“arbiter”的搜索结果

Opt this repo into codeArbiter — scaffold the root-level .codearbiter/ state store.

中文简介正在准备中。当前显示原文说明。

Show the codeArbiter command catalog — the public command list and what each routes to.

中文简介正在准备中。当前显示原文说明。

从中立立场解决两个智能体分别修改代码产生的Git冲突，对照双方差异和意图，记录每处冲突的取舍理由，并通过构建或测试验证合并结果。

• 解决两个智能体的分支冲突
• 整合并行工作树中的修改
• 核对冲突设计决策的理由

Audit sensitive code and dependencies for security weaknesses, then verify fixes with tests and repeat checks. Reports identify severity, file locations, and remediation steps for issues involving authentication, data protection, injection attacks, and configuration.

中文简介正在准备中。当前显示英语简介。

• Reviewing authentication and access controls
• Auditing payment processing code
• Checking dependencies for known vulnerabilities

Watch a PR's CI to completion — diagnose on red, notify and offer the merge on green. Never auto-merges.

中文简介正在准备中。当前显示原文说明。

The lifecycle gate for a local Codespace-equivalent sandbox. Routed to when the user invokes /ca-sandbox:sandbox to pull an untrusted repo into an ephemeral, host-FS-isolated Docker container, or any of the interaction commands (/ca-sandbox:sandbox-shell, /ca-sandbox:sandbox-exec, /ca-sandbox:sandbox-cp, /ca-sandbox:sandbox-destroy) against an existing box. Five gated phases — pre-flight, clone+build, isolated run, interact, teardown. The load-bearing invariant is structural: untrusted code in the box can never reach the host filesystem (no bind mount, no docker socket, never --privileged, cap-drop ALL, non-root, read-only root). Network defaults to offline; egress out is host-initiated only. Every object is labeled ca.sandbox=1 and torn down on exit.

中文简介正在准备中。当前显示原文说明。

Trim transcript clutter to extend session lifetime — analyze, prune a copy, or toggle the after-each-turn service. Dry-run by default; gains land at resume/compaction, not the current turn.

中文简介正在准备中。当前显示原文说明。

Threat-model a sensitive design with STRIDE on request. Read-only analysis of threats, controls, and implementation constraints.

中文简介正在准备中。当前显示原文说明。

Daily repo hygiene — review the day's repo state, then perform the cleanups under per-action confirmation. Fast-forward only, never destructive without a yes.

中文简介正在准备中。当前显示原文说明。

Show the project's current state at a glance — stage, open tasks, open questions, overrides since the last checkpoint, current branch. Read-only.

中文简介正在准备中。当前显示原文说明。

Run an autonomous sprint from maintained specs and plans, with truthful verification and no duplicate artifact approval ceremonies.

中文简介正在准备中。当前显示原文说明。

The sanctioned task-board mutator — add a queued task, start one (flips to in-progress and stamps the date, minting a dotted ID on pick-up), or mark an in-progress task done. The only blessed write to open-tasks.md.

中文简介正在准备中。当前显示原文说明。

Run an opt-in deep codebase audit with persisted findings. Confirm cost before dispatch; filing and telemetry need separate approval.

中文简介正在准备中。当前显示原文说明。

Verify the active host install, package, command ownership, enforcement, wrapper self-test, and active-dispatch coverage gap. Read-only.

中文简介正在准备中。当前显示原文说明。

Exploratory spike on a throwaway branch — answer a named question with disposable code. Never merges; exits to a findings note or /ca-feature.

中文简介正在准备中。当前显示原文说明。

Run Claude Code INSIDE a ca-sandbox box (`--with-claude`). Routed to when the user wants an agent loop running against an isolated, ephemeral sandbox rather than the host. Authenticates via an env-injected CLAUDE_CODE_OAUTH_TOKEN with no host bind of ~/.claude; the image pins the CLI and disables the autoupdater; HOME is backed by a named volume so the .claude state persists across restart. Five gated phases — posture, image, token, run, teardown. The hard default is offline or Anthropic-domains-only egress, and the token volume is NEVER co-mounted with an untrusted-code run; both are enforced, not advised.

中文简介正在准备中。当前显示原文说明。

Threat-model a sensitive design with STRIDE on request. Read-only analysis of threats, controls, and implementation constraints.

中文简介正在准备中。当前显示原文说明。

Open a PR or finish branch disposition; route CI watching and post-merge cleanup to their owners. Merge and discard need explicit authority.

中文简介正在准备中。当前显示原文说明。

Record user-decided ADRs or inspect their health read-only. Preserve attribution and acceptance evidence.

中文简介正在准备中。当前显示原文说明。

Assemble the governance record for a range — commits, overrides, ADRs, sprint auto-decisions, open questions, checkpoint findings — into one dated audit packet. Read-only.

中文简介正在准备中。当前显示原文说明。

Investigate an unexplained defect or unexpected behavior without changing application code. Use for root-cause diagnosis and an evidence-backed handoff, including a bounded unresolved result. Not for implementing a known fix, new features, or explanation-only questions.

中文简介正在准备中。当前显示原文说明。

Verify authorized feature, fix, and refactor work with scoped obligations, regression-first fixes, behavioral checks, characterization baselines, coverage, and lint.

中文简介正在准备中。当前显示原文说明。

Sanctioned lane for non-behavioral work — docs-only edits, dependency bumps, reverts. Type-scaled gates; no TDD demanded of prose.

中文简介正在准备中。当前显示原文说明。

The banned-primitive gate. Routed to when changed code hashes, signs, encrypts, derives keys, generates security-relevant randomness, configures TLS, or imports a crypto library. Rejects broken primitives, disabled TLS verification, and home-rolled crypto; the approved-primitive list lives in security-controls.md. The auth-crypto-reviewer agent is dispatched as the reviewer.

中文简介正在准备中。当前显示原文说明。