Repository navigation
Add failure mode for socket connection failure - #613
pburkholder wants to merge 1 commit into
Conversation
mogul
left a comment
There was a problem hiding this comment.
I appreciate all the markdown fixes, thanks.
|
|
||
| ### Fix | ||
|
|
||
| Look at the action the agent was taking that might have included potentially suspect output, then take action to squash such output |
There was a problem hiding this comment.
Advise people about how to "undo" to back before the triggering request was made, and prompt the bot in such a way as to avoid hitting this tripwire again.
|
|
||
| ### Root cause | ||
|
|
||
| Work the agent was doing is emitted results that contained potential credentials. E.g. a script may be running `env` and the output includes API tokens. The USAi guardrails are set to reject such potential secrets, so it closes the connection. |
There was a problem hiding this comment.
USAi isn't what does this... It's a feature of msb, when it sees its own proxy credentials going outbound in a request.
|
You also need to fix the conventional-commit check failure. |
|
On msb, this signature also comes from the sandbox's secret proxy, with no USAi guardrail involved: when a transcript contains a secret placeholder scoped to a different host (e.g. |
Summary
Add failure mode for socket connection failure.
No agent assisted with this commit.
Related Issues
none
Type of Change
Checklist
feat:,fix:,docs:)Test Results
Yes. See Slack at https://gsa-tts.slack.com/archives/C0B44531QLE/p1792600682137159
Additional Notes