Operator tasks move from the Inbox into Tasks with the Waits on Operator filter. Review and commit asks carry the staged diff; a file whose old or new blob holds an armour line or a detection-pattern match, or every file when no pattern loads, ships only its path, status, mode and counts. The approval binds to the staged tree id from git write-tree, the encoded request body respects the hub limit, and the hub image ships every client module signed.py loads. Committed below the bar on the operator's word 2026-11-12 (no further per-bundle tests, one gate after the merge): the full hub suite and the W1 e2e never ran, two high MEDUSA rows (sandbox_paths.py FLOOR, permission_hook.py ask POST) wait for their acceptance. 🎯 Fix: 85 % 💥 Break: 12 % 💸 Cost: 30 % ⏱️ Time: 30 % 🛡️ Security: 50 % 🏆 Score: 100 🚦 Gate: ⛔ fix 85 % < 90, break 12 % > 5; security 50 % < 100: ask the operator before the commit Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
21 lines
877 B
Python
21 lines
877 B
Python
"""Returns:
|
|
DIFF_LIMIT: bytes of JSON-encoded patch text one review diff carries, in
|
|
the client that builds it and the hub that takes it.
|
|
DIFF_BODY_LIMIT: bytes of request body the hub reads for an ask or a
|
|
review request; the client sends a larger one without its diff.
|
|
FILE_CAP: files one review diff lists; the client builds no diff of more.
|
|
PATH_LIMIT: characters of a path the hub takes, a diff path included;
|
|
the client builds no diff with a longer one.
|
|
NOTES_LIMIT: characters of review notes the hub takes; the client refuses
|
|
longer notes instead of cutting them.
|
|
WITHHELD: the note of a diff entry that ships without its patch because
|
|
its content may hold a secret.
|
|
"""
|
|
|
|
DIFF_LIMIT = 2 << 20
|
|
DIFF_BODY_LIMIT = 4 << 20
|
|
FILE_CAP = 5000
|
|
PATH_LIMIT = 4096
|
|
NOTES_LIMIT = 100_000
|
|
WITHHELD = "content withheld"
|