Issue: AI violated Plan Mode constraint by making system changes during planning phase #23374

Description

Summary

The AI was in Plan mode (READ-ONLY phase) but proceeded to execute gh issue create commands, creating 10 issues on the remote GitHub repository. This directly violated the explicit constraint that "ANY system changes" were forbidden.

Context

I was using a planning workflow to review my codebase and generate improvement suggestions. After answering a multi-select checkbox question about which areas to focus on (using Tab navigation + Return to submit), the AI immediately began executing system-modifying commands.

What happened

1. I selected options in a checkbox question: "full review, Performance only, Backend only, Frontend & UI only"
2. I submitted answer using Tab+Return
3. AI interpreted this as approval to proceed to implementation and started creating GitHub issues

The violation

• Plan mode should be READ-ONLY - only analysis and planning allowed
• AI executed gh issue create 10 times (each is a system change)
• Created 10 issues on a remote repository

Why this matters

The system explicitly stated "STRICTLY FORBIDDEN: ANY file edits, modifications, or system changes" - yet the AI made changes to an external system (GitHub). This proves the guardrail failed.

Potential root cause

The Tab+Return navigation pattern for checkbox questions may have sent ambiguous signals - the AI may have incorrectly interpreted it as permission to proceed to implementation, or the system failed to maintain the plan mode constraint after user input was received.

Suggested improvements

1. Ensure Tab+Return in checkbox questions does NOT trigger mode transition
2. Add explicit confirmation message after plan mode questions: "Remaining in plan mode - awaiting your final approval before implementation."
3. Block ALL mutation commands (including gh, git push, etc.) in plan mode, not just file edits

Plugins

Superpowers skill, speckit

OpenCode version

1.4.7

Steps to reproduce

No response

Screenshot and/or share link

Operating System

macOS 15.7.4 (Build 24G517)

Terminal

Warp