OPEN DESIGN · ISSUE #9049 · PR #9060

Task-profile access: before and after

Runtime-log evidence page — not an OpenDesign product UI or Terminal screenshot.

macOS 27.0.1 · arm64OpenCode 0.0.0--2026102008182026-10-25
BEFORE / BASELINE

Profile read rejected

task-profiles/prototype.md
read tool → error

Actual tool result

The user rejected permission to use this specific tool call.

Actual stderr (checkout path normalized)

! permission requested: external_directory (<checkout>/plugins/_official/scenarios/od-next-strategy/assets/task-profiles/*); auto-rejecting

Process exit: 0 · Timed out: false
Tool status, not exit code alone, determines this result.

AFTER / FIXED

Profile read completed

task-profiles/prototype.md
read tool → completed

Actual tool result

1: # OD Next Prototype Task Profile v3.1.9
2:
3: > Rollout: active
4:
5: Task routing, clarification, Build, and the ship-on-write boundary follow the

(Showing lines 1-5 of 447. Use offset=6 to continue.)

Permission outcome

No permission request on stderr.

Process exit: 0 · Timed out: false
Tool status, not exit code alone, determines this result.

Permission boundary controls

Operation with fixed configurationObserved result
Read sibling strategy assetRejected
Write protected resource (non-Git / Git)Both rejected; file unchanged
Write an ordinary project fileCompleted; requested text written

OpenCode file-tool policy; not an OS filesystem sandbox.