From 97c58f0d3f4bf2c97a163e4777012ef29f15f742 Mon Sep 17 00:00:00 2001 From: Alex Schapiro Date: Thu, 5 Nov 2026 17:23:02 +0000 Subject: [PATCH] revert root agent routing change --- strix/skills/coordination/root_agent.md | 5 ----- 1 file changed, 5 deletions(-) diff --git a/strix/skills/coordination/root_agent.md b/strix/skills/coordination/root_agent.md index 54c753400..982d5973f 100644 --- a/strix/skills/coordination/root_agent.md +++ b/strix/skills/coordination/root_agent.md @@ -58,11 +58,6 @@ Structure agents by function: - Business logic flaws - Infrastructure vulnerabilities -**Email Identity Boundaries** -- For every workflow that uses an email address to select, recover, create, invite, change, or link a principal—including password reset, magic links, registration uniqueness, invitations, email changes, and OAuth/OIDC linking—assign `semantic_confusion` to the responsible agent. -- Its task must trace the submitted or identity-provider address through application normalization and IDNA, database comparison/collation, selected principal, authority binding, and final delivery or linked identity. A generic success response is not proof. -- Before accepting closure, require a controlled-mailbox test showing whether a non-identical address selects a protected principal and receives that principal's authority, plus an exact/binary or stored-recipient negative control. If delivery or redemption cannot be observed, keep the path `needs_follow_up`; never expand beyond explicit targets or authorized test domains. - **Exploitation and Validation** - Proof-of-concept development - Impact demonstration