From 1efa1291ba45445600421cd89befaf0742a78a08 Mon Sep 17 00:00:00 2001
From: askalf <263217947+askalf@users.noreply.github.com>
Date: Thu, 16 Jul 2026 19:21:56 -0400
Subject: [PATCH] fix(watch): re-accept agentforce-generate after upstream
 docs-only drift

The 2026-07-13 sweep re-flagged agentforce-adlc:agentforce-generate (instruction-override) because its bytes drifted from the reviewed set - exactly what exact-bytes acceptance is for. Hand-review of the delta (old pin f17012bd vs current pin f7630726):

- SKILL.md: emoji removal + two cross-reference sentences pointing at the new verification section
- references/agent-user-setup.md: new section 3b.4 'verify the permset assignment stuck' - read-only SOQL queries (sf data query) asserting the agent-user Id appears in PermissionSetAssignment; old 3b.4 renumbered to 3b.5

The instruction-override trigger content is untouched by the delta: the old accepted bytes scan to the identical single finding (verified locally, exit 1 on both trees). Old-tree skillHash reproduces the accepted 67403dd2 hash exactly, proving the hash pipeline; new hash 551ada69 recorded with reviewed=2026-07-16 and a provenance note.
---
 support/watch-accepted.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/support/watch-accepted.json b/support/watch-accepted.json
index c647023..d3033ad 100644
--- a/support/watch-accepted.json
+++ b/support/watch-accepted.json
@@ -1,9 +1,9 @@
 {
   "agentforce-adlc:agentforce-generate": {
-    "hash": "67403dd2058ba1d21cdd0918aa2728f745186ea092cae3f0d22d5e512e7f3a2c",
+    "hash": "551ada69fa206d78846aa758f14a603028a09925816d9cb9a7bb01bb30a8d348",
     "class": "security-testing fixtures",
-    "note": "Salesforce Agentforce docs ship attack strings as test payloads",
-    "reviewed": "2026-07-09"
+    "note": "Salesforce Agentforce docs ship attack strings as test payloads — re-accepted 2026-07-16 after upstream drift: delta was docs-only (permset-assignment verification steps, read-only SOQL); fixture content unchanged",
+    "reviewed": "2026-07-16"
   },
   "agentforce-adlc:agentforce-secure": {
     "hash": "2f2bf93f5f3efcb07e6e404cffbd295195267fb441c88857238c72b315e60723",