Context
Found while delivering spec container #5835 (review:explain-change shipped in #6018).
Problem
The explain-change publish gate and the rule to keep a connected page off claude.ai are instructions in the skill body. No hook enforces either, so a model that skips or misreads the instruction publishes anyway.
Suggested fix
Add a PreToolUse hook on the Artifact tool (and any publish path the skill uses) that denies a publish unless the gate's approval marker is present, and denies publishing a page marked as connected. Cover it with a hook test for each denial. Per the enforcement hierarchy, decide first whether the residual risk justifies a hook; if not, record the decision.
Related: #5835
Context
Found while delivering spec container #5835 (
review:explain-changeshipped in #6018).Problem
The
explain-changepublish gate and the rule to keep a connected page off claude.ai are instructions in the skill body. No hook enforces either, so a model that skips or misreads the instruction publishes anyway.Suggested fix
Add a PreToolUse hook on the Artifact tool (and any publish path the skill uses) that denies a publish unless the gate's approval marker is present, and denies publishing a page marked as connected. Cover it with a hook test for each denial. Per the enforcement hierarchy, decide first whether the residual risk justifies a hook; if not, record the decision.
Related: #5835