@windyroad/risk-scorer 0.13.3 → 0.13.4-preview.746

package/.claude-plugin/plugin.json

@@ -310,5 +310,5 @@
     }
   },
   "name": "wr-risk-scorer",
-  "version": "0.13.3"
+  "version": "0.13.4"
 }

package/hooks/external-comms-evaluator.conf

@@ -21,3 +21,10 @@ EXTERNAL_COMMS_POLICY_FILE=RISK-POLICY.md
 # Whether to run the leak-pattern pre-filter (lib/leak-detect.sh). Risk evaluator
 # checks confidential-information leaks; voice-tone evaluator does not.
 EXTERNAL_COMMS_LEAK_PREFILTER=yes
+
+# Surfaces this evaluator's policy disclaims (P360). EMPTY for the risk evaluator:
+# leak detection on commit-message bodies is meaningful (a credential committed to
+# git history is still a leak), so risk-scorer gates every detected surface. The
+# voice-tone evaluator sets this to `git-commit-message` because its policy doc
+# excludes commit messages; the divergence lives in each package's .conf.
+EXTERNAL_COMMS_SKIP_SURFACES=

package/hooks/external-comms-gate.sh

@@ -78,6 +78,10 @@ source "$SCRIPT_DIR/lib/external-comms-key.sh"
 #   EXTERNAL_COMMS_ASSESS_SKILL    — on-demand skill path for manual delegation
 #   EXTERNAL_COMMS_POLICY_FILE     — policy doc whose absence triggers advisory-only
 #   EXTERNAL_COMMS_LEAK_PREFILTER  — yes|no — whether to run leak-detect pre-filter
+#   EXTERNAL_COMMS_SKIP_SURFACES   — space-separated surface list this evaluator's
+#                                    policy disclaims; the marker-review delegation
+#                                    silent-passes on those surfaces (P360). Default
+#                                    empty (gate every detected surface).
 # Fail-closed if absent: this hook cannot operate without a configured evaluator.
 CONF_FILE="$SCRIPT_DIR/external-comms-evaluator.conf"
 if [ ! -f "$CONF_FILE" ]; then
@@ -91,6 +95,7 @@ source "$CONF_FILE"
 : "${EXTERNAL_COMMS_ASSESS_SKILL:?assess-skill missing from $CONF_FILE}"
 EXTERNAL_COMMS_POLICY_FILE="${EXTERNAL_COMMS_POLICY_FILE:-RISK-POLICY.md}"
 EXTERNAL_COMMS_LEAK_PREFILTER="${EXTERNAL_COMMS_LEAK_PREFILTER:-yes}"
+EXTERNAL_COMMS_SKIP_SURFACES="${EXTERNAL_COMMS_SKIP_SURFACES:-}"
 
 # ---------- Bypass ----------
 if [ "${BYPASS_RISK_GATE:-0}" = "1" ]; then
@@ -318,6 +323,26 @@ if [ "$EXTERNAL_COMMS_LEAK_PREFILTER" = "yes" ]; then
     fi
 fi
 
+# ---------- Per-evaluator surface skip (P360) ----------
+# Some surfaces are explicitly disclaimed by THIS evaluator's policy doc, so the
+# marker-review delegation below would be a guaranteed-PASS no-op (the subagent
+# reads the policy, declares the surface out of scope, emits PASS — ~19K tokens
+# per round-trip). EXTERNAL_COMMS_SKIP_SURFACES (per-package .conf) lists those
+# surfaces; the gate silent-passes the prose-review delegation when the detected
+# surface is on the list. Voice-tone sets this to `git-commit-message` because
+# docs/VOICE-AND-TONE.md § Scope excludes commit messages ("covered by ADR-014 +
+# ADR-018"); risk-scorer leaves it empty (its leak check on commit messages is
+# meaningful). Placed AFTER the leak pre-filter so a skipped surface still gets
+# credential/prod-URL scanning — this silences ONLY the prose-review deny, the
+# same conservative shape as the P365 repo-visibility precondition below.
+if [ -n "$EXTERNAL_COMMS_SKIP_SURFACES" ]; then
+    case " $EXTERNAL_COMMS_SKIP_SURFACES " in
+        *" $SURFACE "*)
+            exit 0
+            ;;
+    esac
+fi
+
 # ---------- Repo-visibility precondition: git-commit-message surface (P365) ----------
 # A commit message only becomes external-facing prose when it lands in a PUBLIC
 # GitHub repo (git log / PR commits tab / release-page auto-notes / CHANGELOG).

package/hooks/test/external-comms-gate.bats

@@ -385,6 +385,21 @@ run_hook() {
   [[ "$output" == *"git-commit-message"* ]]
 }
 
+@test "P360: empty EXTERNAL_COMMS_SKIP_SURFACES leaves the risk evaluator gating commit messages (divergence guard)" {
+  # The voice-tone evaluator skips git-commit-message (its policy disclaims it);
+  # the risk evaluator's .conf leaves EXTERNAL_COMMS_SKIP_SURFACES empty, so its
+  # leak check on commit bodies stays meaningful. Guards against a regression
+  # that accidentally skips this surface for risk-scorer (e.g. defaulting the
+  # knob non-empty, or syncing voice-tone's value into the shared gate body).
+  grep -qE '^EXTERNAL_COMMS_SKIP_SURFACES=$' "$HOOKS_DIR/external-comms-evaluator.conf"
+  mock_gh_visibility PUBLIC
+  INPUT=$(build_bash_input "git commit -m \"fix(foo): handle null input\"")
+  run_hook "$INPUT"
+  [ "$status" -eq 0 ]
+  [[ "$output" == *"deny"* ]]
+  [[ "$output" == *"git-commit-message"* ]]
+}
+
 @test "P365: leak-shaped credential in a PRIVATE-repo commit body still hard-fails (security net survives)" {
   mock_gh_visibility PRIVATE
   INPUT=$(build_bash_input "git commit -m \"docs: token=${GH_TOKEN_LIKE}\"")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@windyroad/risk-scorer",
-  "version": "0.13.3",
+  "version": "0.13.4-preview.746",
   "description": "Pipeline risk scoring, commit/push gates, and secret leak detection",
   "bin": {
     "windyroad-risk-scorer": "./bin/install.mjs"