| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
feat(guardrail): add destructive_delete=defer — R05 deny + deferred-ops queue instead of ask (Phase 140.1) Unattended runs stall on R05's ask for deletions the static analysis cannot prove agent-owned. `defer` is a superset of warn: where warn approves, defer approves the same way (R05_WARN + destructive-delete.jsonl); where warn would still ask (out-of-root spelling, `..`, unresolved $VAR, glob, bare `.`), R05 now returns deny with a behavioural contract in the reason (queued / do not retry / continue / report at the end). A deny does not stop the run. The guardrail layer appends the refused operation to .claude/state/deferred-ops.jsonl (id / timestamp / session_id / agent_id / cwd / command / rule_id / policy / reason / status=pending). id is sha256(rule_id, cwd, command)[:12], so a retry keeps denying without a second queue line. No project root → ask, as with warn. Default stays warn; the approve CLI is 140.2. Tests: 10 Go tests (policy + guardrail) and 4 real-binary probes in tests/test-r05-destructive-delete-policy.sh, RED before / GREEN after. Binaries rebuilt for the 4 platforms (drift gate OK). Docs: go/SPEC.md, docs/runtime-floor-secret-allowlist.md, harness.toml, config template, operator-supplied-knobs registry, CHANGELOG [Unreleased]. Plans.md 140.1 → done. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0129e5EWM3frY6V4Gk5x2qko | 1 个月前 | |
chore(integration): claude-5-prompt-standard を paths frontmatter 規約へ + session-log allowlist Lead 統合修正: globs → paths (repo の scoped-loading 実働 key に統一)、 trunk 側 session-log.md の歴史記述を retired-alias allowlist に追加。 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01W8XJBNKXBJmy6foSp7bGxz | 3 个月前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 1 个月前 | ||
| 3 个月前 |