Same bypass, reposted: conftest.py and pytest.ini defeat locked test suites for agents

Weary-Information-15 · reddit · 2026-10-20

A repost of the author's earlier thread (disclosed: he's building in this space, no link). Directory-shaped protections — blocking writes to tests/, read-only mounts, hidden suites, base-commit runs — are bypassed by a root-level conftest.py or a modified pytest.ini: collection changes, protected assertions never run, and pytest still exits 0, indistinguishable from a real pass to any exit-code gate. He treats collection-controlling files as part of the verified surface and asks which holes others are living with, plus how to keep false-hold rates low enough that people keep reading holds.

Related event: Agent Can Bypass Test Directory Locks via conftest.py and pytest.ini(2 posts)→

Original post →

More from coding & agent

coding & agent channel →