版本 / Version
v3.5.0 (4824e57)
部署方式 / Deployment
Self-hosted, DEVIN_CONNECT path, WINDSURFAPI_NEUTRALIZE_CLIENT_ID=1
问题描述 / What happens
Grok CLI opens its system prompt with:
You are Grok 4.5 released by xAI. You are an interactive CLI tool that helps users with software engineering tasks.
plus an <executing_actions_with_care>…</executing_actions_with_care> safety block.
Live A/B on the DEVIN_CONNECT upstream: this exact self-ID line trips Devin's
content policy (permission_denied); the same request with a generic assistant
line passes. Same fingerprint-matching family as the MCP/identity blocks in #213 /
#214.
复现 / Steps to reproduce
- Route a Grok-CLI request (its stock system prompt) through the proxy.
- →
permission_denied ("content policy").
- Replace the
You are Grok … released by xAI line with a neutral assistant line → passes.
客户端 / Client
Grok CLI (any Grok version digit).
期望 / Expected
neutralizeClientIdentity neutralizes the Grok/xAI self-ID (and strips the
competitor-specific <executing_actions_with_care> block), like the existing
a1–a5 rules — gated by the same WINDSURFAPI_NEUTRALIZE_CLIENT_ID switch.
Fix in the linked PR.
版本 / Version
v3.5.0 (
4824e57)部署方式 / Deployment
Self-hosted, DEVIN_CONNECT path,
WINDSURFAPI_NEUTRALIZE_CLIENT_ID=1问题描述 / What happens
Grok CLI opens its system prompt with:
plus an
<executing_actions_with_care>…</executing_actions_with_care>safety block.Live A/B on the DEVIN_CONNECT upstream: this exact self-ID line trips Devin's
content policy (
permission_denied); the same request with a generic assistantline passes. Same fingerprint-matching family as the MCP/identity blocks in #213 /
#214.
复现 / Steps to reproduce
permission_denied("content policy").You are Grok … released by xAIline with a neutral assistant line → passes.客户端 / Client
Grok CLI (any Grok version digit).
期望 / Expected
neutralizeClientIdentityneutralizes the Grok/xAI self-ID (and strips thecompetitor-specific
<executing_actions_with_care>block), like the existinga1–a5 rules — gated by the same
WINDSURFAPI_NEUTRALIZE_CLIENT_IDswitch.Fix in the linked PR.