Skip to content

feat(rules): add agent_config pack (AGCFG-004..007, MCPCFG-002) - #183

Merged
ivanpaghubasan merged 1 commit into
mainfrom
feat/agcfg-preauth-config
Oct 14, 2026
Merged

ivanpaghubasan merged 1 commit into
mainfrom
feat/agcfg-preauth-config

Conversation

@ivanpaghubasan

Copy link
Copy Markdown
Collaborator

Adds the agent_config category: five repo-scope rules for pre-trust harness config committed to a repo.

  • AGCFG-004: .claude/settings.json auto-enables project MCP servers
  • AGCFG-005: project hooks run repo scripts, curl, bash -c, or touch credential paths
  • AGCFG-006: workspace env/config overrides sandbox, proxy, endpoint or loader trust
  • AGCFG-007: editor settings auto-approve agent actions
  • MCPCFG-002: .mcp.json launches a local command

The category loads unconditionally. Each rule's own repo_* predicate gates it, so no SDK is needed in code.

schema_version 22 → 23. The predicates ship in engine PR trustabl/agent-reliability-analyzer#260. Older engines skip these five rules and run the rest.

Rule count: 334 → 339. trustabl rules validate: 339 rules valid under schema 23. Engine check-rules-sync.sh: in sync.

Rationale docs: trustabl/trustabl-rulebook (feat/agcfg-preauth-config).

@ivanpaghubasan
ivanpaghubasan merged commit 5be8ed7 into main Oct 14, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant