Summary
During an explicit /git-prod run, after the operator confirmed production via Ask questions, the agent merged staging into local main successfully, then git push origin main was blocked by the Agent Kit guard shell (git-push-main rule). The operator had to push main manually outside the agent; only then could the agent continue with annotated tag push and post-prod steps.
Impact
/git-prod is designed to push main after HITL confirmation, but the shell guard treats every agent git push to main as a bypass of staging. That forces a mid-routine handoff for a single command, breaks continuity of tag + post-prod work, and makes the promote path half-manual even when Ask already granted promote.
Suggested direction
Allowlist /git-prod-context push to main after a confirmed Ask (or a documented one-shot escape the agent may use only when chat/HANDOFF already records the HITL grant), without weakening the default block on casual/direct main commits.
Related local note
Consumer dogfood (not in public tree): .cursor/dogfood/cursor_git_prod_push_guard_blocks_hitl_20260804.md
Tags
git-prod, shell-guard, hitl, push-main, consumer
Summary
During an explicit
/git-prodrun, after the operator confirmed production via Ask questions, the agent mergedstaginginto localmainsuccessfully, thengit push origin mainwas blocked by the Agent Kit guard shell (git-push-mainrule). The operator had to pushmainmanually outside the agent; only then could the agent continue with annotated tag push and post-prod steps.Impact
/git-prodis designed to pushmainafter HITL confirmation, but the shell guard treats every agentgit pushtomainas a bypass of staging. That forces a mid-routine handoff for a single command, breaks continuity of tag + post-prod work, and makes the promote path half-manual even when Ask already granted promote.Suggested direction
Allowlist
/git-prod-context push tomainafter a confirmed Ask (or a documented one-shot escape the agent may use only when chat/HANDOFF already records the HITL grant), without weakening the default block on casual/direct main commits.Related local note
Consumer dogfood (not in public tree):
.cursor/dogfood/cursor_git_prod_push_guard_blocks_hitl_20260804.mdTags
git-prod,shell-guard,hitl,push-main,consumer