Adversarial review (Claude subagent):
- A DIRECTORY target under designs/ (the audit dir, which the prose hands the
agent as REPORT_DIR) classified as an artifact, so the engine walked its
dom/ subtree WITH inline ignores honored. Any directory under designs/ is
now scanned as dumps.
- A scan whose probe no longer finds an engine wrote its sentinel lines to
stdout and exited 0, so `scan > "$_DJ"` captured "IMPECCABLE_NOT_AVAILABLE"
as the scan result and the rendered bash read a clean scan. Probe lines go
to stderr on every path; stdout is the JSON document or nothing.
- A refused --changed base exited 0/2 when explicit targets were also given;
it folds into the exit code (1 over 2 over 0). A trailing --changed no
longer defaults to main.
- A hand-edited `design_detector: Off` re-enabled the detector; the value is
compared case-insensitively.
- The engine inherited PATH entries inside the project (a direnv .envrc
adding node_modules/.bin); those are filtered like every other project path.
- DOM_DUMP_MISSING names the case where the dump script wrote nothing.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
