Windows Agent Build Blocked by Unidentified Policy
Open
Nobody has claimed this yet.
bug
sandbox
tool-calls
windows-os
- Dominant language
- Rust
- Stars
- 125k
- Forks
- 19.4k
- PR merge metrics
- PR metrics pending
Description
Error: exec_command failed: CreateProcess; rejected: blocked by policy
Call: call_SUPxi9zq78LDiVQgPZwFUq7G
Time: 2026-09-07T01:56:05.816Z
Please identify the enforcing rule and authorized resolution.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the Windows agent build path that invokes exec_command and reproduce the logged CreateProcess rejection using the call identifier in the report. No file or test is named, so trace which policy decision handles the rejection. Done means identifying the enforcing rule and documenting the authorized resolution.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- build-system, operating-systems, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Active
- Clarity
- Needs clarification
- Newbie friendliness
- 28/100