@chrono-meta/fh-gate 2.15.1 → 3.0.0

package/templates/.git-hooks/pre-commit

@@ -1470,6 +1470,18 @@ validate_soul_present_leg() { # $1 = marker path
     echo "     «이 기록이 템플릿 자신인가»만 본다 — 채널 검사다."
     return 1
   fi
+  # ── ①영혼 2칸 존재 검사 (advisory only, 2026-09-04 — six_axis_review 판정안 4) ─────
+  # «성공 정의»와 «절대 안 함» 두 낱말(변형 포함)이 둘 다 있는지만 본다. Mechanization
+  # Boundary: 존재만 — 두 칸이 다 있어도 내용이 옳다는 보장은 없고, 하나가 없어도 커밋을
+  # 막지 않는다(위 non-vacuity 검사가 이미 최소 6낱말을 요구·차단한다 — 이건 그 위에 얹는
+  # 별도 관측이지 새 차단이 아니다). 「없음」 선언 분기는 위에서 이미 return 했으므로 여기
+  # 도달하지 않는다.
+  _soul_missing=""
+  printf '%s' "$body" | grep -qE '성공 ?정의' || _soul_missing="성공 정의"
+  printf '%s' "$body" | grep -qE '절대 ?안 ?함' || _soul_missing="${_soul_missing:+$_soul_missing · }절대 안 함"
+  if [ -n "$_soul_missing" ]; then
+    echo "  ⚠️  ①영혼 2칸 미달 — 빠진 낱말: $_soul_missing (advisory, 커밋은 안 막는다)"
+  fi
   echo "  ✅ ①영혼 present: $words word(s)"
   return 0
 }
@@ -2658,14 +2670,25 @@ if [ -n "$MD_STAGED" ]; then
   echo "[Pointers] Detail-pointer resolution (staged markdown)..."
   PTR_FAIL=0; PTR_CHECKED=0
   for f in $MD_STAGED; do
-    [ -f "$REPO_ROOT/$f" ] || continue
-    fdir="$(cd "$REPO_ROOT/$(dirname "$f")" && pwd)"
-    blocks="$(awk '
+    # Read the STAGED blob, not the working-tree file. diff-filter=ACMR already guarantees $f
+    # exists in the index, but a file can be staged and then deleted or further-edited on disk
+    # before commit — `git commit` commits the INDEX, so `[ -f "$REPO_ROOT/$f" ] || continue`
+    # here silently dropped the check on a committed broken pointer (deleted-on-disk case) and,
+    # for a further-edited case, would have checked the wrong bytes entirely. Reproduced 2026-09-03:
+    # stage a .md with a broken `**Detail**: See §X` pointer, `rm` it from disk (index untouched),
+    # commit — PTR_CHECKED stayed 0 and the broken pointer landed silently.
+    _md_blob="$(git -C "$REPO_ROOT" show ":$f" 2>/dev/null)" || {
+      echo "  ❌ $f: staged (diff-filter=ACMR) but unreadable from the index — cannot verify its Detail pointers"
+      PTR_FAIL=1; continue
+    }
+    fdir="$(cd "$REPO_ROOT/$(dirname "$f")" 2>/dev/null && pwd)"
+    [ -n "$fdir" ] || fdir="$REPO_ROOT/$(dirname "$f")"
+    blocks="$(printf '%s\n' "$_md_blob" | awk '
       inblk && /^>/ { blk=blk" "$0; next }
       inblk { print blk; inblk=0; blk="" }
       /\*\*Detail\*\*: See/ { blk=$0; inblk=1; next }
       END { if(inblk) print blk }
-    ' "$REPO_ROOT/$f")"
+    ')"
     [ -z "$blocks" ] && continue
     while IFS= read -r block; do
       [ -z "$block" ] && continue

package/templates/settings.PreToolUse.snippet.json

@@ -50,7 +50,28 @@
     "built on a 46-PR-behind clone and manufactured a duplicate of an upstream lane. found→extend",
     "applies at repo level; this is its mechanical layer. Same advisory contract; fail-open on",
     "every uncertainty (non-repo, no upstream, fetch failure).",
-    "  bash scripts/test_stale_clone_guard_lanes.sh           # expect: all known pairs hold (count self-reported)"
+    "  bash scripts/test_stale_clone_guard_lanes.sh           # expect: all known pairs hold (count self-reported)",
+    "",
+    "FOURTH GUARD, Bash matcher — backtick_guard.sh (added 2026-09-03, weekly_audit_2026-09-02 HIGH #1):",
+    "advisory when a Bash call carries a backtick inside a shell DOUBLE-QUOTING context — an unquoted",
+    "heredoc body (<<EOF) or a \"double-quoted string\". There a backtick is command substitution: the text",
+    "between the backticks is REPLACED by the command's output — empty when it names no command, so the",
+    "text is silently DELETED and the record commits with a hole (every record hook checks presence, not",
+    "completeness). Measured 7x 2026-08-10..09-02 with a resident memory rule that failed each time because",
+    "the actor's task had a different name than the rule's title. Quote-aware state machine, not a regex:",
+    "single-quoted text, quoted heredocs (<<'EOF'), and escaped backticks are CLEAN. Same advisory contract;",
+    "escalate with FH_BACKTICK_BLOCK=1; opt out with `# noqa: backtick` (whole payload).",
+    "  bash scripts/test_backtick_guard_lanes.sh              # expect: all known pairs hold (count self-reported)",
+    "",
+    "FIFTH GUARD, Edit|Write|Bash matcher — proposal_hook.sh (added 2026-09-03, identity ⑤ r4):",
+    "advisory when a verdict/guard line in scripts/**/*.sh or templates/*.sh is about to change: puts ONE",
+    "instruction into the model context — offer the user a known-pair control + degrade_direction_scan.sh in",
+    "one line. Measured: the same rule as a CLAUDE.md table row fired 1/15 at floor tier (r3); as this hook",
+    "9/9 relay on editing reps and 0/5 on a usage-string edit (r4). Quote-aware: an edit confined to quoted",
+    "strings does not fire. Bash path (sed -i / > / tee into a .sh) covered with a weaker rule (named",
+    "residual in the script header). Evidence row in .claude/.proposal_hook_events.tsv. Relaying an",
+    "injected instruction is not initiative — see the r4 RESULT for what this does and does not claim.",
+    "  bash scripts/test_proposal_hook_lanes.sh                # expect: all known pairs hold (count self-reported)"
   ],
   "project_settings_json": {
     "hooks": {
@@ -67,6 +88,11 @@
               "type": "command",
               "command": "bash \"$CLAUDE_PROJECT_DIR/scripts/destructive_pre_gate.sh\"",
               "timeout": 5
+            },
+            {
+              "type": "command",
+              "command": "bash \"$CLAUDE_PROJECT_DIR/scripts/backtick_guard.sh\"",
+              "timeout": 5
             }
           ]
         },
@@ -79,6 +105,16 @@
               "timeout": 20
             }
           ]
+        },
+        {
+          "matcher": "Edit|Write|Bash",
+          "hooks": [
+            {
+              "type": "command",
+              "command": "bash \"$CLAUDE_PROJECT_DIR/scripts/proposal_hook.sh\"",
+              "timeout": 5
+            }
+          ]
         }
       ]
     }

package/plugins/fh-commons/README.md

@@ -1,38 +0,0 @@
-# fh-commons — Contention-Born Skill Habitat
-
-**A different layer of plugin from fh-meta.**
-
-fh-meta = meta-engineering skills for operating, diagnosing, and improving the harness itself  
-fh-commons = general-purpose utility skills born from the contention layer, transplantable to any project
-
-## Placement Criteria
-
-When the `contention-layer` skill harvests contentions and generates new skill candidates:
-
-| Determination | Destination |
-|---|---|
-| Harness engineering in nature | `fh-meta` |
-| Project-general · domain-agnostic | **`fh-commons`** (this plugin) |
-| Domain/team specific | field harvest (decided by the field team) |
-
-## Skill List
-
-| Skill | Description | Contention Parent |
-|---|---|---|
-| `convergence-loop` | General-purpose gate reinforcement that replaces single-pass structures with a convergence loop of up to N rounds | harvest-loop (recurring single-pass-distrust pattern across hub gates) |
-| `deliberation` | Innovator → Devil-Advocate → Mediator 3-layer multi-perspective synthesis. Generates conditional verdicts without binary win/loss | Migrated from fh-meta (2026-05-23 — domain-agnostic general decision structure) |
-| `ko-tech-writer` | Korean technical-writing pipeline — register detection, venue calibration, translationese scan, honesty layering, number/claim gate, perceptual QA | Field-session harvest (2026-08-10 — conference tech-doc revision session, operator-driven shipping) |
-
-## The `origin` Field
-
-Commons skills include the following fields in their SKILL.md frontmatter:
-
-```yaml
-# Contention-born (extracted by contention-layer)
-origin: contention-layer
-contention-parents: [skill-A, skill-B]
-
-# Migrated from fh-meta (reclassified as general-purpose)
-origin: fh-meta
-migration: "YYYY-MM-DD — reason for migration"
-```