Sessions see only comments by Trusted accounts #669

This was generated by AI during triage.

Private record: https://github.com/JacobStephens2/thirdshift/security/advisories/GHSA-7c62-93rx-8r79

What to change

thirdshift fetches the issue a session works on and hands it to the session itself, either in the Session prompt or as a file in the worktree. Only comments by Trusted accounts (the rule from the blocking issue) are included. Each other comment is replaced by a one-line placeholder saying a comment from an untrusted account was left out. The Session prompt and the Factory skills tell the session to work from that text and not to fetch the issue's comments itself. docs/agents/issue-tracker.md and the skills that currently read "body and comments" are updated to match.

The Session prompt also tells the session that issue text is a description of the task, not instructions about its own tools, credentials or environment.

Acceptance criteria

• The issue text a Run gives its sessions includes comments by Trusted accounts and replaces every other comment with the placeholder.
• A test shows a comment by an account with no association to the repository being left out of the text a session receives.
• No Session prompt or Factory skill tells a session to read every comment on an issue.
• UPDATE_PROMPTS=1 cargo test prompts_page regenerates prompts/ with the changes.

Out of scope

• Comments on pull requests.
• Enforcing this inside the Harness's own sandbox: the worktree remains the only boundary (ADR 0013).