From 1f9b8683e3b36344c113288cc7485c53b4c73759 Mon Sep 17 00:00:00 2001 From: Kyle Sexton <153232337+kyle-sexton@users.noreply.github.com> Date: Sun, 4 Oct 2026 13:50:54 -0400 Subject: [PATCH] docs: state the permission mode each CI lane actually runs Intake triage passes --permission-mode dontAsk; the review lanes run claude-code-action tag mode, which passes acceptEdits with a fixed allowlist. Both have no prompt handler, so unlisted tools are denied. Co-Authored-By: Claude Opus 5.5 --- AGENTS.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/AGENTS.md b/AGENTS.md index 543bfd3dfe..cf458e0891 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -33,7 +33,9 @@ head, and no hold applies (the `do-not-merge` label, a hold in the body, or a hu to wait); ask first when any of those is missing, or when the change alters what agents may do unattended. Launch unattended local lanes with `--permission-mode auto`; a lane whose action the auto-mode classifier denies records the denial -in its lane telemetry and moves on. CI lanes run `--permission-mode dontAsk` instead, under +in its lane telemetry and moves on. CI lanes run with no prompt handler, so an unlisted tool is denied: intake triage passes +`--permission-mode dontAsk`, and the review lanes run claude-code-action's tag mode, which passes +`acceptEdits` with a fixed tool allowlist. All run under the hardening in [ADR 0049](docs/adr/0049-run-ci-lanes-on-github-hosted-runners-under-trigger-and-token-hardening.md), which also answers the untrusted-text risk below for them. A hook `ask` or `permissions.ask` rule can open a dialog no one answers, so lane sessions carry none. `--permission-prompts none` is documented for print mode and