Skip to content

ci: publish records commit SHAs; README names the PreToolUse wiring (PLUG-1) - #14

Merged
jothimani-rajendran merged 1 commit into
mainfrom
plug-1-provenance-shas-clean
Oct 19, 2026
Merged

jothimani-rajendran merged 1 commit into
mainfrom
plug-1-provenance-shas-clean

Conversation

@jothimani-rajendran

Copy link
Copy Markdown
Collaborator

PLUG-1 (org-plan plan/prerelease-fixes.md). Replaces #13, same change from a clean commit.

  • publish.yml: writes generated_from.yaml with the catalog and framework SHAs and names both in the publish commit message (same change as the claude repo).
  • README.md (hand-written, outside generated-only): states the PreToolUse wiring and that a deny is a JSON hookSpecificOutput.permissionDecision: "deny" on stdout with exit 0. The wording comes from running the shipped codex_cli.py adapter, which printed exactly that.

verify is expected to fail here as it did on #13: the committed tree is stale against current chock-catalog main (verify-mcp-allowlist), which this change does not touch; republish at release prep clears it.

Not run: the workflow (needs a dispatch, release prep).


Generated by Claude Code

… (PLUG-1)

publish.yml writes generated_from.yaml with both checkouts' SHAs and
names them in the commit message. The README states the PreToolUse
wiring and the JSON decision channel.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Signed-off-by: Jothi Mani Rajendran <250249270+jothimani-rajendran@users.noreply.github.com>
@jothimani-rajendran
jothimani-rajendran marked this pull request as ready for review October 19, 2026 23:51
@jothimani-rajendran
jothimani-rajendran merged commit b836866 into main Oct 19, 2026
4 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant