From be2768433c75764dfec3f463a02de39b035a3f74 Mon Sep 17 00:00:00 2001
From: Peter Steinberger <steipete@gmail.com>
Date: Sat, 2 May 2026 13:04:44 +0100
Subject: [PATCH] fix: mark task fallback events untrusted

---
 src/tasks/task-registry.ts | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/tasks/task-registry.ts b/src/tasks/task-registry.ts
index e359f5b6098..fed110ff396 100644
--- a/src/tasks/task-registry.ts
+++ b/src/tasks/task-registry.ts
@@ -1075,6 +1075,7 @@ function queueTaskSystemEvent(task: TaskRecord, text: string) {
     sessionKey: ownerKey,
     contextKey: `task:${task.taskId}`,
     deliveryContext: owner.requesterOrigin,
+    trusted: false,
   });
   requestHeartbeatNow({
     reason: "background-task",
@@ -1097,6 +1098,7 @@ function queueBlockedTaskFollowup(task: TaskRecord) {
     sessionKey: ownerKey,
     contextKey: `task:${task.taskId}:blocked-followup`,
     deliveryContext: owner.requesterOrigin,
+    trusted: false,
   });
   requestHeartbeatNow({
     reason: "background-task-blocked",