Fifth test — issue #5's run had github_token but Bash tool access itself was disabled by default, so gh/git fetch/WebFetch were all auto-denied. Added a scoped --allowedTools allowlist (gh issue view/comment, gh pr create, git checkout/add/commit/push). Confirming the agent can now actually read this issue and comment.
Fifth test — issue #5's run had
github_tokenbut Bash tool access itself was disabled by default, sogh/git fetch/WebFetchwere all auto-denied. Added a scoped--allowedToolsallowlist (gh issue view/comment, gh pr create, git checkout/add/commit/push). Confirming the agent can now actually read this issue and comment.