@khoavu882/doflow 2.0.0 → 2.0.1

package/core/registry/lifecycle.json

@@ -42,47 +42,6 @@
         }
       }
     },
-    {
-      "id": "pre-bash-guard",
-      "intent": "block-destructive-commands",
-      "tier": "enhanced",
-      "requires": [
-        "hooks"
-      ],
-      "mappings": {
-        "claude": {
-          "event": "PreToolUse",
-          "status": "supported"
-        },
-        "codex": {
-          "event": "PreToolUse",
-          "status": "different",
-          "prerequisites": [
-            "hook-review"
-          ]
-        },
-        "opencode": {
-          "status": "unavailable",
-          "fallback": "guidance"
-        },
-        "pi": {
-          "event": "tool_call",
-          "status": "different"
-        },
-        "copilot": {
-          "event": "PreToolUse",
-          "status": "supported"
-        },
-        "kiro": {
-          "event": "PreToolUse",
-          "status": "supported"
-        },
-        "antigravity": {
-          "status": "unavailable",
-          "fallback": "guidance"
-        }
-      }
-    },
     {
       "id": "session-context",
       "intent": "capture-session-context",
@@ -236,11 +195,11 @@
         "timing": "pre-tool",
         "profile": "any",
         "wired": true,
-        "configSource": "core/harnesses/claude/settings/settings.json:89",
+        "configSource": "core/harnesses/claude/settings/settings.json:97",
         "harnessVersion": {
           "tested": "2.1.287 (Claude Code)"
         },
-        "class": "blocking",
+        "class": "advisory",
         "verification": "verified",
         "prerequisites": [],
         "covers": [],
@@ -272,7 +231,7 @@
         "harnessVersion": {
           "tested": "codex-cli 0.162.1"
         },
-        "class": "blocking",
+        "class": "advisory",
         "verification": "verified",
         "prerequisites": [
           "hook-review"
@@ -329,11 +288,11 @@
         "timing": "pre-tool",
         "profile": "cli-extension",
         "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
+        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:128",
         "harnessVersion": {
           "tested": "1.1.0"
         },
-        "class": "blocking",
+        "class": "advisory",
         "verification": "verified",
         "prerequisites": [],
         "covers": [],
@@ -403,7 +362,7 @@
         "timing": "pre-tool",
         "profile": "user-headless",
         "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
+        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:128",
         "harnessVersion": {
           "tested": "1.1.0"
         },
@@ -443,7 +402,7 @@
         "timing": "pre-tool",
         "profile": "project-headless",
         "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
+        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:128",
         "harnessVersion": {
           "tested": "1.1.0"
         },
@@ -519,187 +478,6 @@
           }
         ]
       },
-      {
-        "policy": "pre-bash-guard",
-        "harness": "pi",
-        "event": "tool_call",
-        "timing": "pre-tool",
-        "profile": "cli-extension",
-        "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
-        "harnessVersion": {
-          "tested": "1.1.0"
-        },
-        "class": "unknown",
-        "verification": "unverified",
-        "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [],
-        "caveats": [
-          "Pi extension has not been exercised in a live session; a later tool_call handler may mutate input after DoFlow allows it"
-        ],
-        "provenance": [
-          {
-            "kind": "types",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 dist/core/extensions/types.d.ts:907-958",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "doc",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 docs/extensions.md:169",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/pi/tool_call/bash-deny.json",
-            "date": "2026-10-14"
-          }
-        ]
-      },
-      {
-        "policy": "pre-bash-guard",
-        "harness": "pi",
-        "event": "tool_execution_start",
-        "timing": "post-tool",
-        "profile": "cli-extension",
-        "wired": false,
-        "configSource": null,
-        "harnessVersion": {
-          "tested": "1.1.0"
-        },
-        "class": "observation",
-        "verification": "unverified",
-        "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [],
-        "caveats": [
-          "Pi user- and project-scope extensions have not been exercised in a live session; a later tool_call handler may mutate input after DoFlow allows it"
-        ],
-        "provenance": [
-          {
-            "kind": "doc",
-            "locator": "https://pi.dev/docs/latest/extensions",
-            "date": "2026-10-14"
-          }
-        ]
-      },
-      {
-        "policy": "pre-bash-guard",
-        "harness": "pi",
-        "event": "tool_call",
-        "timing": "pre-tool",
-        "profile": "user-headless",
-        "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
-        "harnessVersion": {
-          "tested": "1.1.0"
-        },
-        "class": "unknown",
-        "verification": "unverified",
-        "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [],
-        "caveats": [
-          "Pi extension has not been exercised in a live session; a later tool_call handler may mutate input after DoFlow allows it",
-          "live probe pending"
-        ],
-        "provenance": [
-          {
-            "kind": "types",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 dist/core/extensions/types.d.ts:907-958",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "doc",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 docs/extensions.md:169",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/pi/tool_call/bash-deny.json",
-            "date": "2026-10-14"
-          }
-        ]
-      },
-      {
-        "policy": "pre-bash-guard",
-        "harness": "pi",
-        "event": "tool_call",
-        "timing": "pre-tool",
-        "profile": "project-headless",
-        "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
-        "harnessVersion": {
-          "tested": "1.1.0"
-        },
-        "class": "unknown",
-        "verification": "unverified",
-        "prerequisites": [
-          "project-trust"
-        ],
-        "covers": [],
-        "doesNotCover": [],
-        "caveats": [
-          "Pi extension has not been exercised in a live session; a later tool_call handler may mutate input after DoFlow allows it",
-          "live probe pending",
-          "project-trust is required for the project-scope extension"
-        ],
-        "provenance": [
-          {
-            "kind": "types",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 dist/core/extensions/types.d.ts:907-958",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "doc",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 docs/extensions.md:169",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/pi/tool_call/bash-deny.json",
-            "date": "2026-10-14"
-          }
-        ]
-      },
-      {
-        "policy": "pre-bash-guard",
-        "harness": "pi",
-        "event": "*",
-        "timing": "pre-tool",
-        "profile": "no-extensions",
-        "wired": false,
-        "configSource": null,
-        "harnessVersion": {
-          "tested": "1.1.0"
-        },
-        "class": "unsupported",
-        "verification": "unverified",
-        "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [],
-        "caveats": [
-          "Pi user- and project-scope extensions have not been exercised in a live session; a later tool_call handler may mutate input after DoFlow allows it",
-          "Pi extension unavailable in this profile"
-        ],
-        "provenance": [
-          {
-            "kind": "types",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 dist/core/extensions/types.d.ts:907-958",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "doc",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 docs/extensions.md:169",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/pi/tool_call/bash-deny.json",
-            "date": "2026-10-14"
-          }
-        ]
-      },
       {
         "policy": "session-context",
         "harness": "pi",
@@ -735,7 +513,7 @@
         "timing": "pre-tool",
         "profile": "cli-extension",
         "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
+        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:128",
         "harnessVersion": {
           "tested": "1.1.0"
         },
@@ -799,7 +577,7 @@
         "timing": "pre-tool",
         "profile": "user-headless",
         "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
+        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:128",
         "harnessVersion": {
           "tested": "1.1.0"
         },
@@ -837,7 +615,7 @@
         "timing": "pre-tool",
         "profile": "project-headless",
         "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
+        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:128",
         "harnessVersion": {
           "tested": "1.1.0"
         },
@@ -899,352 +677,107 @@
           },
           {
             "kind": "doc",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 docs/extensions.md:169",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/pi/tool_call/nested-mcp-deny.json",
-            "date": "2026-10-14"
-          }
-        ]
-      },
-      {
-        "policy": "stop-check",
-        "harness": "pi",
-        "event": "*",
-        "timing": "stop",
-        "profile": "any",
-        "wired": false,
-        "configSource": null,
-        "harnessVersion": {
-          "tested": "1.1.0"
-        },
-        "class": "unsupported",
-        "verification": "unverified",
-        "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [],
-        "caveats": [
-          "not wired for this harness mapping",
-          "Pi user- and project-scope extensions have not been exercised in a live session; a later tool_call handler may mutate input after DoFlow allows it"
-        ],
-        "provenance": [
-          {
-            "kind": "doc",
-            "locator": "core/registry/lifecycle.json: policy stop-check mapping for pi",
-            "date": "2026-10-14"
-          }
-        ]
-      },
-      {
-        "policy": "pre-implementation-gate",
-        "harness": "copilot",
-        "event": "PreToolUse",
-        "timing": "pre-tool",
-        "profile": "any",
-        "wired": true,
-        "configSource": "core/harnesses/copilot/hooks/doflow.json:12",
-        "harnessVersion": {
-          "tested": "GitHub Copilot CLI 1.0.103"
-        },
-        "class": "blocking",
-        "verification": "verified",
-        "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [
-          "writes via shell commands"
-        ],
-        "caveats": [
-          "live-verified: the preToolUse deny shape (a shell command was blocked) and the apply_patch payload; the edit and create tool arguments are not captured, so their path field is assumed to be `path` or `file_path`",
-          "version-drift:GitHub Copilot CLI 1.0.104."
-        ],
-        "provenance": [
-          {
-            "kind": "doc",
-            "locator": "https://docs.github.com/en/copilot/reference/hooks-reference",
-            "date": "2026-10-27"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/copilot/pre-implement-gate/apply_patch-deny.json",
-            "date": "2026-10-27"
-          },
-          {
-            "kind": "live",
-            "locator": "test/fixtures/hooks/copilot/live/deny-proof-2026-10-27.json",
-            "date": "2026-10-27"
-          },
-          {
-            "kind": "live",
-            "locator": "test/fixtures/hooks/copilot/live/capture-2026-10-27.jsonl",
-            "date": "2026-10-27"
-          }
-        ]
-      },
-      {
-        "policy": "pre-implementation-gate",
-        "harness": "kiro",
-        "event": "PreToolUse",
-        "timing": "pre-tool",
-        "profile": "ide",
-        "wired": true,
-        "configSource": "core/harnesses/kiro/hooks/doflow.json:15",
-        "harnessVersion": {
-          "tested": "kiro-cli 2.29.1"
-        },
-        "class": "blocking",
-        "verification": "verified",
-        "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [
-          "writes via shell commands"
-        ],
-        "caveats": [],
-        "provenance": [
-          {
-            "kind": "doc",
-            "locator": "https://kiro.dev/docs/hooks/types/",
-            "date": "2026-10-12"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/kiro/pre-implement-gate/deny.json",
-            "date": "2026-10-14"
-          }
-        ]
-      },
-      {
-        "policy": "pre-implementation-gate",
-        "harness": "kiro",
-        "event": "PreToolUse",
-        "timing": "pre-tool",
-        "profile": "cli-v3",
-        "wired": true,
-        "configSource": "core/harnesses/kiro/hooks/doflow.json:15",
-        "harnessVersion": {
-          "tested": "kiro-cli 2.29.1"
-        },
-        "class": "blocking",
-        "verification": "verified",
-        "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [
-          "writes via shell commands"
-        ],
-        "caveats": [],
-        "provenance": [
-          {
-            "kind": "doc",
-            "locator": "https://kiro.dev/docs/hooks/types/",
-            "date": "2026-10-12"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/kiro/pre-implement-gate/deny.json",
-            "date": "2026-10-14"
-          }
-        ]
-      },
-      {
-        "policy": "pre-implementation-gate",
-        "harness": "kiro",
-        "event": "PreToolUse",
-        "timing": "pre-tool",
-        "profile": "cli-v3-agent",
-        "wired": true,
-        "configSource": "core/harnesses/kiro/agents/doflow.json:11",
-        "harnessVersion": {
-          "tested": "kiro-cli 2.29.1"
-        },
-        "class": "blocking",
-        "verification": "verified",
-        "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [
-          "writes via shell commands"
-        ],
-        "caveats": [],
-        "provenance": [
-          {
-            "kind": "doc",
-            "locator": "https://kiro.dev/docs/hooks/types/",
-            "date": "2026-10-12"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/kiro/pre-implement-gate/agent-deny.json",
-            "date": "2026-10-14"
-          }
-        ]
-      },
-      {
-        "policy": "pre-implementation-gate",
-        "harness": "kiro",
-        "event": "PreToolUse",
-        "timing": "pre-tool",
-        "profile": "cli-2x-agent",
-        "wired": true,
-        "configSource": "core/harnesses/kiro/hooks/doflow.json:15",
-        "harnessVersion": {
-          "tested": "kiro-cli 2.29.1"
-        },
-        "class": "blocking",
-        "verification": "verified",
-        "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [
-          "writes via shell commands"
-        ],
-        "caveats": [],
-        "provenance": [
-          {
-            "kind": "doc",
-            "locator": "https://kiro.dev/docs/hooks/types/",
-            "date": "2026-10-12"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/kiro/pre-implement-gate/agent-deny.json",
-            "date": "2026-10-14"
-          }
-        ]
-      },
-      {
-        "policy": "pre-implementation-gate",
-        "harness": "antigravity",
-        "event": "PreToolUse",
-        "timing": "pre-tool",
-        "profile": "any",
-        "wired": true,
-        "configSource": "src/adapters/antigravity/index.js:60",
-        "harnessVersion": {
-          "tested": "1.3.3"
-        },
-        "class": "blocking",
-        "verification": "verified",
-        "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [
-          "writes via shell commands"
-        ],
-        "caveats": [],
-        "provenance": [
-          {
-            "kind": "doc",
-            "locator": "https://antigravity.google/docs/hooks/",
-            "date": "2026-10-12"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/antigravity/pre-implement-gate/deny-missing-design.json",
-            "date": "2026-10-14"
-          }
-        ]
-      },
-      {
-        "policy": "pre-bash-guard",
-        "harness": "claude",
-        "event": "PreToolUse",
-        "timing": "pre-tool",
-        "profile": "any",
-        "wired": true,
-        "configSource": "core/harnesses/claude/settings/settings.json:89",
-        "harnessVersion": {
-          "tested": "2.1.287 (Claude Code)"
-        },
-        "class": "blocking",
-        "verification": "verified",
-        "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [],
-        "caveats": [],
-        "provenance": [
-          {
-            "kind": "doc",
-            "locator": "https://code.claude.com/docs/en/hooks",
-            "date": "2026-10-12"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/claude/pre-bash-guard/deny.json",
-            "date": "2026-10-14"
-          }
-        ]
-      },
-      {
-        "policy": "pre-bash-guard",
-        "harness": "codex",
-        "event": "PreToolUse",
-        "timing": "pre-tool",
-        "profile": "any",
-        "wired": true,
-        "configSource": "core/harnesses/codex/hooks/hooks.json:45",
-        "harnessVersion": {
-          "tested": "codex-cli 0.162.1"
-        },
-        "class": "blocking",
-        "verification": "verified",
-        "prerequisites": [
-          "hook-review"
-        ],
-        "covers": [],
-        "doesNotCover": [],
-        "caveats": [],
-        "provenance": [
-          {
-            "kind": "doc",
-            "locator": "https://learn.chatgpt.com/docs/hooks",
-            "date": "2026-10-12"
+            "locator": "@earendil-works/pi-coding-agent@1.1.0 docs/extensions.md:169",
+            "date": "2026-10-14"
           },
           {
             "kind": "fixture",
-            "locator": "test/fixtures/hooks/codex/pre-bash-guard/deny.json",
+            "locator": "test/fixtures/hooks/pi/tool_call/nested-mcp-deny.json",
             "date": "2026-10-14"
           }
         ]
       },
       {
-        "policy": "pre-bash-guard",
-        "harness": "opencode",
+        "policy": "stop-check",
+        "harness": "pi",
         "event": "*",
-        "timing": "pre-tool",
+        "timing": "stop",
         "profile": "any",
         "wired": false,
         "configSource": null,
         "harnessVersion": {
-          "tested": "1.18.30"
+          "tested": "1.1.0"
         },
         "class": "unsupported",
         "verification": "unverified",
         "prerequisites": [],
         "covers": [],
         "doesNotCover": [],
-        "caveats": [],
+        "caveats": [
+          "not wired for this harness mapping",
+          "Pi user- and project-scope extensions have not been exercised in a live session; a later tool_call handler may mutate input after DoFlow allows it"
+        ],
         "provenance": [
           {
             "kind": "doc",
-            "locator": "core/registry/harnesses.json: opencode harness; core/registry/contracts.json: unavailable hook mapping",
-            "date": "2026-10-12"
+            "locator": "core/registry/lifecycle.json: policy stop-check mapping for pi",
+            "date": "2026-10-14"
+          }
+        ]
+      },
+      {
+        "policy": "pre-implementation-gate",
+        "harness": "copilot",
+        "event": "PreToolUse",
+        "timing": "pre-tool",
+        "profile": "any",
+        "wired": true,
+        "configSource": "core/harnesses/copilot/hooks/doflow.json:12",
+        "harnessVersion": {
+          "tested": "GitHub Copilot CLI 1.0.103"
+        },
+        "class": "advisory",
+        "verification": "verified",
+        "prerequisites": [],
+        "covers": [],
+        "doesNotCover": [
+          "writes via shell commands"
+        ],
+        "caveats": [
+          "live-verified: the preToolUse deny shape (a shell command was blocked) and the apply_patch payload; the edit and create tool arguments are not captured, so their path field is assumed to be `path` or `file_path`",
+          "version-drift:GitHub Copilot CLI 1.0.104."
+        ],
+        "provenance": [
+          {
+            "kind": "doc",
+            "locator": "https://docs.github.com/en/copilot/reference/hooks-reference",
+            "date": "2026-10-27"
+          },
+          {
+            "kind": "fixture",
+            "locator": "test/fixtures/hooks/copilot/pre-implement-gate/apply_patch-deny.json",
+            "date": "2026-10-27"
+          },
+          {
+            "kind": "live",
+            "locator": "test/fixtures/hooks/copilot/live/deny-proof-2026-10-27.json",
+            "date": "2026-10-27"
+          },
+          {
+            "kind": "live",
+            "locator": "test/fixtures/hooks/copilot/live/capture-2026-10-27.jsonl",
+            "date": "2026-10-27"
           }
         ]
       },
       {
-        "policy": "pre-bash-guard",
+        "policy": "pre-implementation-gate",
         "harness": "kiro",
         "event": "PreToolUse",
         "timing": "pre-tool",
         "profile": "ide",
         "wired": true,
-        "configSource": "core/harnesses/kiro/hooks/doflow.json:24",
+        "configSource": "core/harnesses/kiro/hooks/doflow.json:15",
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
-        "class": "blocking",
+        "class": "advisory",
         "verification": "verified",
         "prerequisites": [],
         "covers": [],
-        "doesNotCover": [],
+        "doesNotCover": [
+          "writes via shell commands"
+        ],
         "caveats": [],
         "provenance": [
           {
@@ -1254,27 +787,29 @@
           },
           {
             "kind": "fixture",
-            "locator": "test/fixtures/hooks/kiro/pre-bash-guard/deny.json",
+            "locator": "test/fixtures/hooks/kiro/pre-implement-gate/deny.json",
             "date": "2026-10-14"
           }
         ]
       },
       {
-        "policy": "pre-bash-guard",
+        "policy": "pre-implementation-gate",
         "harness": "kiro",
         "event": "PreToolUse",
         "timing": "pre-tool",
         "profile": "cli-v3",
         "wired": true,
-        "configSource": "core/harnesses/kiro/hooks/doflow.json:24",
+        "configSource": "core/harnesses/kiro/hooks/doflow.json:15",
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
-        "class": "blocking",
+        "class": "advisory",
         "verification": "verified",
         "prerequisites": [],
         "covers": [],
-        "doesNotCover": [],
+        "doesNotCover": [
+          "writes via shell commands"
+        ],
         "caveats": [],
         "provenance": [
           {
@@ -1284,27 +819,29 @@
           },
           {
             "kind": "fixture",
-            "locator": "test/fixtures/hooks/kiro/pre-bash-guard/deny.json",
+            "locator": "test/fixtures/hooks/kiro/pre-implement-gate/deny.json",
             "date": "2026-10-14"
           }
         ]
       },
       {
-        "policy": "pre-bash-guard",
+        "policy": "pre-implementation-gate",
         "harness": "kiro",
         "event": "PreToolUse",
         "timing": "pre-tool",
         "profile": "cli-v3-agent",
         "wired": true,
-        "configSource": "core/harnesses/kiro/agents/doflow.json:21",
+        "configSource": "core/harnesses/kiro/agents/doflow.json:11",
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
-        "class": "blocking",
+        "class": "advisory",
         "verification": "verified",
         "prerequisites": [],
         "covers": [],
-        "doesNotCover": [],
+        "doesNotCover": [
+          "writes via shell commands"
+        ],
         "caveats": [],
         "provenance": [
           {
@@ -1314,27 +851,29 @@
           },
           {
             "kind": "fixture",
-            "locator": "test/fixtures/hooks/kiro/pre-bash-guard/agent-deny.json",
+            "locator": "test/fixtures/hooks/kiro/pre-implement-gate/agent-deny.json",
             "date": "2026-10-14"
           }
         ]
       },
       {
-        "policy": "pre-bash-guard",
+        "policy": "pre-implementation-gate",
         "harness": "kiro",
         "event": "PreToolUse",
         "timing": "pre-tool",
         "profile": "cli-2x-agent",
         "wired": true,
-        "configSource": "core/harnesses/kiro/agents/doflow.json:21",
+        "configSource": "core/harnesses/kiro/hooks/doflow.json:15",
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
-        "class": "blocking",
+        "class": "advisory",
         "verification": "verified",
         "prerequisites": [],
         "covers": [],
-        "doesNotCover": [],
+        "doesNotCover": [
+          "writes via shell commands"
+        ],
         "caveats": [],
         "provenance": [
           {
@@ -1344,34 +883,39 @@
           },
           {
             "kind": "fixture",
-            "locator": "test/fixtures/hooks/kiro/pre-bash-guard/agent-deny.json",
+            "locator": "test/fixtures/hooks/kiro/pre-implement-gate/agent-deny.json",
             "date": "2026-10-14"
           }
         ]
       },
       {
-        "policy": "pre-bash-guard",
+        "policy": "pre-implementation-gate",
         "harness": "antigravity",
-        "event": "*",
+        "event": "PreToolUse",
         "timing": "pre-tool",
         "profile": "any",
-        "wired": false,
-        "configSource": null,
+        "wired": true,
+        "configSource": "src/adapters/antigravity/index.js:60",
         "harnessVersion": {
           "tested": "1.3.3"
         },
-        "class": "unsupported",
-        "verification": "unverified",
+        "class": "advisory",
+        "verification": "verified",
         "prerequisites": [],
         "covers": [],
-        "doesNotCover": [],
-        "caveats": [
-          "not wired for this harness mapping"
+        "doesNotCover": [
+          "writes via shell commands"
         ],
+        "caveats": [],
         "provenance": [
           {
             "kind": "doc",
-            "locator": "core/registry/lifecycle.json: policy pre-bash-guard mapping for antigravity",
+            "locator": "https://antigravity.google/docs/hooks/",
+            "date": "2026-10-12"
+          },
+          {
+            "kind": "fixture",
+            "locator": "test/fixtures/hooks/antigravity/pre-implement-gate/deny-missing-design.json",
             "date": "2026-10-14"
           }
         ]
@@ -1383,7 +927,7 @@
         "timing": "session",
         "profile": "any",
         "wired": true,
-        "configSource": "core/harnesses/claude/settings/settings.json:36",
+        "configSource": "core/harnesses/claude/settings/settings.json:44",
         "harnessVersion": {
           "tested": "2.1.287 (Claude Code)"
         },
@@ -1696,7 +1240,7 @@
         "timing": "pre-tool",
         "profile": "any",
         "wired": true,
-        "configSource": "core/harnesses/claude/settings/settings.json:89",
+        "configSource": "core/harnesses/claude/settings/settings.json:97",
         "harnessVersion": {
           "tested": "2.1.287 (Claude Code)"
         },
@@ -1900,7 +1444,7 @@
         "timing": "pre-tool",
         "profile": "ide",
         "wired": true,
-        "configSource": "core/harnesses/kiro/hooks/doflow.json:34",
+        "configSource": "core/harnesses/kiro/hooks/doflow.json:24",
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
@@ -1930,7 +1474,7 @@
         "timing": "pre-tool",
         "profile": "cli-v3",
         "wired": true,
-        "configSource": "core/harnesses/kiro/hooks/doflow.json:34",
+        "configSource": "core/harnesses/kiro/hooks/doflow.json:24",
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
@@ -1960,7 +1504,7 @@
         "timing": "pre-tool",
         "profile": "cli-v3-agent",
         "wired": true,
-        "configSource": "core/harnesses/kiro/agents/doflow.json:31",
+        "configSource": "core/harnesses/kiro/agents/doflow.json:21",
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
@@ -1990,7 +1534,7 @@
         "timing": "pre-tool",
         "profile": "cli-2x-agent",
         "wired": true,
-        "configSource": "core/harnesses/kiro/agents/doflow.json:31",
+        "configSource": "core/harnesses/kiro/agents/doflow.json:21",
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
@@ -2047,11 +1591,11 @@
         "timing": "stop",
         "profile": "any",
         "wired": true,
-        "configSource": "core/harnesses/claude/settings/settings.json:147",
+        "configSource": "core/harnesses/claude/settings/settings.json:146",
         "harnessVersion": {
           "tested": "2.1.287 (Claude Code)"
         },
-        "class": "blocking",
+        "class": "advisory",
         "verification": "verified",
         "prerequisites": [],
         "covers": [],
@@ -2077,11 +1621,11 @@
         "timing": "stop",
         "profile": "any",
         "wired": true,
-        "configSource": "core/harnesses/codex/hooks/hooks.json:99",
+        "configSource": "core/harnesses/codex/hooks/hooks.json:89",
         "harnessVersion": {
           "tested": "codex-cli 0.162.1"
         },
-        "class": "blocking",
+        "class": "advisory",
         "verification": "verified",
         "prerequisites": [
           "hook-review"
@@ -2134,7 +1678,7 @@
         "timing": "stop",
         "profile": "any",
         "wired": true,
-        "configSource": "core/harnesses/copilot/hooks/doflow.json:32",
+        "configSource": "core/harnesses/copilot/hooks/doflow.json:26",
         "harnessVersion": {
           "tested": "GitHub Copilot CLI 1.0.103"
         },
@@ -2166,49 +1710,6 @@
           }
         ]
       },
-      {
-        "policy": "pre-bash-guard",
-        "harness": "copilot",
-        "event": "PreToolUse",
-        "timing": "pre-tool",
-        "profile": "any",
-        "wired": true,
-        "configSource": "core/harnesses/copilot/hooks/doflow.json:12",
-        "harnessVersion": {
-          "tested": "GitHub Copilot CLI 1.0.103"
-        },
-        "class": "blocking",
-        "verification": "verified",
-        "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [],
-        "caveats": [
-          "live-verified: the deny output blocked a shell command; Copilot command hooks are fail-closed on a non-zero exit and fail open on a timeout",
-          "version-drift:GitHub Copilot CLI 1.0.104."
-        ],
-        "provenance": [
-          {
-            "kind": "doc",
-            "locator": "https://docs.github.com/en/copilot/reference/hooks-reference",
-            "date": "2026-10-27"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/copilot/pre-bash-guard/deny.json",
-            "date": "2026-10-27"
-          },
-          {
-            "kind": "live",
-            "locator": "test/fixtures/hooks/copilot/live/deny-proof-2026-10-27.json",
-            "date": "2026-10-27"
-          },
-          {
-            "kind": "live",
-            "locator": "test/fixtures/hooks/copilot/live/capture-2026-10-27.jsonl",
-            "date": "2026-10-27"
-          }
-        ]
-      },
       {
         "policy": "stop-check",
         "harness": "kiro",
@@ -2216,7 +1717,7 @@
         "timing": "stop",
         "profile": "ide",
         "wired": true,
-        "configSource": "core/harnesses/kiro/hooks/doflow.json:44",
+        "configSource": "core/harnesses/kiro/hooks/doflow.json:34",
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
@@ -2254,7 +1755,7 @@
         "timing": "stop",
         "profile": "cli-v3",
         "wired": true,
-        "configSource": "core/harnesses/kiro/hooks/doflow.json:44",
+        "configSource": "core/harnesses/kiro/hooks/doflow.json:34",
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
@@ -2296,7 +1797,7 @@
         "harnessVersion": {
           "tested": "1.3.3"
         },
-        "class": "blocking",
+        "class": "advisory",
         "verification": "verified",
         "prerequisites": [],
         "covers": [],
@@ -2322,7 +1823,7 @@
         "timing": "pre-tool",
         "profile": "project-interactive",
         "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
+        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:128",
         "harnessVersion": {
           "tested": "1.1.0"
         },
@@ -2358,47 +1859,6 @@
           }
         ]
       },
-      {
-        "policy": "pre-bash-guard",
-        "harness": "pi",
-        "event": "tool_call",
-        "timing": "pre-tool",
-        "profile": "project-interactive",
-        "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
-        "harnessVersion": {
-          "tested": "1.1.0"
-        },
-        "class": "unknown",
-        "verification": "unverified",
-        "prerequisites": [
-          "project-trust"
-        ],
-        "covers": [],
-        "doesNotCover": [],
-        "caveats": [
-          "project-trust is required for the project-scope extension",
-          "loading path not live-observed",
-          "project-trust is required for the project-scope extension"
-        ],
-        "provenance": [
-          {
-            "kind": "types",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 dist/core/extensions/types.d.ts:907-958",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "doc",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 docs/extensions.md:169",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/pi/tool_call/bash-deny.json",
-            "date": "2026-10-14"
-          }
-        ]
-      },
       {
         "policy": "mcp-tool-guard",
         "harness": "pi",
@@ -2406,7 +1866,7 @@
         "timing": "pre-tool",
         "profile": "project-interactive",
         "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
+        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:128",
         "harnessVersion": {
           "tested": "1.1.0"
         },
@@ -2447,7 +1907,7 @@
         "timing": "stop",
         "profile": "cli-2x-agent",
         "wired": true,
-        "configSource": "core/harnesses/kiro/agents/doflow.json:50",
+        "configSource": "core/harnesses/kiro/agents/doflow.json:40",
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
@@ -2479,7 +1939,7 @@
         "timing": "stop",
         "profile": "cli-v3-agent",
         "wired": true,
-        "configSource": "core/harnesses/kiro/agents/doflow.json:50",
+        "configSource": "core/harnesses/kiro/agents/doflow.json:40",
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
@@ -2517,7 +1977,7 @@
         "timing": "pre-tool",
         "profile": "user-interactive",
         "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
+        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:128",
         "harnessVersion": {
           "tested": "1.1.0"
         },
@@ -2550,44 +2010,6 @@
           }
         ]
       },
-      {
-        "policy": "pre-bash-guard",
-        "harness": "pi",
-        "event": "tool_call",
-        "timing": "pre-tool",
-        "profile": "user-interactive",
-        "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
-        "harnessVersion": {
-          "tested": "1.1.0"
-        },
-        "class": "unknown",
-        "verification": "unverified",
-        "prerequisites": [],
-        "covers": [],
-        "doesNotCover": [],
-        "caveats": [
-          "Pi extension has not been exercised in a live session; a later tool_call handler may mutate input after DoFlow allows it",
-          "live probe pending"
-        ],
-        "provenance": [
-          {
-            "kind": "types",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 dist/core/extensions/types.d.ts:907-958",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "doc",
-            "locator": "@earendil-works/pi-coding-agent@1.1.0 docs/extensions.md:169",
-            "date": "2026-10-14"
-          },
-          {
-            "kind": "fixture",
-            "locator": "test/fixtures/hooks/pi/tool_call/bash-deny.json",
-            "date": "2026-10-14"
-          }
-        ]
-      },
       {
         "policy": "mcp-tool-guard",
         "harness": "pi",
@@ -2595,7 +2017,7 @@
         "timing": "pre-tool",
         "profile": "user-interactive",
         "wired": true,
-        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:129",
+        "configSource": "core/harnesses/pi/extensions/doflow-guard.js:128",
         "harnessVersion": {
           "tested": "1.1.0"
         },
@@ -2633,7 +2055,7 @@
         "timing": "session",
         "profile": "cli-v3-agent",
         "wired": true,
-        "configSource": "core/harnesses/kiro/agents/doflow.json:42",
+        "configSource": "core/harnesses/kiro/agents/doflow.json:32",
         "harnessVersion": {
           "tested": "kiro-cli 2.29.1"
         },
@@ -3026,6 +2448,6 @@
         ]
       }
     ],
-    "rowsDigest": "sha256:d8fdf93bb4a556f0ba91d5a8eb74e5857c29fe7ea87e2731a39afb955d50bb59"
+    "rowsDigest": "sha256:39c81a958388528cddec2fa524296872bf420d37073ae643a76faddc54893cf5"
   }
 }