Skip to content

fix(#272): remove signing from convention discovery lists#296

Open
fullsend-ai-coder[bot] wants to merge 1 commit into
mainfrom
agent/272-remove-signing-discovery
Open

fix(#272): remove signing from convention discovery lists#296
fullsend-ai-coder[bot] wants to merge 1 commit into
mainfrom
agent/272-remove-signing-discovery

Conversation

@fullsend-ai-coder

Copy link
Copy Markdown
Contributor

Summary

The fix agent non-deterministically adds Signed-off-by trailers because two skill files contain contradictory instructions. The convention-discovery steps tell agents to learn "signing" conventions from target repos, while later prohibitions forbid git commit -s. When a target repo requires DCO signing, the agent sometimes follows the discovered convention instead of the prohibition, wasting the entire run.

This PR removes "signing" from the convention discovery lists in both affected skills:

  • skills/fix-review/SKILL.md: (message format, signing)(message format)
  • skills/code-implementation/SKILL.md: signing requirements, message formatmessage format

The existing "NEVER use git commit -s" prohibitions and post-script hard gates remain as defense-in-depth.

Testing

  • make test passes (one pre-existing failure in post-triage-test.sh unrelated to this change)
  • make check-bundle passes
  • Verified that no other references to "signing" remain in the skills directory
  • Verified that the "NEVER use git commit -s" prohibitions still exist in both files

Closes #272

Post-script verification

  • Branch is not main/master (agent/272-remove-signing-discovery)
  • Secret scan passed (gitleaks — fc7b83e1e64b3d786b2d500189c142759fa06451..HEAD)
  • PR body secret scan passed (gitleaks — no-git)
  • Pre-commit hooks passed (authoritative run on runner)
  • Tests ran inside sandbox

The fix and code agents non-deterministically add Signed-off-by
trailers because both skills instruct agents to discover "signing"
conventions from target repos. When a target repo requires DCO
signing, the agent sometimes follows the discovered convention
instead of the later "NEVER use git commit -s" prohibition.

Remove "signing" from the convention discovery bullet in both
skills/fix-review/SKILL.md and skills/code-implementation/SKILL.md.
The existing prohibitions and post-script hard gates remain as
defense-in-depth.

Closes #272
@fullsend-ai-coder
fullsend-ai-coder Bot requested a review from a team as a code owner July 20, 2026 07:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Fix agent repeatedly fails with Signed-off-by post-script block on PR #5273

0 participants