Vendor & Artifact Directory Exclusion Protocol

Overview

In modern software engineering, a typical repository containing 20 source files also contains 30,000+ third-party vendor files inside node_modules/, venv/, or Rust target/ directories.

When an autonomous agent runs an unconstrained recursive search or directory crawler without vendor exclusions, the tool attempts to index and return thousands of third-party package files.

Unconstrained vendor scans cause:

1. Catastrophic Context Overflow: A single list_dir or find on node_modules/ dumps 80,000+ tokens, instantly exhausting context windows.
2. Hallucinated Package Edits: Models mistakenly try to fix bugs by editing files inside node_modules/ or site-packages/ (which get wiped out on next npm install).
3. Execution Latency Stalls: Scanning 50,000 disk inodes takes 5 to 10 seconds of local I/O.

The Vendor & Artifact Directory Exclusion Protocol enforces strict, non-bypassable directory blacklists at the tool runner layer.

Unconstrained Directory Crawl vs. Vendor-Exclusion Guard