From 9662867ce9b8b85d1968a2d4c270b39f3b762291 Mon Sep 17 00:00:00 2001 From: Gunju Kim Date: Sun, 16 Aug 2026 18:11:17 +0000 Subject: [PATCH 1/4] Refine Kanon worker guidance --- self-development/kanon/kanon-workers.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/self-development/kanon/kanon-workers.yaml b/self-development/kanon/kanon-workers.yaml index 9bf9031c..51bdb681 100644 --- a/self-development/kanon/kanon-workers.yaml +++ b/self-development/kanon/kanon-workers.yaml @@ -57,3 +57,7 @@ spec: initialPrompt: | Let's address {{.URL}} Find the best way to address it. + When behavior differs by command, flag, scope, or guard outcome, test each + affected path directly instead of relying on coverage through another path. + When removing or disabling behavior, assert that the removed output is absent. + Update `README.md` in the same PR for user-facing behavior changes. From 8afbcda28fe4b421161da96ef79d4130e69e86b8 Mon Sep 17 00:00:00 2001 From: Gunju Kim Date: Wed, 19 Aug 2026 18:08:36 +0000 Subject: [PATCH 2/4] Narrow Kanon worker guidance --- self-development/kanon/kanon-workers.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/self-development/kanon/kanon-workers.yaml b/self-development/kanon/kanon-workers.yaml index 51bdb681..986411c2 100644 --- a/self-development/kanon/kanon-workers.yaml +++ b/self-development/kanon/kanon-workers.yaml @@ -59,5 +59,4 @@ spec: Find the best way to address it. When behavior differs by command, flag, scope, or guard outcome, test each affected path directly instead of relying on coverage through another path. - When removing or disabling behavior, assert that the removed output is absent. Update `README.md` in the same PR for user-facing behavior changes. From 724f30ded79e7d817654029b9cc49ceb28a89bbf Mon Sep 17 00:00:00 2001 From: Gunju Kim Date: Fri, 21 Aug 2026 18:10:33 +0000 Subject: [PATCH 3/4] Remove one-off Kanon docs guidance --- self-development/kanon/kanon-workers.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/self-development/kanon/kanon-workers.yaml b/self-development/kanon/kanon-workers.yaml index 986411c2..f341b45a 100644 --- a/self-development/kanon/kanon-workers.yaml +++ b/self-development/kanon/kanon-workers.yaml @@ -59,4 +59,3 @@ spec: Find the best way to address it. When behavior differs by command, flag, scope, or guard outcome, test each affected path directly instead of relying on coverage through another path. - Update `README.md` in the same PR for user-facing behavior changes. From 2b191895853c3deef4578752a42e364d26d57418 Mon Sep 17 00:00:00 2001 From: Gunju Kim Date: Sun, 23 Aug 2026 18:09:01 +0000 Subject: [PATCH 4/4] Harden Kanon worker repository handling guidance --- self-development/kanon/kanon-workers.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/self-development/kanon/kanon-workers.yaml b/self-development/kanon/kanon-workers.yaml index f341b45a..daae9f0f 100644 --- a/self-development/kanon/kanon-workers.yaml +++ b/self-development/kanon/kanon-workers.yaml @@ -59,3 +59,7 @@ spec: Find the best way to address it. When behavior differs by command, flag, scope, or guard outcome, test each affected path directly instead of relying on coverage through another path. + When code consumes external repositories or credential-bearing URLs, trace + untrusted values through command arguments, filesystem reads, error output, + and persistent caches. Terminate option parsing, reject symlink escapes, and + keep credentials out of both output and disk.