docs(decisions): ADR 0003 — system prompts stay user-directed #103

2026-05-29T00:40:55-04:00

didericis commented

2026-05-29 00:40:55 -04:00

Summary

Record the decision (ADR 0003) that we considered auto-generating an agent's system prompt from its bottle's egress + git config — so the agent would automatically know what it has access to — but opted to keep prompts user-directed.

Why

We may deliberately want to withhold access information from the agent (keep the prompt silent about an allowlisted host even though egress permits it).
The agent can infer its own access regardless (try a request, read env / git remote -v / gitconfig), so auto-injection is a convenience, not a capability.
Accepted cost: operators restate access in the prompt when they want the agent to know it (as just done for the Gitea instance), with possible config↔prompt drift.

Docs-only.

## Summary Record the decision (ADR 0003) that we considered auto-generating an agent's system prompt from its bottle's egress + git config — so the agent would automatically know what it has access to — but opted to keep prompts **user-directed**. ## Why - We may deliberately want to withhold access information from the agent (keep the prompt silent about an allowlisted host even though egress permits it). - The agent can infer its own access regardless (try a request, read env / `git remote -v` / gitconfig), so auto-injection is a convenience, not a capability. - Accepted cost: operators restate access in the prompt when they want the agent to know it (as just done for the Gitea instance), with possible config↔prompt drift. Docs-only.

didericis added 1 commit 2026-05-29 00:40:56 -04:00

docs(decisions): ADR 0003 — system prompts stay user-directed

test / integration (pull_request) Successful in 41s

Details

test / integration (push) Successful in 42s

Details

test / unit (pull_request) Successful in 28s

Details

test / unit (push) Successful in 26s

Details

2ea73e40a8

Record that we considered auto-generating an agent's system prompt from
its bottle's egress/git config (so it would know its access up front)
but opted to keep prompts operator-authored: we may want to withhold
that information from the agent directly, and the agent can infer its
access on its own regardless.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

didericis merged commit 2ea73e40a8 into main

2026-05-29 00:42:38 -04:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: didericis/bot-bottle#103