data: first operator run — 4 issues found, 3 notes, 2 escalations

Noob playtest: 4/7 passed, 3 blocked (perms). Found: context bleed via Mind's Eye, opus slot misconfigured, player_message tag leaking, test players need perms. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-28 19:38:03 -04:00
parent 143fcef4e0
commit 35919e8d57
6 changed files with 47 additions and 0 deletions
@@ -0,0 +1,9 @@
+{
+  "title": "Cross-session context bleed via Mind's Eye",
+  "severity": "medium",
+  "description": "Ask mode queried slingshooter08 instead of TestNoob after pray mode discovered that player was online. Session IDs are separate but Mind's Eye world context injection includes online player names, which the model targets instead of the requesting player.",
+  "evidence": "Noob playtest test 6: ask 'how do I find diamonds' — response referenced slingshooter08's position, not TestNoob's",
+  "suggested_fix": "Mind's Eye context injection should prioritize the requesting player, or clearly label other players as 'other online players' so the model doesn't confuse them with the requester.",
+  "timestamp": "2026-03-28T19:30:00",
+  "status": "open"
+}