Skip to content

Remove a real person's phone number and full name from the open_chat example and three tests - #15

Merged
GLouv merged 2 commits into
mainfrom
fix/fjern-rigtigt-nummer-og-navn
Nov 11, 2026
Merged

GLouv merged 2 commits into
mainfrom
fix/fjern-rigtigt-nummer-og-navn

Conversation

@GLouv

@GLouv GLouv commented Nov 11, 2026

Copy link
Copy Markdown
Member

The open_chat parameter description and its refusal gave a real person's Danish mobile number as the format example, and three tests used the same number and that person's full name. open_chat builds whatsapp://send?phone=<digits> from what the model passes, so a model copying the example would open a chat with a real person.

Checked locally: claims-offline, readme-log, audit-chain, pakke-filer, usynlige-navne, bundet-maal, plugin-manifest, doer, laering, sende-port - all green.

🤖 Generated with Claude Code

Gustav Louv and others added 2 commits November 11, 2026 15:44
The parameter description and the refusal gave a real person's Danish mobile number as the format example - and
open_chat builds whatsapp://send?phone=<digits> from what the model passes, so a model copying the example would open a
chat with a real person. Now the format is described in words, with no number to copy: "a plus sign, the country code and
the number, digits only. Use the number the user gave you; never make one up."

These two lines are taken verbatim from PR #14 (9eeabff), so that PR merges on top without a conflict and the npm tarball
it was fingerprinted on (0.4.1, sha512-5vnxkavd41DC...nJ3eA==) is unchanged by this hotfix.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…, not a real person's

test/doer.mjs and test/laering.mjs used the same real number as their input; test/sende-port.mjs used a real person's
first and last name as the WhatsApp recipient read from the screen. Now +45 01 23 45 67 (no Danish number starts with 0)
and "Alex" / "Alex Hansen".

laering's check 2f searched the share link for the real number; with a fictional input it could no longer fail. It now
searches for the fictional one (01%2023%2045%2067|01234567): an encoded "+45 01 23 45 67" is caught, a redacted link
passes.

Tests are not in the npm package, so the 0.4.1 tarball's fingerprint is untouched.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@GLouv
GLouv merged commit 1748861 into main Nov 11, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant