feat(metrics): bind the metrics program to sol at medium effort - #1128
feat(metrics): bind the metrics program to sol at medium effort#1128gewenyu99 wants to merge 1 commit into
Conversation
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
🧙 Wizard CIRun the Wizard CI and test your changes against wizard-workbench example apps by replying with a GitHub comment using one of the following commands: Test all apps:
Test all apps in a directory:
Test an individual app:
Show more apps
Results will be posted here when complete. |
![veria-ai[bot]](https://avatars.githubusercontent.com/in/1723776?s=60&v=4){kind=small}
| metrics: DEFAULT_BINDING, | ||
| metrics: { | ||
| sequence: Sequence.linear, | ||
| harness: Harness.pi, |
There was a problem hiding this comment.
Medium: File access outside the project
Routing metrics to Pi exposes its uncontained file tools by default: an attacker-controlled repository can direct the agent to read or overwrite files outside session.installDir using absolute paths or .. traversal. Keep this program on the sandboxed harness until Pi rejects paths outside the project root for read, write, edit, grep, find, and list operations.
PR overviewThis pull request updates the agent runner switchboard to bind the metrics program to Sol with a medium effort level. A significant security issue remains open: an attacker-controlled repository can direct the metrics agent’s file tools to read or overwrite files outside the project directory using absolute paths or traversal sequences. No issues have yet been addressed, so the metrics program should remain on the sandboxed harness until all file operations enforce the project boundary. Open issues (1)
Fixed/addressed: 0 · PR risk: 7/10 |
1 participant
Stacked on #1102: routes
wizard metricsto gpt-5.6-sol on the pi harness at medium effort instead of the default anthropic binding.🤖 Generated with Claude Code