Skip to content

Flow guards review fixes: real callers, default baseline checks, freeze hook, one reference - #2108

Merged
remigiusz-antczak merged 1 commit into
mainfrom
land/wave-1028ao-r2
Oct 28, 2026
Merged

remigiusz-antczak merged 1 commit into
mainfrom
land/wave-1028ao-r2

Conversation

@remigiusz-antczak

Copy link
Copy Markdown
Collaborator

Summary

Review follow-ups to the flow guards that landed in the peer-lessons batch.

  • fitness_tick.py closable now needs executable wiring (JSON hook config, CI, .sh, Makefile or a loop entry line). A prose mention no longer counts as a caller.
  • baseline_guard.py refuses a suspect baseline by default; --force overrides.
  • wired_check.py allowlist matching is narrowed to explicit orphan/unused allowlist names, a # orphan: marker and an allowlist: key.
  • New freeze_hook.py (PreToolUse) parses argv and denies git push, gh pr merge (including -R/--repo) and gh api merge calls while a freeze is on. It fails closed on malformed input or unreadable state and allows in a non-repo directory. It is wired in the operating-layer template and the doctor.
  • The finding_guard, fitness_tick and flow_alarm doctrine now lives once, in references/flow-guards.md.

Verification

  • 43/43 locally: flow_guard_fixes 15, fitness_tick 6, baseline_guard 5, orphan_allowlist_wired 4, freeze_gate 6, skill_index_split 7.
  • skill_index.py --check and the size ratchet pass against the base.

🤖 Generated with Claude Code

…checks, narrow wired allowlist, freeze_hook, one canonical reference

fitness_tick closable needs executable wiring (JSON, CI, .sh, Makefile, loop entry line), not a mention; baseline_guard refuses by default (--force overrides); wired_check ALLOW_RE matches explicit orphan/unused allowlist names, a # orphan: marker and an allowlist: key; freeze_hook.py parses argv and denies git push, gh pr merge and gh api merge calls while frozen (fail closed on malformed input or unreadable state, allow in a non-repo), wired in the operating-layer template and doctor; finding_guard/fitness_tick/flow_alarm doctrine lives once in references/flow-guards.md.

Tests: 43/43 (flow_guard_fixes 15, fitness_tick 6, baseline_guard 5, orphan_allowlist_wired 4, freeze_gate 6, skill_index_split 7)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@remigiusz-antczak
remigiusz-antczak merged commit ce84c84 into main Oct 28, 2026
8 checks passed
@remigiusz-antczak
remigiusz-antczak deleted the land/wave-1028ao-r2 branch October 28, 2026 23:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant