From 3d2b64ada64f19bf356ce899de8a576efc841aae Mon Sep 17 00:00:00 2001 From: Jarek Potiuk Date: Fri, 30 Oct 2026 13:42:43 +0100 Subject: [PATCH 1/2] Enable the vetted-ops plugin in the project's Claude settings The skills and the agent guard expect vetted operations to run from the installed magpie-vetted-ops plugin, but the committed project settings only enabled magpie-setup, magpie-utilities and magpie-agent-guard, so a fresh checkout came up without it. Generated-by: Claude Opus 5 --- .claude/settings.json | 3 ++- .../skills/setup/setup_preflight/isolated_fingerprint.py | 2 +- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.claude/settings.json b/.claude/settings.json index 66474d8b2..f1aa1bd49 100644 --- a/.claude/settings.json +++ b/.claude/settings.json @@ -251,6 +251,7 @@ "enabledPlugins": { "magpie-setup@apache-magpie": true, "magpie-utilities@apache-magpie": true, - "magpie-agent-guard@apache-magpie": true + "magpie-agent-guard@apache-magpie": true, + "magpie-vetted-ops@apache-magpie": true } } diff --git a/plugins/magpie-setup/skills/setup/setup_preflight/isolated_fingerprint.py b/plugins/magpie-setup/skills/setup/setup_preflight/isolated_fingerprint.py index b00c19107..19c5d8bed 100644 --- a/plugins/magpie-setup/skills/setup/setup_preflight/isolated_fingerprint.py +++ b/plugins/magpie-setup/skills/setup/setup_preflight/isolated_fingerprint.py @@ -21,4 +21,4 @@ for installs that do not carry the framework source (see `isolated.py`). """ -FRAMEWORK_FINGERPRINT = "sha256:51a5a6c8256be7ff" +FRAMEWORK_FINGERPRINT = "sha256:656a6e3f62b13ec0" From abda04857236e893d7843502861a06b5d4c372f8 Mon Sep 17 00:00:00 2001 From: Jarek Potiuk Date: Fri, 30 Oct 2026 19:22:10 +0100 Subject: [PATCH 2/2] Mirror the vetted-ops plugin in the sandbox-lint baseline sandbox-lint requires every change to the committed .claude/settings.json to be mirrored in tools/sandbox-lint/expected.json (threat model M.29), so enabling magpie-vetted-ops@apache-magpie failed the lint until the baseline lists it too. Generated-by: Claude Opus 5 --- tools/sandbox-lint/expected.json | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/tools/sandbox-lint/expected.json b/tools/sandbox-lint/expected.json index 6be33738b..073420b37 100644 --- a/tools/sandbox-lint/expected.json +++ b/tools/sandbox-lint/expected.json @@ -299,6 +299,7 @@ "enabledPlugins": { "magpie-setup@apache-magpie": true, "magpie-utilities@apache-magpie": true, - "magpie-agent-guard@apache-magpie": true + "magpie-agent-guard@apache-magpie": true, + "magpie-vetted-ops@apache-magpie": true } }