[tylercschneider]

One Sentence Summary

A developer whose session is paused on a question to the owner can now use common read-only shell commands to look up the answer, instead of having them refused.

ACs Covered

• A read-only shell command that discards its output or sends stderr to stdout runs while the question is open.
• A read-only command prefixed with timeout or a variable assignment runs, and a changing command with the same prefix is refused.
• Read-only command substitutions, loops, conditionals and xargs run, and a changing command inside any of them is refused as a whole.
• git fetch, rev-list, ls-tree, cat-file and for-each-ref run while the question is open.
• gh api reads run and gh api writes are refused while the question is open.
• A refusal says reads are still allowed and to look up another way, rather than to stop.

Decision Log

How should the question block recognise a read-only shell command?

It keeps a list of known read commands and widens it, over refusing only known changing commands.

Code Example

Not relevant.

Out of Scope

• The refusal that applies after the answering turn has ended is unchanged.

Ticket Billed Against

Not specified.

Tokens Used

• Input: 24
• Output: 16,576
• Cache read: 1,272,167
• Cache write: 18,241
• Total: 1,307,008

Effort

• Sessions: 0
• Prompts: 0
• Words typed: 0
• Pasted blocks: 0
• Words pasted: 0
• Questions answered: 0
• Interruptions: 0
• Rejected tool calls: 0
• Claude working time: 0m
• Your active time: 0m

Time Spent

• Total: 4m
• Waiting on the owner: 0m
• Model time: 0m
• Worktree setup: 0m
• Reading: 0m
• Test-first cycles: 0m
• Commits: 0m
• Ticking criteria and recording decisions: 0m
• Full-suite checks: 0m
• Other tool calls: 4m

---

Generation Metadata

Scribe: pr-scribe 9d1ee89
Rules: pr-body 9d1ee89, draft-reading 0d470c5, writing-style c3c2f61
Model: claude-sonnet-5-5, cc 2.1.317