Evidence record / openhands
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the signals and issues that cite it, below.
2026-10-24-openhands-github-mentions-can-request-code-changes-under-a-repository-write-gate
GitHub mentions can request code changes under a repository-write gate. The monitor defaults to repository-write authorization and implement work mode, allowing authorized requests to lead to branch creation, commits, pushes and updates to existing pull requests. The polling script mechanically checks GitHub repository permissions for other authors, but explicit allowlists and the token owner bypass that check; anyone bypasses it generally. Work restrictions are agent instructions. The catalog fallback template expresses both its authorization check and work restrictions in the prompt. reply is the narrower work mode.
Channel: tagged-release. Half: both. Date: 2026-10-23 (extensions v0.35.0; Canvas v1.32.0).
Operator consequence: Audit the actual deployed monitor definition, bypass list, token scope and work mode before enabling it. Pairing anyone with implement lets arbitrary commenters request code changes using the automation’s token. This can replace manual request-to-branch coordination, but moves the critical human decision to who may start work. Do not infer migration of existing saved bundles or mechanical enforcement of prompt restrictions. No live repository monitor was exercised.
Receipt
- https://github.com/OpenHands/extensions/commit/af0a4b816b0b711c79771b91a950726c0c6ed896
- https://github.com/OpenHands/extensions/blob/v0.35.0/skills/github-repo-monitor/scripts/main.py#L641-L663
- https://github.com/OpenHands/extensions/blob/v0.35.0/automations/catalog/github-repo-monitor/manifest.json#L78-L114
- https://github.com/OpenHands/OpenHands/blob/v1.32.0/package.json
Finding metadata
Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0
Finding ID: 2026-10-24-openhands-github-mentions-can-request-code-changes-under-a-repository-write-gate
Accepted signals
Source links
Primary links, including exact changelog lines when available.
- commit2026-10-24-openhands-github-mentions-can-request-code-changes-under-a-repository-write-gategithub.com/OpenHands/extensions/commit/af0a4b816b0b711c79771b91a950726c0c6ed896tagged commit file2026-10-24-openhands-github-mentions-can-request-code-changes-under-a-repository-write-gateOpenHands/extensions / skills/github-repo-monitor/scripts/main.py#L641-L663tagged commit file2026-10-24-openhands-github-mentions-can-request-code-changes-under-a-repository-write-gateOpenHands/extensions / automations/catalog/github-repo-monitor/manifest.json#L78-L114tagged commit file2026-10-24-openhands-github-mentions-can-request-code-changes-under-a-repository-write-gateOpenHands/OpenHands / package.json
Versioned source: run artifact