$ the-wire · showcase
param-decomp drops a public @claude agent, nnsight fixes a broken README badge
By RepoJournal · Filed · About Interpretability · Composed from the cited sources · methodology
A quiet day on the interpretability desks: goodfire-ai removed a Claude Code workflow that let anyone with write access start an agent that could push to a public repo, and nnsight repointed its DeepWiki badge at shields.io after Vercel's bot challenge broke it.
Remove the unused Claude Code workflow from this public repository goodfire-ai/param-decomp
The removed `.github/workflows/claude.yaml` let any user with write access start a Claude Code agent by writing "@claude" in an issue, pull request or review, and that agent had `contents: write`, `id-token: write`, no tool restrictions, and an unpinned `anthropics/claude-code-action@beta` tag that can move to new code at any time. If you forked param-decomp, or copied that workflow into your o...
Serve the DeepWiki README badge from shields.io ndif-team/nnsight
deepwiki.com now puts a Vercel bot challenge in front of every request, so GitHub's image proxy was getting an HTML page instead of badge.svg and rendering a broken image; the badge keeps its DeepWiki link but takes the image from shields.io.
Action items
- → Remove or gate any copied param-decomp Claude Code workflow that grants write access, id-token, and an unpinned @beta... goodfire-ai/param-decomp [plan]