Greptile Summary

Marks externally-supplied wake-hook system events as untrusted (trusted: false) so they surface with a "System (untrusted)" prefix in the prompt rather than the default "System" prefix. The one-line production change and its regression test are both correct: the test covers the direct /hooks/wake path and the action: "wake" mapping path, and the peekSystemEventEntries assertion verifies the flag end-to-end.

The dispatchAgentHook result-summary events intentionally remain trusted — they are the agent's own output, not a raw pass-through of external content, so "System" is appropriate there.

Confidence Score: 5/5

Safe to merge — the change is a correct, minimal trust-boundary fix with a targeted regression test.

Single-line production change with correct semantics, full test coverage of both wake paths, and no unintended side effects on other event producers.

No files require special attention.

_{Reviews (1): Last reviewed commit: "fix(hooks): mark wake hook events untrus..." | Re-trigger Greptile}