@miller-tech/uap 1.42.6 → 1.43.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miller-tech/uap",
-  "version": "1.42.6",
+  "version": "1.43.0",
   "description": "Autonomous AI agent memory system with CLAUDE.md protocol enforcement",
   "type": "module",
   "main": "dist/index.js",

package/src/policies/enforcers/delivery_enforcement.py

@@ -6,8 +6,9 @@ non-trivial coding work goes through the `uap deliver` convergence loop (which
 drives a model to verified completion against the real gates) rather than
 ad-hoc hand edits.
 
-SAFETY — default mode is ADVISORY (always allows, logs a nudge), so installing
-this policy never breaks editing. Strict enforcement is opt-in:
+DEFAULT mode is BLOCK: substantive source edits must route through `uap deliver`
+(set UAP_ENFORCE_DELIVERY=advisory to relax to a logged nudge). Escape hatches
+(UAP_DELIVER_ACTIVE / UAP_DELIVER_BYPASS) are always honored:
 
   UAP_ENFORCE_DELIVERY=block   # direct source edits outside a deliver context
                                # are blocked (exit 2)
@@ -84,13 +85,13 @@ def main() -> None:
         "manual edit."
     )
 
-    mode = os.environ.get("UAP_ENFORCE_DELIVERY", "advisory").lower()
+    mode = os.environ.get("UAP_ENFORCE_DELIVERY", "block").lower()
     if mode == "block":
         emit(False, msg)
 
-    # Advisory (default): never blocks. Surface the nudge, then allow.
+    # Advisory (opt-out): never blocks. Surface the nudge, then allow.
     print(f"[delivery-enforcement advisory] {msg}", file=sys.stderr)
-    emit(True, "advisory: nudge logged (set UAP_ENFORCE_DELIVERY=block to enforce)")
+    emit(True, "advisory: nudge logged (block is the default; UAP_ENFORCE_DELIVERY=advisory relaxes)")
 
 
 if __name__ == "__main__":

package/src/policies/schemas/policies/delivery-enforcement.md

@@ -32,13 +32,13 @@ the expectation explicit and, when a team opts in, enforces it.
 
 Python enforcer `delivery_enforcement.py`.
 
-**Default mode is ADVISORY** — it always allows the edit and logs a one-line
-nudge toward `uap deliver`. Installing the policy therefore never breaks normal
-editing.
+**Default mode is BLOCK** — a direct source edit outside a deliver context is
+blocked (exit 2) until the work is routed through `uap deliver` (or
+`UAP_DELIVER_ACTIVE`/`UAP_DELIVER_BYPASS` is set).
 
-**Strict mode is opt-in** via `UAP_ENFORCE_DELIVERY=block`: a direct source
-edit outside a deliver context is then blocked (exit 2) until the work is routed
-through `uap deliver` or `UAP_DELIVER_BYPASS=1` is set.
+**Advisory mode is opt-out** via `UAP_ENFORCE_DELIVERY=advisory` — it then
+always allows the edit and logs a one-line nudge toward `uap deliver` instead
+of blocking.
 
 Exempt by construction: non-source files; `docs/`, `scripts/`, `policies/`,
 `src/policies/`, test files (deliver protects those itself); and tooling