Protected personality files and secret redaction in logs
维护者通常 1 天内回复
还没有人认领这个 Issue。
评估
调研方向
Start with how skill changes already become pending diffs, then check whether the same approval path can cover writes from sentient/memory/workspace.py and the memory and files tools. Separately, find the logging setup in sentient/app.py and the keychain access in sentient/secrets.py to see where a redaction filter would attach. Done means an agent write to a protected file asks first, a known secret value never appears in logs or tool errors, and tests cover both. The issue leaves the approval mechanism unspecified, so confirm the design with a maintainer before coding.
由索引模型根据 Issue 内容生成。
描述
An injected instruction that rewrites SOUL.md or a skill persists forever. Secrets that leak into tool errors and logs end up in bug reports. Hermes v0.21.0 shipped protection for both.
Idea:
- agent writes to SOUL.md, USER.md, MEMORY.md, skills and config always require approval
- secrets (keychain values, tokens, keys) are redacted from tool errors, logs and checkpoints
Status in Sentient today: Partial. Skill changes already land as pending diffs, and secrets live in the keychain (sentient/secrets.py). Workspace file writes and log redaction are not covered.
Where: sentient/memory/workspace.py, sentient/tools/builtin/memory_tool.py, sentient/tools/builtin/files_tool.py, a logging filter set up in sentient/app.py, and sentient/secrets.py.
Done when:
- an agent write to a protected file asks first
- a known secret value never appears in logs or tool errors
- tests cover both
Sources:
Roadmap ID: SAFE-16 · Priority: P2 · Size: S
- 主要语言
- Python
- 星标
- 702
- 派生
- 113
- 平均合并
- 5 小时 8 分钟
- 30 天内合并 PR
- 171
环境准备
- 没有 Dockerfile 或 Docker Compose 文件
- 有 Pull Request 模板
- 阅读贡献指南
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
existence-master/Sentient 的其他 Issue
-
area: channels enhancement good first issue priority: P2 size: S
难度 2/5 1-3 小时 新手友好度 78/100
existence-master/Sentient#457 ·
维护者通常 1 天内回复
-
area: desktop bug good first issue priority: P2 size: S
难度 2/5 1-3 小时 新手友好度 82/100
existence-master/Sentient#454 ·
维护者通常 1 天内回复
-
area: desktop bug priority: P2 size: S
难度 2/5 1-3 小时 新手友好度 82/100
existence-master/Sentient#440 ·
维护者通常 1 天内回复
-
area: desktop bug
难度 2/5 1-3 小时 新手友好度 78/100
existence-master/Sentient#426 ·
维护者通常 1 天内回复
-
area: memory bug flaky
难度 2/5 1-3 小时 新手友好度 76/100
existence-master/Sentient#422 ·
维护者通常 1 天内回复
查看 existence-master/Sentient 的全部 Issue
相似的 Issue
-
难度 2/5 1-3 小时 新手友好度 79/100
SACGF/variantgrid#2341 · 1 条评论 ·
维护者通常 1 天内回复
-
难度 1/5 1 小时以内 新手友好度 88/100
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 78/100
维护者通常 2 天内回复
-
comp/cli P3 type/security
难度 2/5 1-3 小时 新手友好度 68/100
NousResearch/hermes-agent#141420 · 1 条评论 ·
维护者通常 1 天内回复
-
CKV_GCP_18 (GKEPublicControlPlane) passes when master_authorized_networks_config is absent, control plane is internet-reachable可能已有人在做 @Varshith-Kali 今天认领。 未关闭
难度 2/5 1-3 小时 新手友好度 76/100
bridgecrewio/checkov#7753 ·
维护者通常 1 天内回复