fix(claude-config): state the lane report write rule and the unattended dispatch gate in audit-instructions - #4121
Conversation
…ed dispatch gate in audit-instructions Phase B now tells lanes to persist reports with the Write tool or to a literal absolute path under the host temp tree, never through a variable-carried shell redirect or inline Python, because the guardrails block-hook-bypass guard blocks the forms it cannot resolve. It also states what an unattended run does at the ~20-dispatch confirmation: proceed and disclose planned and actual dispatch counts in the Phase D cost line, with the unattended declaration coming from the caller, never inferred. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018BbBumpSdSdv4xNv6ibrf2
The interview contract for the audit-instructions execution model, scanner calibration, report contract, and environment-fit work: goal, constraints, acceptance criteria, captured assumptions, and out-of-scope, with the Plan section left empty for /planning:plan. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018BbBumpSdSdv4xNv6ibrf2
…nstructions-mi6d1n
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018BbBumpSdSdv4xNv6ibrf2
The Brief graduated to the work-item tracker: the parent issue #4113 carries it in full, and the pull request body names the pre-prune commit per the topic-docs contract-slice lifecycle. The register ledger and a memory-slice copy stay under .work/, which is not tracked. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018BbBumpSdSdv4xNv6ibrf2
… B wording Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018BbBumpSdSdv4xNv6ibrf2
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
|
Claude finished @kyle-sexton's task in 4m 20s —— View job Code review complete
SummaryReviewed the 3 changed files: The two new instructional paragraphs in Phase B (
No security-relevant findings (out of scope for this lane per Branch | |
|
Claude finished @kyle-sexton's task in 38s —— View job Security review —
|
|
Last security-reviewed head: |
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: e3b0c482db
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
|
Claude has reviewed this PR 1 time. The lane skips further automatic reviews after 5; deleting this comment resets the count. |
… D cost line and state the temp-tree exemption's precondition The Phase D cost-line definition now lists the planned and actual dispatch count and whether the ~20-dispatch confirmation was asked or disclosed, so the Phase B unattended path has a place in the report that satisfies it. The unattended declaration is named as invocation text. The lane report write rule states that the guard's temp-tree exemption applies only when CLAUDE_PROJECT_DIR names a project root outside a temp tree, so a temp-rooted checkout uses the Write tool, and carries the four-part verification record the skill-body rule requires for a restated cross-plugin behavior. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018BbBumpSdSdv4xNv6ibrf2
…nstructions-mi6d1n main took claude-config 0.42.4 for the audit-pass exclusion-set wording, so the audit-instructions Phase B entry moves to 0.42.5. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018BbBumpSdSdv4xNv6ibrf2
…nstructions-mi6d1n main took claude-config 0.42.5 for the docs path rename, so the audit-instructions Phase B entry moves to 0.42.6. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018BbBumpSdSdv4xNv6ibrf2
…nstructions-mi6d1n # Conflicts: # plugins/claude-config/.claude-plugin/plugin.json # plugins/claude-config/CHANGELOG.md
Main landed a third claude-config change (#4121), which published 0.43.2, the version this branch had renumbered to after the previous collision. Same race as before: the bump is chosen at authoring time from whatever main showed then. Renumbered this branch's entry to 0.44.0, a minor because P4's detector behavior changes, and placed it above main's 0.43.2, which is preserved unchanged. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_013G9e6TtA2P5wVWRaaGT2ER
2 participants
Closes #4117
Summary
Two sentence-level fixes to
plugins/claude-config/skills/audit-instructions/SKILL.mdPhase B, with the claude-config manifest bumped to 0.43.2 and a release entry. A full run of the skill over this marketplace hit both gaps: a lane's shell redirect to a variable-carried scratchpad path was blocked by the guardrailsblock-hook-bypassguard, and the ~20-dispatch confirmation was crossed silently because the session was unattended and the skill body says nothing about that case.The interview Brief for the parent work (#4113) rode this branch as a contract slice and was pruned per the topic-docs contract-slice lifecycle. Its graduation target is the tracker: #4113 carries the Brief in full. Pre-prune commit:
92e58ee26f6156d62c84bd94ffddb2c42bae805b(docs/topics/audit-instructions-improvements/PLAN.md).Fix
CLAUDE_PROJECT_DIRnames a project root outside a temp tree, so a temp-rooted checkout uses the Write tool. The paragraph carries the four-part verification record (basis, as-of date, recheck trigger) the skill-body rule requires for a restated cross-plugin behavior.--unattendedflag lands with audit-instructions: token-budgeted lanes, --unattended, and --resume over per-lane run files #4114.plugins/claude-config/.claude-plugin/plugin.jsonmoves to 0.43.2 andCHANGELOG.mdgains the## [0.43.2]entry, as the changelog-parity bump gate requires for any shipped-file change. (main took 0.42.4, 0.42.5, 0.43.0 and 0.43.1 for unrelated changes while this PR was open; each merge of main moved this entry above them.)mainfour times: once when the stale-base gate flagged an overlap on the same skill file, and three times to resolve changelog version collisions. The new paragraphs are unaffected by any of them; every collision was confined to the manifest version line and the changelog heading.Verification
scripts/affected-tests.sh --run: 26 selected suites passed on the first head; on later heads every changed file is a recorded no-suite class.scripts/check-changelog-parity.sh --check-bump origin/main,--check, and--check-preserved origin/main: all pass (132 headings preserved).scripts/check-stale-base-overlap.sh --check origin/main: up to date.scripts/check-contract-slice-prune.sh --check-diff origin/main: passed, no path lands underdocs/topics/.markdownlint-cli2on the skill body and the changelog: 0 issues; no em dashes in the skill body.registered=21 open=0 deferred=0 blocked=0 brief=ok status=clean.Related
🤖 Generated with Claude Code
https://claude.ai/code/session_018BbBumpSdSdv4xNv6ibrf2