Skip to content

Enable the vetted-ops plugin in the project's Claude settings - #1907

Merged
potiuk merged 2 commits into
apache:mainfrom
potiuk:enable-vetted-ops-plugin
Oct 30, 2026
Merged

potiuk merged 2 commits into
apache:mainfrom
potiuk:enable-vetted-ops-plugin

Conversation

@potiuk

@potiuk potiuk commented Oct 30, 2026

Copy link
Copy Markdown
Member

The skills and the agent guard expect vetted operations to run from the installed magpie-vetted-ops plugin,
but the committed .claude/settings.json only enabled magpie-setup, magpie-utilities and magpie-agent-guard,
so a fresh checkout of this repo came up without it.

This enables magpie-vetted-ops@apache-magpie alongside the other three.
The isolated-setup-fingerprint hook restamped isolated_fingerprint.py because the settings file feeds the secure-setup fingerprint.


Was generative AI tooling used to co-author this PR?
  • Yes — Claude Code (Claude Opus 5)

Generated-by: Claude Code (Claude Opus 5) following the guidelines

🤖 Generated with Claude Code

@github-actions github-actions Bot added family:setup setup-* skills capability:platform Framework / agent substrate skills (install, verify, doctor, override, status, setup bootstrap) labels Oct 30, 2026
The skills and the agent guard expect vetted operations to run from
the installed magpie-vetted-ops plugin, but the committed project
settings only enabled magpie-setup, magpie-utilities and
magpie-agent-guard, so a fresh checkout came up without it.

Generated-by: Claude Opus 5
sandbox-lint requires every change to the committed .claude/settings.json
to be mirrored in tools/sandbox-lint/expected.json (threat model M.29),
so enabling magpie-vetted-ops@apache-magpie failed the lint until the
baseline lists it too.

Generated-by: Claude Opus 5
@potiuk
potiuk force-pushed the enable-vetted-ops-plugin branch from d4e5a73 to abda048 Compare October 30, 2026 18:28
@potiuk
potiuk merged commit dbaa84f into apache:main Oct 30, 2026
13 checks passed
@github-actions github-actions Bot added family:tools tools/* substrate:sandbox Tool substrate: agent isolation, egress control, settings audit labels Oct 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

capability:platform Framework / agent substrate skills (install, verify, doctor, override, status, setup bootstrap) family:setup setup-* skills family:tools tools/* substrate:sandbox Tool substrate: agent isolation, egress control, settings audit

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant