From 5ec742a2d3ba58a935d03f4729c5a5af1dc7df93 Mon Sep 17 00:00:00 2001 From: iris Date: Sun, 20 Sep 2026 13:56:51 +0200 Subject: [PATCH] docs: clear write-good.Passive hits in docs/turn-loop/mcp.md --- docs/turn-loop/mcp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/turn-loop/mcp.md b/docs/turn-loop/mcp.md index e254d0fd..79784309 100644 --- a/docs/turn-loop/mcp.md +++ b/docs/turn-loop/mcp.md @@ -218,7 +218,7 @@ see [`docs/tools/subagent.md`](../tools/subagent.md). `TodoWrite`. `Bash` **isn't** in the managed deny — see below. - Allowed MCP tools: as listed above (by tool group). -`Bash` is disallowed for the autonomous harness — shell execution goes +The autonomous harness disallows `Bash` — shell execution goes through `mcp__bash__run` (background tasks with structured output + task-id tracking) instead of an interactive shell. The harness gate is `--tools` / `--allowedTools` (Bash absent from `ALLOWED_BUILTIN_TOOLS`),