
Before a repo agent comments in public, quarantine the output
A crafted public GitHub issue tricked an agentic workflow into posting private repo contents as a public comment. Narrower read access wouldn't have stopped it alone — the write path needed its own check.

















