This repository was archived by the owner on Aug 6, 2026. It is now read-only.
Conversation
Generated-By: PostHog Code Task-Id: d2cc4bfb-076a-4011-901a-c34986241e82
|
React Doctor found no issues in the changed files. 🎉 Reviewed by React Doctor for commit |
tatoalo
added
the
Stamphog
tatoalo
marked this pull request as ready for review
July 22, 2026 12:43
Contributor
|
Reviews (1): Last reviewed commit: "Harden separate PR authorization prompts" | Re-trigger Greptile |
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
Trivial, well-tested change hardening agent prompt text to prevent PR-authorization confusion; "auth" title flag is incidental (prompt-injection hardening, not authentication/authorization code), and author has STRONG familiarity with these exact lines.
- Author wrote 100% of the modified lines and has 63 merged PRs in these paths (familiarity STRONG).
- 👍 on the PR from greptile-apps[bot].
Gate mechanics and policy version
| Gate | Result | |
|---|---|---|
| prerequisites | ✓ | all clear |
| deny-list | ✓ | no deny categories matched |
| size | ✓ | 8L, 1F substantive, 17L/2F incl. docs/generated/snapshots — within ceiling |
| tier | ✓ | T1-agent / T1a-trivial (17L, 2F, single-area, unknown) |
| stamphog 2.0.0b3 | .stamphog/policy.yml @ fb1d37c · reviewed head d3505c3 |
tatoalo
enabled auto-merge (squash)
July 22, 2026 12:48
tatoalo
disabled auto-merge
July 22, 2026 12:48
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Problem
Why: Reviewer-authored or retrieved text must not be able to authorize publishing a separate pull request when only a direct user instruction should override the single-PR default.
Changes
Clarify all existing-PR prompt paths so only the user’s own direct message can authorize a separate branch or PR, and explicitly exclude quoted, retrieved, generated, and reviewer-authored content. Add regression assertions for each prompt path.