Fix Module 25 command injection + lab integrity (#24–#27) (#54)

Co-authored-by: claude <claude@jpaul.io> Co-committed-by: claude <claude@jpaul.io>
2026-06-22 14:37:19 -04:00
parent 2684095e2f
commit b061a9da14
4 changed files with 65 additions and 9 deletions
@@ -0,0 +1,17 @@
+# Keep the agent's proposed diff clean (Module 25, Part B).
+#
+# propose_pr() in agent_runner.py runs `git add -A` on purpose — a real agent (Part D) may touch
+# files you can't enumerate ahead of time, so staging everything is the correct behavior. This
+# .gitignore is what keeps that honest: it excludes the Python caches and the lab scaffolding you
+# copied into tasks-app, so the commit the agent proposes is ONLY its real change (agent_demo.py and
+# its test in the simulated path) — not binary .pyc noise or the orchestrator itself.
+
+# Python / tool caches
+__pycache__/
+.pytest_cache/
+.ruff_cache/
+
+# Lab scaffolding copied into tasks-app for this module — not part of the agent's change.
+agent_runner.py
+issue-delete-command.md
+agent-job.yml