AI Agents on Luther Monson

Your Agent's Shell Allowlist Is Bypassable

Tue, 29 Sep 2026 20:30:00 -0700

Every shipmates crew member runs shell commands. Before any of them runs, it goes through a permission gate. The gate uses the same rule syntax as Claude Code settings: Bash(git status), Bash(rm *), Write(**/.claude/settings.json). The rules are merged from several layers:

a fleet-wide deny list pushed from Fleet Command
per-persona policy files
project settings
the Brig, which compiles shipmates’ fifteen “Ship’s Articles” into deny and ask rules

Deny beats ask, ask beats allow.

shipmates Short Ones: 8 Minutes Extracting Go, and Three Voice-Loop Bugs

Sat, 12 Sep 2026 14:35:00 -0700

A few shipmates bugs don’t need a whole post each. They were too good to leave in commit messages, though.

setup-go spends 8 minutes extracting Go on Windows CI

shipmates CI runs on my own ephemerd runners. On Windows those jobs run inside a Hyper-V utility VM. The windows-x64 leg kept timing out in actions/setup-go. Here’s the log from PR #48:

20:58:46  Setup go version spec 1.26.6
20:58:46  Attempting to download 1.26.6...     <- tool-cache MISS
20:58:48  Acquiring 1.26.6 from ...zip
20:58:53  Extracting Go...
21:06:46  ERROR: The action 'Run actions/setup-go@v5' has timed out after 8 minutes

Seven seconds from the start of the step to Extracting Go.... Then almost eight minutes extracting until the step timeout killed it.

shipmates: Persona-Based AI Coding Crews That Remember

Fri, 21 Aug 2026 21:18:00 -0700

Since June most of my evenings have gone into shipmates, a Go CLI and daemon for running crews of AI coding agents. I tagged v0.5.0 on August 17th. That was two months and about 240 commits after the first architecture doc. So it’s a good time to write down what it is and why it exists.

The problem

I run a lot of agent sessions. On a normal night this workstation has four or five projects going at once. Each has a few Claude Code sessions doing different jobs: one reviewing, one writing tests, one chasing a bug. Two things kept annoying me.

Maintaining an Open-Source Library With AI Agents: AGENTS.md and the Rule They Kept Breaking

Sat, 27 Jun 2026 18:47:00 -0700

On May 9th I merged #264. It added an AGENTS.md to go-proxmox and a stub CLAUDE.md that just points at it. The next six weeks ran through the v0.8.0 migration guide on June 15th. In that time main took 77 commits and +31,794 / -1,144 lines. The repo went from 84 to 186 .go files. Endpoint coverage went from 30% to 100% of the Proxmox API. Most of that code was typed by coding agents, a lot of it by several at once. This is what that looked like from the maintainer’s chair. It’s mostly the parts that went wrong, because that’s where AGENTS.md got its content.