Unverified50% confidenceFactExact time
In PostgreSQL, read-only mode (default_transaction_read_only) is merely a session-level setting that the session itself can change via the SET command, so it cannot serve as a security boundary.
1
Sources
50%
Confidence
Long-term
Relevance
10/17/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedWhen entering /loop without any content, it reads loop.md or a built-in default prompt.59% similarUnverifiedA Prompt Handler is essentially a single tool-free LLM call that can only respond based on the text content it receives and cannot actively read files or execute commands.58% similarUnverified"Allow read_file" is not a valid policy; "only allow under /tmp/run-{id}/, and only allow the first twenty calls" is.56% similarUnverifiedThe allow read, write: if request.auth != null; rule is equivalent to any registered user being able to read and write the entire database, and Firebase officially lists it as a discouraged practice55% similarUnverifiedSession isolation design: the reader looks up copies by ID only under the current session, does not accept file system paths, and does not re-execute the original command, so different sessions or forked sessions cannot use the same ID to obtain a copy.55% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1055859API
curl https://kongchang.com/api/v1/knowledge/claims/1055859MCP
get_claim(id=1055859)