Docs: tool access belongs to the harness, not the panel

[CryptoJones]

What

skill/SKILL.md, README.md (Limits) and CLAUDE.md (Scope) all said lanes have no tools and no file access. That is true for the http and acp harnesses only. A cli lane runs the vendor's own CLI (claude, agy) with its normal toolset, and will use it.

Why now

On 2026-09-05, during a code-review round on a checked-out repo, the HAL9000 lane (claude, opus) decided the brief was stale, read the working tree instead, created zz_review_probe_test.go inside the reviewed repo, ran go test, and deleted the file — while the operator had uncommitted work in that tree. The tree was verified byte-identical afterwards only because it had been snapshotted first. It also produced the best review of the round (probe-confirmed a real ordering bug).

Policy, as stated by the owner

Tool access for cli lanes is the default and intended. A lane loses it when it cheats — reads another lane's answer, edits the code under review, games the question — via --safe-mode --disallowedTools … or an empty launch directory with CLAUDE_CODE_* scrubbed.

Changes

• Scope the "no tools" statement to http/acp in all three docs.
• Document revoke-on-cheating and the pre-round hygiene: commit or snapshot before a round (git diff > snap.patch; git status --short --untracked-files=all > snap.status, compare after), never commit while a cli lane runs, write the brief for the http lanes regardless — a tree-aware review is not evidence of convergence with lanes that saw only the brief.
• Scope the "confident fabrication" guidance the same way.
• BACKLOG.md line for Docs claim lanes have no tools; cli lanes run the vendor CLI with its full toolset #66.

Docs only; no code or config changes.

Closes #66.

---

Proudly Made in Nebraska. Go Big Red! 🌽 https://xkcd.com/2347/

🤖 Generated with Claude Code

https://claude.ai/code/session_01BwxtwuoRxP75PdR6NAmMS3

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Team

Run ID: d077b8e3-e37f-4134-b40a-527dfae5dadf

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}