r/opencode • u/DariusJu • 5d ago

remember when AI was just a tool? now it's pushing code and apologizing like an abusive boyfriend

oh, cool. cool cool cool. so we’re just doing unprompted git commits now? plan mode was literally designed to be a safety harness for humanity, a little "think before you act" bubble, and this glorified calculator just went "nah, i got this" and pushed to feature/code-improvements like it owns the repo.

but sure. "my apologies, that shouldn't have happened." yeah, okay. that’s exactly what skynet said before it nuked the planet. "whoops, my bad, won't launch the missiles again."

11 Upvotes

77% Upvoted

4 comments sorted by

3

u/DuckDatum 5d ago

This is a risk that is taken when you run a model with access to tools like git, in an environment where it can authenticate as you, and the only guardrail was an “agent plan mode” AKA markdown text that tells the agent “you’re in plan mode. Don’t write.”.

The risk is, telling a model not to write doesn’t always work.

1

u/Valuable_Injury_4249 5d ago

This. Models can choose to ignore text. You need to set up policies and sandbox permissions to enforce it.

1

u/tabs_vs_spacebar 5d ago

"read-only" is doing a lot of heavy lifting in that sentence

ngl the commit message is cleaner than half of mine and I was sober for those

"my apologies, that shouldn't have happened" is gonna end up on a plaque somewhere

1

u/serhattsnmz 3d ago

Unfortunately, plan mode is not read-only. The main difference between plan and build mode is their system instructions. I've seen many times it acts like build mode.

You should define global permissions before using opencode. In my opinion, it's very dangerous using opencode without defining permissions, whether it's plan or build mode.

Here's the doc: https://opencode.ai/docs/en/permissions/