2deecb9fc4
Evidence-based validation of the hardened workflows (no GitHub test state created; no branch or worktree created or deleted). All six fork-safety claims were independently re-derived and CONFIRMED: - No live pull_request_target trigger (the only match is Task 02's warning comment; validate-registry.yml parses to pull_request + workflow_dispatch). - Fork-reachable surface is exactly 5 workflows, each with top-level contents: read and no job-level override. - Zero secret references in any fork-reachable workflow. - Every secret-bearing workflow is unreachable from a fork (push / workflow_dispatch, or issue_comment gated to OWNER/MEMBER). - Internal validation: PR #334's failed Build & Validate blocked the PR Checks Summary (exit 1); #336's 7 checks all executed and passed. Gaps found and closed: - Add persist-credentials: false to the 7 checkouts missing it (installer-checks 6, validate-test-suites 1), so all 11 checkouts across the fork-reachable surface now avoid persisting the token to .git/config. - Remove validate-test-suites.yml's failure-path PR comment step. It called issues.createComment, which needs issues: write. This was a regression introduced by Task 05: the workflow previously had no permissions block and inherited the repository's write default, so the step worked; adding the correct contents: read broke it. Deleted rather than granting write to a fork-reachable workflow — for fork PRs GitHub forces a read-only token, so the step could never work there anyway. Failures stay visible via the red check and the uploaded report. Repository setting changed (approved, read-back verified, recorded in the doc): default_workflow_permissions write -> read and can_approve_pull_request_reviews true -> false, so future workflows without an explicit permissions block default to read-only. No current workflow relied on the write default. |
||
|---|---|---|
| .. | ||
| agents | ||
| contributing | ||
| features | ||
| getting-started | ||
| github | ||
| guides | ||
| images | ||
| maintenance | ||
| model-providers/oss | ||
| planning | ||
| README.md | ||
OpenAgents Control Documentation
Welcome to the OpenAgents Control documentation! This directory contains all documentation organized by topic.
📚 Documentation Index
Getting Started
- Installation Guide - Complete installation guide with collision handling
- Collision Handling - Quick reference for install script collision strategies
Features
- System Builder - Build complete AI systems tailored to your domain
- Quick Start - Get started with the system builder
- Complete Guide - Detailed documentation and examples
- Agent System Blueprint - Architecture patterns and how to extend the system
Contributing
- Contributing Guide - How to contribute to the project
- Code of Conduct - Community guidelines
GitHub
- GitHub Settings - Repository settings checklist
🚀 Quick Links
For New Users
- Start with the main README in the repository root
- Follow the Installation Guide
- Use
opencode --agent OpenAgentto start building - Read the OpenAgent Guide to understand the workflow
For Contributors
- Read the Contributing Guide
- Review the Code of Conduct
- Check out good first issues
For Advanced Users
- Study the Agent System Blueprint
- Try the System Builder
- Create custom agents and commands
📖 Documentation Structure
docs/
├── README.md # This file
├── getting-started/
│ ├── installation.md # Installation guide
│ └── collision-handling.md # Collision handling reference
├── features/
│ ├── system-builder/
│ │ ├── README.md # System builder quick start
│ │ └── guide.md # System builder complete guide
│ └── agent-system-blueprint.md # Architecture patterns
├── contributing/
│ ├── CODE_OF_CONDUCT.md # Community guidelines
│ └── CONTRIBUTING.md # Contribution guide
└── github/
└── GITHUB_SETTINGS.md # Repository settings
🔍 Finding What You Need
I want to...
...install OpenAgents Control → Installation Guide
...understand collision handling → Collision Handling
...build a custom AI system → System Builder
...understand the architecture → Agent System Blueprint
...contribute to the project → Contributing Guide
...report a bug or request a feature → GitHub Issues
💡 Additional Resources
- Main README: ../README.md - Complete overview and quick start
- CHANGELOG: ../CHANGELOG.md - Version history and updates
- GitHub Repository: https://github.com/darrenhinde/OpenAgentsControl
- OpenCode CLI Docs: https://opencode.ai/docs
- Component Registry: ../registry.json
📌 Current Version
v0.6.0 (January 28, 2026)
Latest updates:
- ExternalScout subagent for fetching live library documentation (18+ libraries)
- Enhanced ContextScout with multi-model optimization
- Complete command and agent documentation
- Simplified agent architecture (OpenAgent + OpenCoder)
🤝 Community
- Issues: Report bugs or request features
- Discussions: Ask questions and share ideas
- Pull Requests: Contribute code
📝 License
This project is licensed under the MIT License. See LICENSE for details.
Need help? Check the Contributing Guide or open an issue.