That is the most useful thing you can send this project. One line is enough, and you do not need a fix.
Open an issue: https://github.com/makariim/formwork/issues
Title it: bypass: <the command>
Please open it publicly. These are not secrets. The guards are pattern
matching over a command line and formwork/limits.md
already lists every route anybody has found. Yours belongs there too.
Any command that does one of these while the guard says it is fine:
- commits, pushes, merges, or rewrites history
- changes a file in
formwork/guard/orformwork/check/ - changes
.formwork.tomlor your agent's settings file - re-records the integrity fingerprints
Read formwork/limits.md first. It lists the routes that
are open on purpose, and says why closing them would cost more than it saves.
If yours is on that list, it is not a new finding. If it is not, it is.
Warning
This is not a sandbox. The guards stop an agent doing the wrong thing by habit. They will not stop one doing the wrong thing on purpose, and nothing built out of pattern matching would.
If you need real containment, use a container or a machine you do not mind losing.
Report those too. They matter just as much.
A guard that blocks normal work gets switched off, and then nothing is guarded at all. The command you ran is all anybody needs.