docs(hackbot): propose running Clauditor Smart Window mode as an agent - #6615
Open
groovecoder wants to merge 1 commit into
Open
docs(hackbot): propose running Clauditor Smart Window mode as an agent#6615groovecoder wants to merge 1 commit into
groovecoder wants to merge 1 commit into
Conversation
Clauditor has a new Smart Window mode that audits the AI Window's guards for private-data leaks and proves a finding with a browser-chrome mochitest. This doc proposes running it as a Hackbot agent, ad-hoc or nightly, with findings surfaced in the Hackbot UI and a pending Bugzilla filing an engineer approves. Covers how Hackbot launches agents, what the mode needs, how a run builds Firefox and where results land, three integration options with a recommendation, and the decisions each team owns. Draft for discussion across the Hackbot, Clauditor, and Smart Window teams. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Comment on lines
+109
to
+110
| - The agent returns a result object on success and raises to fail. The runtime writes | ||
| `summary.json` and uploads artifacts to GCS. |
Member
There was a problem hiding this comment.
You do not need to do that yourself, the hacbot-runtime will do that.
| - **Cons:** Couples Clauditor's internals to Hackbot's runtime. Clauditor must expose a | ||
| clean entry function that takes its config by argument, not only by env and globals. | ||
|
|
||
| ### C) Native re-port |
Member
There was a problem hiding this comment.
This is the best option, and we could discuss more why.
|
|
||
| - **Pros:** Fully idiomatic Hackbot. Gets the action recorder and change | ||
| capture with no adapter. | ||
| - **Cons:** Duplicates Clauditor's analyzer-verifier loop and supervisor. Two copies of |
Member
There was a problem hiding this comment.
I would not look at it as a negative point. What you re-implement here would be a building block that could be moved later to a shared package in Hackbot and used by other teams/agents.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Clauditor has a new Smart Window mode that audits the AI Window's guards for private-data leaks and proves a finding with a browser-chrome mochitest. This doc proposes running it as a Hackbot agent, ad-hoc or nightly, with findings surfaced in the Hackbot UI and a pending Bugzilla filing an engineer approves.
Covers how Hackbot launches agents, what the mode needs, how a run builds Firefox and where results land, three integration options with a recommendation, and the decisions each team owns.
Draft for discussion across the Hackbot, Clauditor, and Smart Window teams.