git:20260819.f157e1f to git:20260821.1a05a80

2 added, 2 removed. Audit A to A.

---

name: implement

description: Ask Claude Code to implement one bounded write-capable change through the sandbox-external bridge.

---

# Implement with Claude Code

- Call the `bridge_implement` MCP tool with a required `task` and any caller-supplied `model`, `effort`, `timeout_seconds`, `depth`, or `run_id` values. Do not replace explicit caller choices with defaults. When effort is omitted, classify the complete task and pass the selected level explicitly. Tiers: `low` = narrow mechanical change or settled factual question; `medium` = bounded implementation, diagnosis, or review; `high` = cross-file, adversarial, architectural, or security judgment; `xhigh` = unusually broad and consequential; `max` = explicit caller request only. The MCP server binds the request to its host-provided launch workspace and does not accept model-controlled workspace, background, or session fields.

+ Call `bridge_implement` with required `task`; preserve caller-supplied `model`, `effort`, `timeout_seconds`, `depth`, and `run_id`. If effort is absent, select and pass it: `low` for narrow mechanical or settled factual work; `medium` for bounded implementation, diagnosis, or review; `high` for cross-file, adversarial, architectural, or security judgment; `xhigh` for unusually broad consequential work; `max` only on explicit request. Never replace supplied choices. The MCP host binds its launch workspace and rejects model-controlled workspace, background, and session fields.

- Return the compact public envelope. Keep `verdict`, `findings`, `files_touched`, `remaining`, and `blockers` decision-critical: incomplete work and blockers must be stated there, while verbose supporting evidence belongs only in the workspace-relative transcript referenced by `transcript_path`. Do not inline transcript-only `details` or accept a consequential change without re-reading the reported files and running the relevant project checks. Refuse another cross-host dispatch when the trusted inherited depth is already one.

+ Return the compact public envelope. `verdict`, `findings`, `files_touched`, `remaining`, and `blockers` must carry incomplete work and blockers; verbose evidence stays in the workspace-relative `transcript_path`, never inline `details`. Before accepting consequential work, reread reported files and run relevant project checks. Refuse another cross-host dispatch at trusted inherited depth one.