- Shipped
- September 5, 2026 at 2:00 AM UTC
- Author
- Kamo
- Commit
- 45829a6
and deliberately not examined here. `coder_flags` on the agent is the one thing that decides what a session runs with — its own comment calls it "the security boundary of the whole dispatch path" — so a second vocabulary in this service would be a second opinion that could disagree with it, and the one that disagreed would be the one nobody was reading. Anything outside it comes back as a refusal with a sentence the console prints verbatim, exactly as an unknown working directory already does. caller that predates this sends.