[ed_elliott_asc]

“ and push commits”

Am I the only person who insists on writing my password every time I push and pull from git?

Originally I didn’t want IDE’s doing stuff for me, now I absolutely do not want an LLM to have that power.

Is it really that unique to control what git does remotely?

[jwrallie]

You are not alone, for me committing something it means I am signing my responsibility for it. I may not type a password, but I am always the one pressing the enter key.

[ed_elliott_asc]

How do you stop Claude/opex from pushing or pulling without you asking?

[bel8]

For open-source agents, like https://pi.dev, it is as easy as asking it to create a plugin to stop the session or ask for permission whenever the LLM is trying to execute a commit command. I believe Claude and Codex also suport plugins. Codex is open-source too.

Then you add one line in AGENTS.md stating the LLM should never commit, push or perform any write git operation without explicitly being asked to.

So in the very rare case that the LLM bypass your instruction, you catch it red-handed and stop the session or allow it.

I always make the plugin stop the session because LLMs tend to try to circunvent textual block messages by doing nifty things like concatenating characters to build a bash script to execute the git commit command. Yes, I have seen it.

[jwrallie]

I mostly program with Vscode/Copilot, where such commands require confirmation, but usually LLMs does not try it, since my prompts tend to be focused and not mentioning it.