fix(opencode): allow bounded live-system diagnostics

opencode-server/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: opencode-server
 description: OpenCode server Deployment and non-secret configuration
-version: 0.1.72
+version: 0.1.73
 appVersion: "1.18.29"
 type: application

opencode-server/README.md

@@ -19,6 +19,18 @@ The chart copies these immutable package inputs into `/home/opencode/.config/ope
 
 A change to any packaged file is chart content and requires a new `Chart.yaml` version. See [Agent instruction architecture](docs/agent-instruction-architecture.md) for the primary-agent, subagent, and shared-instruction design.
 
+### Runtime diagnostic output
+
+For authorized diagnostic work, the shared policy permits agents to retrieve,
+print, and summarize raw live-system output only after constraining the
+requested source, fields, and time range to reasonably exclude protected
+material. Agents must not intentionally request credentials, decrypted secrets,
+auth material, private keys, kubeconfig material, OpenTofu state, or sensitive
+plans. If a source cannot be bounded this way, agents must not retrieve it. If
+protected material appears unexpectedly, agents must not print, summarize,
+commit, attach, or persist it, and must redact or omit it from user-facing
+content. This reporting allowance does not authorize live-system mutations.
+
 ### Twilio documentation MCP
 
 `twilio-docs` connects only to Twilio's public-beta [documentation MCP](https://www.twilio.com/docs/ai/mcp) at `https://mcp.twilio.com/docs`. It provides public API-documentation and schema discovery, including error-code and A2P guidance, for troubleshooting reference only.

opencode-server/files/AGENTS.md

@@ -23,7 +23,13 @@ documentation.
 - Treat public repositories as public. Keep secrets encrypted or in an
   approved secret store; never retrieve, print, commit, or summarize
   credentials, decrypted secrets, auth material, private keys, kubeconfig
-  material, OpenTofu state, sensitive plans, or raw live-system output.
+  material, OpenTofu state, or sensitive plans. Raw live-system output may be
+  retrieved, printed, and summarized only for an authorized task and only after
+  constraining the requested source, fields, and time range to reasonably
+  exclude protected material. Do not intentionally request protected material.
+  If a source cannot be bounded this way, do not retrieve it. If protected
+  material appears unexpectedly, do not print, summarize, commit, attach, or
+  persist it, and redact or omit it from user-facing content.
 - Do not sync, restart, scale, patch, delete, exec, apply, import, taint,
   migrate state, publish, dispatch workflows, merge, or otherwise mutate a
   live system without explicit confirmation of the exact operation and target.