
103
# Optional reviewed test environment:
@@ -97,13 +126,45 @@ rather than skipping them; review callees separately without the override.
0 commit comments