Skip to content

fix: treat a named request as consent to force - #75

Open
AntTheLimey wants to merge 3 commits into
mainfrom
fix/skills-force-consent
Open

AntTheLimey wants to merge 3 commits into
mainfrom
fix/skills-force-consent

Conversation

@AntTheLimey

@AntTheLimey AntTheLimey commented Oct 21, 2026 •

Copy link
Copy Markdown
Member

What changed

The managed, byoc and controlplane skills now tell an agent that a
request naming the action and its target is consent to pass
--force. That consent covers the named action only. The agent asks
before any further destructive step, such as deleting branches or a
waiver flag.

Before, --force was reserved for unattended runs. An agent asked to
"resize this database" stopped at the confirmation prompt and never
reached the API's refusal, so it could not tell the user that branches
were blocking the resize.

A second commit widened the managed skill's description and is
reverted here: measured, it did not make the skill load more often.

Checks

  • go test ./internal/clitest/ .: pass (2,509 test runs)
  • make lint-docs: 0 errors, 0 warnings across 667 files

A request that names a destructive action and its target is consent
to pass --force. The consent stops at that action: any further
destructive step it turns out to need, such as deleting branches,
still needs the user's say-so. The old rule held back --force for
unattended runs only, so an agent asked to resize a database stopped
at the CLI's prompt and never learned that branches blocked it.
The managed skill's description triggered only on product words, so
a request such as "back up <name>" or "delete <name>" never loaded
it. Agents then searched the filesystem for the name instead of
asking the API. The description now covers a request that names a
database only by its name.
@AntTheLimey AntTheLimey changed the title fix: treat a named request as consent to force fix: skill rules from the agent benchmark Oct 21, 2026
A benchmark rerun showed no gain: on prompts that name only the
database, the skill loaded in 5 of 15 runs with the change against
7 of 15 without it. Naming the product is what loads it, so the
extra 115 bytes come back out.
@AntTheLimey AntTheLimey changed the title fix: skill rules from the agent benchmark fix: treat a named request as consent to force Oct 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant