Skip to content

fix: prevent worker issue hijacking and require cross-repo TODO commit+push#2450

Merged
marcusquinn merged 1 commit intomainfrom
fix/issue-hijacking-and-cross-repo-todos
Feb 27, 2026
Merged

fix: prevent worker issue hijacking and require cross-repo TODO commit+push#2450
marcusquinn merged 1 commit intomainfrom
fix/issue-hijacking-and-cross-repo-todos

Conversation

@marcusquinn
Copy link
Owner

@marcusquinn marcusquinn commented Feb 27, 2026

Summary

Fixes two orchestration gaps discovered when reviewing t1344/t1345 issue linkage:

Changes

full-loop.md headless worker rules:

  • Rule 9 expanded: When creating TODOs/PLANS in another repo, always git add && commit && push immediately. Includes example commands.
  • Rule 10 added: Issue-task alignment — workers must gh issue view and verify their PR matches the issue description before linking. If work is unrelated, create a new issue instead.

Also done (not in this PR)

Fixes #2421

Summary by CodeRabbit

  • Documentation
    • Expanded workflow documentation with comprehensive guidance for managing and propagating tasks across multiple repositories
    • Added mandatory "Issue-task alignment" verification process to ensure all work aligns with linked issues before submitting PRs
    • Enhanced pre-PR validation requirements including strengthened gating logic and improved traceability controls

…t+push

Two orchestration improvements to full-loop.md headless worker rules:

Rule 9 (cross-repo routing): When creating TODOs/PLANS in another repo,
always commit and push immediately. Uncommitted TODOs are invisible to
the supervisor and issue-sync workflow. Previously, a worker created
TODOs in ~/Git/aidevops/ from an awardsapp session but left them
uncommitted — they sat invisible until a human noticed.

Rule 10 (issue-task alignment): Workers must verify their PR matches
the issue's actual description before linking. Workers hijacked issues
t1344 and t1345 — PR 'Fix ShellCheck SC1091' closed issue 'Add local
dev row to build-plus.md' because both used the same task ID. The
actual work described by those issues was never done.

Also reopened issue #2421 (t1344) and commented on #2440 (t1345)
to correct the state.
@gemini-code-assist
Copy link

Warning

You have reached your daily quota limit. Please wait up to 24 hours and I will start processing your requests again!

@github-actions github-actions bot added the bug Auto-created from TODO.md tag label Feb 27, 2026
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Feb 27, 2026

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

📥 Commits

Reviewing files that changed from the base of the PR and between a51ec70 and abace0e.

📒 Files selected for processing (1)
  • .agents/scripts/commands/full-loop.md
 _________________________________________________________________
< I am below the bugs. I am above the bugs. I am around the bugs. >
 -----------------------------------------------------------------
  \
   \   (\__/)
       (•ㅅ•)
       /   づ

✏️ Tip: You can disable in-progress messages and the fortune message in your review settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch fix/issue-hijacking-and-cross-repo-todos

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions
Copy link

🔍 Code Quality Report

�[0;35m[MONITOR]�[0m Code Review Monitoring Report

�[0;34m[INFO]�[0m Latest Quality Status:
SonarCloud: 0 bugs, 0 vulnerabilities, 36 code smells

�[0;34m[INFO]�[0m Recent monitoring activity:
Fri Feb 27 04:41:39 UTC 2026: Code review monitoring started
Fri Feb 27 04:41:40 UTC 2026: SonarCloud - Bugs: 0, Vulnerabilities: 0, Code Smells: 36

📈 Current Quality Metrics

  • BUGS: 0
  • CODE SMELLS: 36
  • VULNERABILITIES: 0

Generated on: Fri Feb 27 04:41:42 UTC 2026


Generated by AI DevOps Framework Code Review Monitoring

@sonarqubecloud
Copy link

@marcusquinn marcusquinn merged commit cc6a3c6 into main Feb 27, 2026
20 of 21 checks passed
@marcusquinn marcusquinn deleted the fix/issue-hijacking-and-cross-repo-todos branch March 3, 2026 03:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Auto-created from TODO.md tag

Projects

None yet

Development

Successfully merging this pull request may close these issues.

t1344: Add local dev / .local domains / LocalWP to build-plus.md Domain Expertise Check

1 participant