Unverified50% confidenceFactExact time
read_memory and append_memory are classified as PLANNING_TOOLS, so each call does not trigger a permission confirmation popup.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/17/2026
First Seen
Valid until: 1/15/2027
Sources
Related Entities
Related Claims
Unverified"Allow read_file" is not a valid policy; "only allow under /tmp/run-{id}/, and only allow the first twenty calls" is.66% similarUnverified对象存储等密钥信息只在本地读取，不写死在代码里，也不提交到代码仓库。64% similarUnverifiedThe screen-reading approach isolates the authentication step within manual operation, so the AI can only see pages the user actively opens and cannot initiate requests, turn pages, or export data on its own.63% similarUnverifiedThe control plane, as a GitHub App, has only two permissions, Metadata: read and Actions: read & write, and has no Contents permission, so it cannot clone repositories or read files.62% similarUnverifiedWhen entering /loop without any content, it reads loop.md or a built-in default prompt.61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1053578API
curl https://kongchang.com/api/v1/knowledge/claims/1053578MCP
get_claim(id=1053578)