You Approved the Idea, Not the Payload — Seal the Bytes Before Your Agent Sends Them

说明与用途

一种自动化方案，使用 SHA‑256 哈希确保发送的字节与人工批准的字节完全一致。

问题

Developers approve a prompt but the outbound request payload can be larger and contain additional data that was not reviewed, leading to unintended information disclosure.

结果

The script enforces that the exact bytes sent match the bytes approved, preventing accidental inclusion of unreviewed data.

工作流

• 1. Capture the outbound payload JSON. 2. Canonicalize the payload by sorting keys and using compact separators. 3. Compute a SHA‑256 digest of the canonical payload. 4. Store the digest and section sizes as an approval file. 5. Before sending, recompute the digest and compare it to the stored approval. 6. If the digests match, send the payload; otherwise refuse to send and report the mismatch.
• 7. Optionally, use the "sizes" command to inspect section byte counts for debugging.

证据

I want an invariant a machine can enforce: the payload that leaves matches the payload a human approved, byte for byte, or the request does not leave.

来源

Here is the whole tool. It is about 70 lines and it has no dependencies beyond the standard library.

来源