mirror of
https://github.com/tiennm99/DocsGPT.git
synced 2026-10-03 11:11:58 +00:00
arc53-machine
f2760a9138
Research steps ran each tool call straight through the executor, never asking check_pause, so approval-gated actions (including a public-link visitor's wiki edits) and an outside caller's writes on the owner's accounts ran unchecked. A step can't pause, so it now checks each call first and answers any pause with a refusal the model reads, journaled like a headless denial. Headless and research runs share the journaling.