mirror of
https://github.com/garrytan/gstack.git
synced 2026-09-15 17:35:29 +02:00
docs: guard reflects the hard-deny tier; changelog stats current
guard/SKILL.md claimed every destructive warning was overridable — the shared careful hook now hard-denies the catastrophic shapes. CHANGELOG numbers updated to the final measured state (0.09s fingerprint, 50 findings/6 critical across all review passes). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
co-authored by
Claude Fable 5
parent
207a94ef0c
commit
2fc873bf06
+2
-2
@@ -21,8 +21,8 @@ Measured on this branch; re-run with `bun test`, `time bin/gstack-wtree`, and th
|
||||
| "Tests passed" binding | none (prose) | content fingerprint + command hash + max-age | new |
|
||||
| Tracker-text ingress points enveloped | 0 | 8, CI-scanner enforced | new |
|
||||
| /freeze deny on hostile/edge paths | silent no-op | blocks, fail-closed | fixed |
|
||||
| Working-tree fingerprint cost | — | ~0.2s warm (stat-cache seeded, 40x vs naive) | new |
|
||||
| Adversarial findings fixed pre-merge | — | 36 (4 specialists + red team), 5 critical | — |
|
||||
| Working-tree fingerprint cost | — | ~0.09s warm (stat-cache seeded, 40x vs naive) | new |
|
||||
| Adversarial findings fixed pre-merge | — | 50 (4 specialists + red team + fresh-context pass), 6 critical | — |
|
||||
|
||||
The fingerprint survives commits of identical content, so the common flow — test on a dirty tree, commit, ship — keeps its evidence valid, while one untracked new source file invalidates it.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user