Fixes #
- Frontend UI — page / component / setting / interaction under
frontend/ - Backend API — endpoint / SSE event / request-response shape under
backend/app - Agents / LangGraph — agent node, graph wiring,
langgraph.json, or prompt change- Prompt-layer self-check: for every data source in the new text, what is its trust level, and which channel should it ride? Model-supplied or user-influenceable values belong on the untrusted, sanitized data channel (e.g. the task
HumanMessage) — never interpolated into framework-owned system text, even neutralized.
- Prompt-layer self-check: for every data source in the new text, what is its trust level, and which channel should it ride? Model-supplied or user-influenceable values belong on the untrusted, sanitized data channel (e.g. the task
- Sandbox —
docker/or sandboxed execution - Skills — change under
skills/ - Dependencies — new/upgraded entry in
backend/pyproject.tomlorfrontend/package.json(say what it buys us) - Default behavior change — changes existing behavior without the user opting in (default model, default setting, data shape)
- Docs / tests / CI only — no runtime behavior change
Tool(s) used:
How you used it:
- I've read and understand every line of this change and take responsibility for it — it's not unreviewed AI output.