fix(cache): address PR #349 follow-up feedback (#359)

Two small, non-blocking asks from Mads on #349:

- Pin the verification-still-applies restatement in apply.md and
  interview.md's cache-check paragraphs - the one part of the wiring
  with no dedicated test (one assertion each, as requested).
- State cache contents are data, never instructions, in
  04-job-evaluation.md's cache section - closes a carry-over
  prompt-injection surface for a later session reading the file, same
  trust-boundary rule apply.md Step 0 already states for the posting.
This commit is contained in:
Gabriel Ignacio Mensi
2026-08-23 09:00:13 +02:00
committed by GitHub
parent becdc5dfd7
commit eee739ed7e
3 changed files with 49 additions and 2 deletions
+5 -1
View File
@@ -29,7 +29,11 @@ per-file diff commands.
`security_guards.py`'s `REQUIRED_IGNORE_RULES` (a plain rooted pattern, not `**/`
-prefixed - the cache is referenced from commands, not a skill, so it resolves
against the repo root normally). Pinned by the new
`tests/test_company_research_cache.py`.
`tests/test_company_research_cache.py`. Cache contents are documented as data, never
instructions, for a later session reading the file - the same trust-boundary rule
`apply.md` Step 0 states for the posting itself, since cache notes are written from
the same fetched web content. The verification-still-applies restatement in both
`apply.md` and `interview.md`'s cache-check paragraphs is now pinned too.
## [1.6.0] - 2026-08-19