Files
pi-agent-config/docs/evidence/2026-08-27-isolation-probe.md
Kai cbba8faabc docs: pi 0.84.3 runtime mechanics, isolation baseline, personality layering, gateway patterns
Establishes this repository as the authoritative source for Pi agent
configuration across scenarios, starting with the documentation layer.

Key verified findings (probe harness included, zero model tokens):

- The skills section of the system prompt is emitted only when an active tool
  named 'read' exists (system-prompt.js:59,113). Therefore --no-tools silently
  makes every SKILL.md unreachable and --skill a no-op.
- registerTool accepts a plain JSON Schema object, so tool definitions can be
  served from a backend instead of duplicated in TypeScript.
- An extension can shadow a built-in tool by name, which is how a dedicated
  agent gets a path-restricted 'read' while still satisfying the rule above.
- .pi/SYSTEM.md replaces pi's coding-assistant prompt, but the replacement
  branch contributes neither the tool list nor the guidelines.
- Without --no-skills/--no-extensions, user-global resources leak into every
  scenario; probed leak was find-skills, modsearch, summarize.

Measured effect of the full baseline: system prompt 2619 -> 960 characters,
coding-assistant framing and pi-docs paths removed, skill finally reachable.

Secrets are guarded by scripts/verify-no-secrets.sh, installed as a pre-commit
hook. Backups deliberately live outside the repository.
2026-08-26 22:47:53 -07:00

61 lines
2.0 KiB
Markdown

### C · Curator 现状 (--no-tools)
```
flags: --no-tools
PROBE_ALL_TOOLS=[]
PROBE_ACTIVE_TOOLS=[]
PROBE_SP_HAS_SKILLS=false
PROBE_SP_HAS_PROBE_SKILL=false
PROBE_SP_HAS_AGENTS=true
PROBE_SP_HAS_CODING_ASSISTANT=true
PROBE_SP_HAS_SYSTEM_MD=false
PROBE_SP_HAS_PI_DOCS=true
PROBE_SP_LEN=1859
PROBE_SKILLNAMES=[]
```
### A · --no-builtin-tools,无隔离旗标
```
flags: --no-builtin-tools
PROBE_ALL_TOOLS=["read[cli]","bash[builtin]","powershell[builtin]","edit[builtin]","write[builtin]","grep[builtin]","find[builtin]","ls[builtin]","probe_plain_schema[cli]"]
PROBE_ACTIVE_TOOLS=["probe_plain_schema","read"]
PROBE_SP_HAS_SKILLS=true
PROBE_SP_HAS_PROBE_SKILL=false
PROBE_SP_HAS_AGENTS=true
PROBE_SP_HAS_CODING_ASSISTANT=true
PROBE_SP_HAS_SYSTEM_MD=false
PROBE_SP_HAS_PI_DOCS=true
PROBE_SP_LEN=3413
PROBE_SKILLNAMES=["find-skills","modsearch","summarize"]
```
### F · +--no-skills --skill
```
flags: --no-builtin-tools --no-skills --skill /tmp/pi-probe/.pi/skills/probe-skill
PROBE_ALL_TOOLS=["read[cli]","bash[builtin]","powershell[builtin]","edit[builtin]","write[builtin]","grep[builtin]","find[builtin]","ls[builtin]","probe_plain_schema[cli]"]
PROBE_ACTIVE_TOOLS=["probe_plain_schema","read"]
PROBE_SP_HAS_SKILLS=true
PROBE_SP_HAS_PROBE_SKILL=true
PROBE_SP_HAS_AGENTS=true
PROBE_SP_HAS_CODING_ASSISTANT=true
PROBE_SP_HAS_SYSTEM_MD=false
PROBE_SP_HAS_PI_DOCS=true
PROBE_SP_LEN=2619
PROBE_SKILLNAMES=["probe-skill"]
```
### I · 目标最终组合 (+.pi/SYSTEM.md +--approve)
```
flags: --no-builtin-tools --no-skills --skill /tmp/pi-probe/.pi/skills/probe-skill --approve
PROBE_ALL_TOOLS=["read[cli]","bash[builtin]","powershell[builtin]","edit[builtin]","write[builtin]","grep[builtin]","find[builtin]","ls[builtin]","probe_plain_schema[cli]"]
PROBE_ACTIVE_TOOLS=["probe_plain_schema","read"]
PROBE_SP_HAS_SKILLS=true
PROBE_SP_HAS_PROBE_SKILL=true
PROBE_SP_HAS_AGENTS=true
PROBE_SP_HAS_CODING_ASSISTANT=false
PROBE_SP_HAS_SYSTEM_MD=true
PROBE_SP_HAS_PI_DOCS=false
PROBE_SP_LEN=960
PROBE_SKILLNAMES=["probe-skill"]
```