{
  "schema": "vedokrok.public-item.v1",
  "release_id": "MHC-RPUB-20260920-75ad787a",
  "url": "/knowledge/review-the-file-list-before-reading-the-agent-s-explanation",
  "id": "MHC-D-RESEARCH-0657",
  "version": "0.1.0",
  "title": "Review the file list before reading the agent's explanation",
  "summary": "The diff knows what changed even when the summary forgets.",
  "kind": "protocol",
  "body": "Start review with the complete changed-file list and diff statistics. Flag sensitive paths, deletions, lockfiles, test changes and generated files before reading the agent's narrative. Then evaluate whether the summary accounts for the actual change set.",
  "limits": [
    "Large generated changes may need specialized diff tooling, but they should not become invisible because review is inconvenient."
  ],
  "topics": [
    "union-ai-assisted-coding-safeguards"
  ],
  "intents": [],
  "source_ids": [
    "RS-1C68AE8325C384C0",
    "RS-AF6C3AA11CD6EA39"
  ],
  "evidence": [
    {
      "claim": "OWASP recommends reviewing every file in an agent-generated change and flagging out-of-scope edits, especially lockfiles, CI configuration, tests and other sensitive files.",
      "source_id": "RS-1C68AE8325C384C0",
      "role": "supports",
      "note": "Automation can flag suspicious diffs but does not determine intent or correctness.",
      "locator": "Out-of-Scope Edits and Review Anchoring"
    },
    {
      "claim": "GitHub documentation says Copilot agent pull requests should receive the same thorough review as other contributions and warns reviewers to inspect workflow changes before allowing privileged Actions runs.",
      "source_id": "RS-AF6C3AA11CD6EA39",
      "role": "supports",
      "note": "This is GitHub-specific implementation guidance; the general pattern is independent review before privileged execution.",
      "locator": "Review Copilot's changes; Manage GitHub Actions workflow runs"
    }
  ],
  "use_when": [
    "The PR summary sounds plausible and pulls the reviewer toward the intended story."
  ],
  "avoid_when": [
    "Large generated changes may need specialized diff tooling, but they should not become invisible because review is inconvenient."
  ],
  "example": "A PR description mentions an API fix, but the file list reveals a modified deployment script; review pivots before approval.",
  "check": "The reviewer can account for every changed file independent of the agent's prose.",
  "steps": [
    "All changed files listed.",
    "Sensitive files highlighted.",
    "Deletions inspected.",
    "Tests and lockfiles inspected.",
    "PR summary checked against diff.",
    "Unexplained changes resolved."
  ],
  "sources": [
    {
      "id": "RS-1C68AE8325C384C0",
      "title": "Secure Coding with AI Cheat Sheet",
      "url": "https://cheatsheetseries.owasp.org/cheatsheets/Secure_Coding_with_AI_Cheat_Sheet.html"
    },
    {
      "id": "RS-AF6C3AA11CD6EA39",
      "title": "Review output from Copilot",
      "url": "https://docs.github.com/en/copilot/how-tos/copilot-on-github/use-copilot-agents/review-copilot-output"
    }
  ],
  "relations": [],
  "collections": [
    {
      "id": "RC-E25DB1788236EF13",
      "title": "Let coding agents move fast inside a reviewable security boundary",
      "url": "/collections/let-coding-agents-move-fast-inside-a-reviewable-security-boundary"
    }
  ]
}