Skip to content

Flow guards review fixes: real fitness_tick caller, default baseline checks, narrow wired allowlist, freeze_hook - #2106

Closed
remigiusz-antczak wants to merge 1 commit into
mainfrom
land/wave-1028ao
Closed

remigiusz-antczak wants to merge 1 commit into
mainfrom
land/wave-1028ao

Conversation

@remigiusz-antczak

Copy link
Copy Markdown
Collaborator

Summary

Review follow-ups to the flow guards that landed in the peer-lessons batch.

  • fitness_tick.py closable now needs executable wiring (JSON hook config, CI, .sh, Makefile or a loop entry line). A prose mention no longer counts as a caller.
  • baseline_guard.py refuses a suspect baseline by default; --force overrides.
  • wired_check.py allowlist matching is narrowed to explicit orphan/unused allowlist names, a # orphan: marker and an allowlist: key.
  • New freeze_hook.py (PreToolUse) parses argv and denies git push, gh pr merge (including -R/--repo) and gh api merge calls while a freeze is on. It fails closed on malformed input or unreadable state and allows in a non-repo directory. It is wired in the operating-layer template and the doctor.
  • The finding_guard, fitness_tick and flow_alarm doctrine now lives once, in references/flow-guards.md.

Verification

  • 43/43 locally: flow_guard_fixes 15, fitness_tick 6, baseline_guard 5, orphan_allowlist_wired 4, freeze_gate 6, skill_index_split 7.
  • skill_index.py --check and the size ratchet pass against the base.

🤖 Generated with Claude Code

…checks, narrow wired allowlist, freeze_hook, one canonical reference

fitness_tick closable needs executable wiring (JSON, CI, .sh, Makefile, loop entry line), not a mention; baseline_guard refuses by default (--force overrides); wired_check ALLOW_RE matches explicit orphan/unused allowlist names, a # orphan: marker and an allowlist: key; freeze_hook.py parses argv and denies git push, gh pr merge and gh api merge calls while frozen (fail closed on malformed input or unreadable state, allow in a non-repo), wired in the operating-layer template and doctor; finding_guard/fitness_tick/flow_alarm doctrine lives once in references/flow-guards.md.

Tests: 43/43 (flow_guard_fixes 15, fitness_tick 6, baseline_guard 5, orphan_allowlist_wired 4, freeze_gate 6, skill_index_split 7)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@remigiusz-antczak

Copy link
Copy Markdown
Collaborator Author

Superseded by #2108 (rebased on #2107, routing and size-marker fixes).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant