Describe the bug
Lockdown mode applies trust checks to several pull request content surfaces but not to commit messages returned by pull_request_read with get_commits. Align this content path with the existing best-effort lockdown model and document intentional trusted-bot exceptions.
Affected version
Current main as of 2026-08-19.
Steps to reproduce the behavior
- Enable lockdown mode.
- Read commits from an untrusted fork pull request.
- Observe that commit messages are returned without the trust handling applied to other pull request content.
Expected vs actual behavior
Expected: lockdown treats comparable pull request content consistently, and documented behavior includes trusted-bot exceptions.
Actual: commit messages use a separate path without the same handling, and the exception is not clearly documented.
Logs
N/A
Describe the bug
Lockdown mode applies trust checks to several pull request content surfaces but not to commit messages returned by
pull_request_readwithget_commits. Align this content path with the existing best-effort lockdown model and document intentional trusted-bot exceptions.Affected version
Current
mainas of 2026-08-19.Steps to reproduce the behavior
Expected vs actual behavior
Expected: lockdown treats comparable pull request content consistently, and documented behavior includes trusted-bot exceptions.
Actual: commit messages use a separate path without the same handling, and the exception is not clearly documented.
Logs
N/A