@windyroad/risk-scorer 0.17.4 → 0.18.0

package/hooks/test/risk-score-mark-register-queue.bats

@@ -1,253 +0,0 @@
-#!/usr/bin/env bats
-
-# Tests for the RISK_REGISTER_HINT queue-write extension to risk-score-mark.sh
-# (ADR-056 Phase 2a). Verifies the PostToolUse:Agent hook parses the
-# RISK_REGISTER_HINT block from pipeline-agent output and appends one JSONL
-# line per valid bullet to .afk-run-state/risk-register-queue.jsonl.
-#
-# Behavioural fixtures per ADR-052: each test pipes a mock agent output to
-# the hook and asserts on side-effects (queue file content / shape / silence).
-# No structural grep against source.
-#
-# Cross-references:
-#   ADR-056: docs/decisions/056-risk-register-back-channel-write-contract.proposed.md
-#   ADR-045: hook injection budget Pattern 2 (silent on stdout)
-#   P033:    docs/problems/033-no-persistent-risk-register.known-error.md (driver)
-#   P110:    pipeline back-channel hint (consumer of this contract)
-
-setup() {
-  SCRIPT_DIR="$(cd "$(dirname "$BATS_TEST_FILENAME")/.." && pwd)"
-  HOOK="$SCRIPT_DIR/risk-score-mark.sh"
-  ORIG_DIR="$PWD"
-  TEST_DIR=$(mktemp -d)
-  cd "$TEST_DIR"
-  TMPDIR="$TEST_DIR/tmp"
-  export TMPDIR
-  mkdir -p "$TMPDIR"
-  SESSION_ID="test-session-$$"
-  RDIR="$TMPDIR/claude-risk-${SESSION_ID}"
-  QUEUE_FILE="$TEST_DIR/.afk-run-state/risk-register-queue.jsonl"
-}
-
-teardown() {
-  cd "$ORIG_DIR"
-  rm -rf "$TEST_DIR"
-}
-
-# Build mock PostToolUse:Agent JSON envelope and pipe to the hook.
-run_hook() {
-  local subagent="$1"
-  local agent_output="$2"
-  python3 -c "
-import json, sys
-print(json.dumps({
-  'tool_name': 'Agent',
-  'session_id': '${SESSION_ID}',
-  'tool_input': {'subagent_type': '${subagent}'},
-  'tool_response': {'content': [{'type': 'text', 'text': sys.stdin.read()}]}
-}))" <<<"$agent_output" | bash "$HOOK"
-}
-
-# Capture hook stdout (separate from filesystem side-effects).
-run_hook_capture_stdout() {
-  local subagent="$1"
-  local agent_output="$2"
-  python3 -c "
-import json, sys
-print(json.dumps({
-  'tool_name': 'Agent',
-  'session_id': '${SESSION_ID}',
-  'tool_input': {'subagent_type': '${subagent}'},
-  'tool_response': {'content': [{'type': 'text', 'text': sys.stdin.read()}]}
-}))" <<<"$agent_output" | bash "$HOOK"
-}
-
-# ---------------------------------------------------------------------------
-# 3-column (preferred) parse path
-# ---------------------------------------------------------------------------
-
-@test "3-col hint with one above-appetite bullet → one JSONL line, slug_source=agent" {
-  run_hook "wr-risk-scorer:pipeline" "RISK_SCORES: commit=12 push=8 release=4
-
-RISK_REGISTER_HINT:
-- above-appetite-residual | cumulative-residual-commit-layer-above-appetite | Cumulative residual reached 12/25 due to mass-edit across 17 files."
-  [ -f "$QUEUE_FILE" ]
-  LINE_COUNT=$(wc -l < "$QUEUE_FILE")
-  [ "$LINE_COUNT" -eq 1 ]
-  REASON=$(python3 -c "import json,sys; print(json.loads(sys.stdin.readline())['reason_tag'])" < "$QUEUE_FILE")
-  SLUG=$(python3 -c "import json,sys; print(json.loads(sys.stdin.readline())['risk_slug'])" < "$QUEUE_FILE")
-  SOURCE=$(python3 -c "import json,sys; print(json.loads(sys.stdin.readline())['slug_source'])" < "$QUEUE_FILE")
-  PREFILL=$(python3 -c "import json,sys; print(json.loads(sys.stdin.readline())['prefill'])" < "$QUEUE_FILE")
-  [ "$REASON" = "above-appetite-residual" ]
-  [ "$SLUG" = "cumulative-residual-commit-layer-above-appetite" ]
-  [ "$SOURCE" = "agent" ]
-  [[ "$PREFILL" == *"mass-edit across 17 files"* ]]
-}
-
-@test "3-col hint with three bullets → three JSONL lines in order, all slug_source=agent" {
-  run_hook "wr-risk-scorer:pipeline" "RISK_SCORES: commit=10 push=8 release=5
-
-RISK_REGISTER_HINT:
-- above-appetite-residual | cumulative-residual-above-appetite | Above-appetite residual.
-- confidentiality-disclosure | revenue-figures-leaked | Revenue figures in changeset.
-- user-stated-precondition | paired-capability-unmet | Pair B not yet shipped."
-  LINE_COUNT=$(wc -l < "$QUEUE_FILE")
-  [ "$LINE_COUNT" -eq 3 ]
-  TAGS=$(python3 -c "
-import json
-with open('$QUEUE_FILE') as f:
-    for line in f:
-        print(json.loads(line)['reason_tag'])
-")
-  EXPECTED="above-appetite-residual
-confidentiality-disclosure
-user-stated-precondition"
-  [ "$TAGS" = "$EXPECTED" ]
-  ALL_AGENT=$(python3 -c "
-import json
-with open('$QUEUE_FILE') as f:
-    src = [json.loads(line)['slug_source'] for line in f]
-print(all(s == 'agent' for s in src))
-")
-  [ "$ALL_AGENT" = "True" ]
-}
-
-@test "3-col hint includes report_path matching the just-written .risk-reports file" {
-  run_hook "wr-risk-scorer:pipeline" "RISK_SCORES: commit=10 push=5 release=2
-
-RISK_REGISTER_HINT:
-- above-appetite-residual | example-slug | Example."
-  REPORT_PATH=$(python3 -c "import json,sys; print(json.loads(sys.stdin.readline())['report_path'])" < "$QUEUE_FILE")
-  [[ "$REPORT_PATH" == .risk-reports/*-commit.md ]]
-  [ -f "$REPORT_PATH" ]
-}
-
-# ---------------------------------------------------------------------------
-# 2-column legacy parse path (backward compatibility)
-# ---------------------------------------------------------------------------
-
-@test "2-col legacy hint → JSONL line with derived slug, slug_source=derived" {
-  run_hook "wr-risk-scorer:pipeline" "RISK_SCORES: commit=12 push=8 release=4
-
-RISK_REGISTER_HINT:
-- above-appetite-residual | Cumulative residual risk for commit layer."
-  [ -f "$QUEUE_FILE" ]
-  LINE_COUNT=$(wc -l < "$QUEUE_FILE")
-  [ "$LINE_COUNT" -eq 1 ]
-  SOURCE=$(python3 -c "import json,sys; print(json.loads(sys.stdin.readline())['slug_source'])" < "$QUEUE_FILE")
-  SLUG=$(python3 -c "import json,sys; print(json.loads(sys.stdin.readline())['risk_slug'])" < "$QUEUE_FILE")
-  [ "$SOURCE" = "derived" ]
-  # Derived slug starts with reason-tag prefix
-  [[ "$SLUG" == above-appetite-residual-* ]]
-  # Derived slug is filename-safe (lowercase, kebab, no spaces)
-  [[ "$SLUG" =~ ^[a-z0-9-]+$ ]]
-}
-
-@test "2-col legacy hint: same prefill produces same derived slug across runs" {
-  PREFILL_TEXT="Cumulative residual risk for commit layer."
-  run_hook "wr-risk-scorer:pipeline" "RISK_SCORES: commit=12 push=8 release=4
-
-RISK_REGISTER_HINT:
-- above-appetite-residual | $PREFILL_TEXT"
-  SLUG_1=$(python3 -c "import json,sys; print(json.loads(sys.stdin.readline())['risk_slug'])" < "$QUEUE_FILE")
-  rm -f "$QUEUE_FILE"
-  sleep 1  # ensure different timestamp on second .risk-reports write
-  run_hook "wr-risk-scorer:pipeline" "RISK_SCORES: commit=12 push=8 release=4
-
-RISK_REGISTER_HINT:
-- above-appetite-residual | $PREFILL_TEXT"
-  SLUG_2=$(python3 -c "import json,sys; print(json.loads(sys.stdin.readline())['risk_slug'])" < "$QUEUE_FILE")
-  [ "$SLUG_1" = "$SLUG_2" ]
-}
-
-@test "Mixed 3-col and 2-col bullets in same block → both shapes appended with correct slug_source" {
-  run_hook "wr-risk-scorer:pipeline" "RISK_SCORES: commit=10 push=5 release=2
-
-RISK_REGISTER_HINT:
-- above-appetite-residual | preferred-slug | First risk.
-- confidentiality-disclosure | Second risk in legacy shape."
-  LINE_COUNT=$(wc -l < "$QUEUE_FILE")
-  [ "$LINE_COUNT" -eq 2 ]
-  SOURCES=$(python3 -c "
-import json
-with open('$QUEUE_FILE') as f:
-    for line in f:
-        print(json.loads(line)['slug_source'])
-")
-  EXPECTED="agent
-derived"
-  [ "$SOURCES" = "$EXPECTED" ]
-}
-
-# ---------------------------------------------------------------------------
-# Silence + no-op paths
-# ---------------------------------------------------------------------------
-
-@test "no hint emitted (silent-pass) → queue file is not created" {
-  run_hook "wr-risk-scorer:pipeline" "RISK_SCORES: commit=2 push=2 release=1
-RISK_BYPASS: reducing"
-  [ ! -f "$QUEUE_FILE" ]
-}
-
-@test "empty agent output → no queue file, no crash" {
-  run_hook "wr-risk-scorer:pipeline" ""
-  [ ! -f "$QUEUE_FILE" ]
-}
-
-@test "malformed hint bullet (invalid reason-tag) is skipped; valid bullet appended" {
-  run_hook "wr-risk-scorer:pipeline" "RISK_SCORES: commit=10 push=5 release=2
-
-RISK_REGISTER_HINT:
-- not-a-real-tag | bogus-slug | Should be skipped.
-- above-appetite-residual | valid-slug | Should be kept."
-  LINE_COUNT=$(wc -l < "$QUEUE_FILE")
-  [ "$LINE_COUNT" -eq 1 ]
-  SLUG=$(python3 -c "import json,sys; print(json.loads(sys.stdin.readline())['risk_slug'])" < "$QUEUE_FILE")
-  [ "$SLUG" = "valid-slug" ]
-}
-
-# ---------------------------------------------------------------------------
-# Append semantics (queue is append-only; dedupe is drain-step concern)
-# ---------------------------------------------------------------------------
-
-@test "two consecutive hook runs with same hint → six JSONL lines (queue is append-only)" {
-  HINT="RISK_SCORES: commit=10 push=5 release=2
-
-RISK_REGISTER_HINT:
-- above-appetite-residual | slug-a | First.
-- confidentiality-disclosure | slug-b | Second.
-- user-stated-precondition | slug-c | Third."
-  run_hook "wr-risk-scorer:pipeline" "$HINT"
-  sleep 1
-  run_hook "wr-risk-scorer:pipeline" "$HINT"
-  LINE_COUNT=$(wc -l < "$QUEUE_FILE")
-  [ "$LINE_COUNT" -eq 6 ]
-}
-
-# ---------------------------------------------------------------------------
-# Directory creation
-# ---------------------------------------------------------------------------
-
-@test ".afk-run-state/ absent → hook creates it; queue file written" {
-  [ ! -d ".afk-run-state" ]
-  run_hook "wr-risk-scorer:pipeline" "RISK_SCORES: commit=10 push=5 release=2
-
-RISK_REGISTER_HINT:
-- above-appetite-residual | example | Example."
-  [ -d ".afk-run-state" ]
-  [ -f "$QUEUE_FILE" ]
-}
-
-# ---------------------------------------------------------------------------
-# ADR-045 Pattern 2: silent on stdout
-# ---------------------------------------------------------------------------
-
-@test "hook stdout is empty on queue-write success (ADR-045 Pattern 2)" {
-  STDOUT=$(run_hook_capture_stdout "wr-risk-scorer:pipeline" "RISK_SCORES: commit=10 push=5 release=2
-
-RISK_REGISTER_HINT:
-- above-appetite-residual | quiet-slug | Quiet please.")
-  [ -z "$STDOUT" ]
-  # Verify the side-effect did happen
-  [ -f "$QUEUE_FILE" ]
-}

package/hooks/test/risk-score-mark.bats

@@ -1,112 +0,0 @@
-#!/usr/bin/env bats
-
-# Tests for risk-score-mark.sh — verifies the PostToolUse:Agent hook
-# parses risk-scorer agent output and writes the right files into
-# the session-scoped risk dir.
-#
-# Per ADR-005 (P011): behavioural assertions are functional — they
-# pipe mock hook input to the script and assert on side-effects, not
-# on what the source happens to contain. The four "echo X | grep X"
-# tautologies that previously lived here have been removed (they
-# always passed regardless of hook behaviour).
-
-setup() {
-  SCRIPT_DIR="$(cd "$(dirname "$BATS_TEST_FILENAME")/.." && pwd)"
-  HOOK="$SCRIPT_DIR/risk-score-mark.sh"
-  ORIG_DIR="$PWD"
-  TEST_DIR=$(mktemp -d)
-  cd "$TEST_DIR"
-  TMPDIR="$TEST_DIR/tmp"
-  export TMPDIR
-  mkdir -p "$TMPDIR"
-  SESSION_ID="test-session-$$"
-  RDIR="$TMPDIR/claude-risk-${SESSION_ID}"
-}
-
-teardown() {
-  cd "$ORIG_DIR"
-  rm -rf "$TEST_DIR"
-}
-
-# Helper: build the PostToolUse:Agent JSON envelope and pipe it to the hook.
-# AGENT_OUTPUT is wrapped in tool_response.content[0].text to match the
-# real Claude Code PostToolUse hook payload shape.
-run_hook() {
-  local subagent="$1"
-  local agent_output="$2"
-  python3 -c "
-import json, sys
-print(json.dumps({
-  'tool_name': 'Agent',
-  'session_id': '${SESSION_ID}',
-  'tool_input': {'subagent_type': '${subagent}'},
-  'tool_response': {'content': [{'type': 'text', 'text': sys.stdin.read()}]}
-}))" <<<"$agent_output" | bash "$HOOK"
-}
-
-# --- Pipeline scorer: writes commit/push/release score files ---
-
-@test "pipeline: writes commit/push/release scores from RISK_SCORES line" {
-  run_hook "wr-risk-scorer:pipeline" "Header text
-RISK_SCORES: commit=2 push=3 release=1
-Trailing text"
-  [ "$(cat "$RDIR/commit")" = "2" ]
-  [ "$(cat "$RDIR/push")" = "3" ]
-  [ "$(cat "$RDIR/release")" = "1" ]
-}
-
-@test "pipeline: writes reducing bypass markers when RISK_BYPASS: reducing" {
-  run_hook "wr-risk-scorer:pipeline" "RISK_SCORES: commit=2 push=2 release=0
-RISK_BYPASS: reducing"
-  [ -f "$RDIR/reducing-commit" ]
-  [ -f "$RDIR/reducing-push" ]
-  [ -f "$RDIR/reducing-release" ]
-}
-
-@test "pipeline: writes incident bypass marker when RISK_BYPASS: incident" {
-  run_hook "wr-risk-scorer:pipeline" "RISK_SCORES: commit=10 push=10 release=10
-RISK_BYPASS: incident"
-  [ -f "$RDIR/incident-release" ]
-}
-
-@test "pipeline: writes nothing when output has no RISK_SCORES line" {
-  run_hook "wr-risk-scorer:pipeline" "No score line in this output"
-  [ ! -f "$RDIR/commit" ]
-  [ ! -f "$RDIR/push" ]
-  [ ! -f "$RDIR/release" ]
-}
-
-# --- Plan scorer: writes plan-reviewed marker on PASS only ---
-
-@test "plan: writes plan-reviewed marker on RISK_VERDICT: PASS" {
-  run_hook "wr-risk-scorer:plan" "RISK_VERDICT: PASS"
-  [ -f "$RDIR/plan-reviewed" ]
-}
-
-@test "plan: does NOT write plan-reviewed marker on RISK_VERDICT: FAIL" {
-  run_hook "wr-risk-scorer:plan" "RISK_VERDICT: FAIL"
-  [ ! -f "$RDIR/plan-reviewed" ]
-}
-
-# --- Subagent routing: case guard ignores non-risk-scorer agents ---
-
-@test "case guard: skips unrelated agent without writing files" {
-  run_hook "wr-architect:agent" "RISK_SCORES: commit=99 push=99 release=99"
-  [ ! -f "$RDIR/commit" ]
-}
-
-@test "case guard: matches wr-risk-scorer:pipeline subagent" {
-  SUBAGENT="wr-risk-scorer:pipeline"
-  case "$SUBAGENT" in
-    *risk-scorer*) true ;;
-    *) false ;;
-  esac
-}
-
-@test "case guard: does NOT match wr-architect:agent" {
-  SUBAGENT="wr-architect:agent"
-  case "$SUBAGENT" in
-    *risk-scorer*) false ;;
-    *) true ;;
-  esac
-}

package/hooks/test/risk-scorer-hook-dispatch.bats

@@ -1,77 +0,0 @@
-#!/usr/bin/env bats
-
-setup() {
-  REPO_ROOT="$(cd "$(dirname "$BATS_TEST_FILENAME")/../../../.." && pwd)"
-  HOOKS="$REPO_ROOT/packages/risk-scorer/hooks"
-}
-
-@test "hooks.json registers four command hooks" {
-  run python3 - "$HOOKS/hooks.json" <<'PY'
-import json, sys
-data = json.load(open(sys.argv[1]))
-print(sum(len(entry["hooks"]) for entries in data["hooks"].values() for entry in entries))
-PY
-  [ "$status" -eq 0 ]
-  [ "$output" = "4" ]
-}
-
-@test "dispatcher is registered for prompt, pre-tool, and post-tool events" {
-  run grep -n "risk-scorer-dispatch.sh user-prompt" "$HOOKS/hooks.json"
-  [ "$status" -eq 0 ]
-  run grep -n "risk-scorer-dispatch.sh pre-tool" "$HOOKS/hooks.json"
-  [ "$status" -eq 0 ]
-  run grep -n "risk-scorer-dispatch.sh post-tool" "$HOOKS/hooks.json"
-  [ "$status" -eq 0 ]
-}
-
-@test "dispatcher routes Write through the secret leak gate" {
-  local fake_key input
-  fake_key="AKIA""ABCDEFGHIJKLMNOP"
-  input="$(python3 - "$fake_key" <<'PY'
-import json, sys
-print(json.dumps({
-    "tool_name": "Write",
-    "session_id": "dispatch-test",
-    "tool_input": {"file_path": "src/example.txt", "content": sys.argv[1]},
-}))
-PY
-)"
-
-  run bash "$HOOKS/risk-scorer-dispatch.sh" pre-tool <<<"$input"
-  [ "$status" -eq 0 ]
-  [[ "$output" == *"permissionDecision"* ]]
-  [[ "$output" == *"deny"* ]]
-  [[ "$output" == *"AWS access key"* ]]
-}
-
-@test "dispatcher routes PostToolUse Write through the WIP nudge" {
-  local dir input orig
-  dir="$(mktemp -d)"
-  orig="$PWD"
-  mkdir -p "$dir/repo" "$dir/tmp"
-  cd "$dir/repo"
-  git init -q
-  git config user.email test@example.com
-  git config user.name "Test User"
-  printf 'base\n' > base.txt
-  git add base.txt
-  git commit -q -m initial
-  mkdir -p src
-  printf 'one\n' > src/one.txt
-  printf 'two\n' > src/two.txt
-  printf 'three\n' > src/three.txt
-  input="$(python3 - <<'PY'
-import json
-print(json.dumps({
-    "tool_name": "Write",
-    "session_id": "dispatch-wip",
-    "tool_input": {"file_path": "src/three.txt"},
-}))
-PY
-)"
-  run env TMPDIR="$dir/tmp" bash "$HOOKS/risk-scorer-dispatch.sh" post-tool <<<"$input"
-  cd "$orig"
-  rm -rf "$dir"
-  [ "$status" -eq 0 ]
-  [[ "$output" == *"Batching risk rising"* ]]
-}

package/hooks/test/risk-scorer-no-stop-hook.bats

@@ -1,19 +0,0 @@
-#!/usr/bin/env bats
-
-# P001 / ADR-009: Stop-hook marker reset removed.
-
-setup() {
-  PLUGIN_DIR="$(cd "$(dirname "$BATS_TEST_FILENAME")/../.." && pwd)"
-}
-
-@test "risk-scorer: hooks.json has no Stop hook entry (ADR-009)" {
-  ! grep -q '"Stop"' "$PLUGIN_DIR/hooks/hooks.json"
-}
-
-@test "risk-scorer: risk-score-reset.sh has been removed" {
-  [ ! -f "$PLUGIN_DIR/hooks/risk-score-reset.sh" ]
-}
-
-@test "risk-scorer: risk-policy-reset-marker.sh has been removed" {
-  [ ! -f "$PLUGIN_DIR/hooks/risk-policy-reset-marker.sh" ]
-}

package/hooks/test/risk-scorer-scaffold-nudge.bats

@@ -1,132 +0,0 @@
-#!/usr/bin/env bats
-
-# ADR-047 Amendment 2026-06-08 (P297): risk-scorer-scaffold-nudge.sh
-# (SessionStart) emits a one-line nudge when RISK-POLICY.md exists but the
-# docs/risks/ standing-risk register directory is missing, is silent
-# otherwise, and self-suppresses under the AFK guard
-# (WR_SUPPRESS_OVERSIGHT_NUDGE=1 per ADR-068) so the interactive
-# scaffold-confirm never fires into an absent-user iteration (JTBD-006).
-#
-# P375 (2026-06-27): once docs/risks/ exists, the hook no longer goes
-# silent — it counts entries still carrying the `**Curation**: pending
-# review` marker and re-surfaces the count every session so the
-# pending-review backlog self-surfaces (class-B) instead of rotting
-# silently once stubs exist (the audit's "one step short of the jtbd
-# pattern" gap).
-#
-# P379 (2026-06-28): inverse predicate of the register-missing arm — when
-# RISK-POLICY.md is ABSENT ENTIRELY the hook nudges the adopter to author
-# one via /wr-risk-scorer:update-policy (the gates otherwise run at the
-# default appetite silently). Same AFK-suppress envelope (ADR-068).
-# Behavioural — exercises the hook against fixture trees and asserts on stdout.
-
-setup() {
-  REPO_ROOT="$(cd "$(dirname "$BATS_TEST_FILENAME")/../../../.." && pwd)"
-  HOOK="$REPO_ROOT/packages/risk-scorer/hooks/risk-scorer-scaffold-nudge.sh"
-  PLUGIN_ROOT="$REPO_ROOT/packages/risk-scorer"
-  DIR="$(mktemp -d)"
-  # Hermeticity (P391): the AFK work-problems orchestrator exports
-  # WR_SUPPRESS_OVERSIGHT_NUDGE=1, which the hook self-suppresses on. Unset it so
-  # nudge-emitting tests assert real behaviour; guard-specific tests set it
-  # per-invocation via `run env WR_SUPPRESS_OVERSIGHT_NUDGE=...`.
-  unset WR_SUPPRESS_OVERSIGHT_NUDGE
-}
-
-teardown() {
-  rm -rf "$DIR"
-}
-
-@test "emits a scaffold nudge when RISK-POLICY.md exists and docs/risks/ is missing" {
-  printf 'placeholder policy\n' > "$DIR/RISK-POLICY.md"
-  run env CLAUDE_PROJECT_DIR="$DIR" CLAUDE_PLUGIN_ROOT="$PLUGIN_ROOT" bash "$HOOK"
-  [ "$status" -eq 0 ]
-  [[ "$output" == *"RISK-POLICY.md present but docs/risks/ is missing"* ]]
-  [[ "$output" == *"/wr-risk-scorer:bootstrap-catalog"* ]]
-}
-
-@test "silent when RISK-POLICY.md exists and docs/risks/ exists but is empty" {
-  printf 'placeholder policy\n' > "$DIR/RISK-POLICY.md"
-  mkdir -p "$DIR/docs/risks"
-  run env CLAUDE_PROJECT_DIR="$DIR" CLAUDE_PLUGIN_ROOT="$PLUGIN_ROOT" bash "$HOOK"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}
-
-@test "silent when docs/risks/ exists with entries but none are pending review" {
-  printf 'placeholder policy\n' > "$DIR/RISK-POLICY.md"
-  mkdir -p "$DIR/docs/risks"
-  printf '# R001\n**Curation**: curated\n' > "$DIR/docs/risks/R001-foo.active.md"
-  run env CLAUDE_PROJECT_DIR="$DIR" CLAUDE_PLUGIN_ROOT="$PLUGIN_ROOT" bash "$HOOK"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}
-
-@test "surfaces a pending-review count when entries carry the curation marker (P375 self-surfacing)" {
-  printf 'placeholder policy\n' > "$DIR/RISK-POLICY.md"
-  mkdir -p "$DIR/docs/risks"
-  printf '# R001\n**Curation**: pending review (auto-scaffolded 2026-06-17)\n' > "$DIR/docs/risks/R001-foo.active.md"
-  printf '# R002\n**Curation**: pending review\n' > "$DIR/docs/risks/R002-bar.active.md"
-  printf '# R003\n**Curation**: curated\n' > "$DIR/docs/risks/R003-baz.active.md"
-  run env CLAUDE_PROJECT_DIR="$DIR" CLAUDE_PLUGIN_ROOT="$PLUGIN_ROOT" bash "$HOOK"
-  [ "$status" -eq 0 ]
-  [[ "$output" == *"2 standing-risk entries are pending review"* ]]
-  [[ "$output" == *"docs/risks/"* ]]
-}
-
-@test "singular phrasing when exactly one entry is pending review" {
-  printf 'placeholder policy\n' > "$DIR/RISK-POLICY.md"
-  mkdir -p "$DIR/docs/risks"
-  printf '# R001\n**Curation**: pending review\n' > "$DIR/docs/risks/R001-foo.active.md"
-  run env CLAUDE_PROJECT_DIR="$DIR" CLAUDE_PLUGIN_ROOT="$PLUGIN_ROOT" bash "$HOOK"
-  [ "$status" -eq 0 ]
-  [[ "$output" == *"1 standing-risk entry is pending review"* ]]
-}
-
-@test "AFK guard suppresses the pending-review nudge too" {
-  printf 'placeholder policy\n' > "$DIR/RISK-POLICY.md"
-  mkdir -p "$DIR/docs/risks"
-  printf '# R001\n**Curation**: pending review\n' > "$DIR/docs/risks/R001-foo.active.md"
-  run env WR_SUPPRESS_OVERSIGHT_NUDGE=1 CLAUDE_PROJECT_DIR="$DIR" CLAUDE_PLUGIN_ROOT="$PLUGIN_ROOT" bash "$HOOK"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}
-
-@test "emits a policy-authoring nudge when RISK-POLICY.md is absent (P379 inverse predicate)" {
-  run env CLAUDE_PROJECT_DIR="$DIR" CLAUDE_PLUGIN_ROOT="$PLUGIN_ROOT" bash "$HOOK"
-  [ "$status" -eq 0 ]
-  [[ "$output" == *"No RISK-POLICY.md"* ]]
-  [[ "$output" == *"/wr-risk-scorer:update-policy"* ]]
-}
-
-@test "policy-absent nudge fires even when docs/risks/ exists (policy-absence wins, P379)" {
-  mkdir -p "$DIR/docs/risks"
-  run env CLAUDE_PROJECT_DIR="$DIR" CLAUDE_PLUGIN_ROOT="$PLUGIN_ROOT" bash "$HOOK"
-  [ "$status" -eq 0 ]
-  [[ "$output" == *"No RISK-POLICY.md"* ]]
-  [[ "$output" == *"/wr-risk-scorer:update-policy"* ]]
-}
-
-@test "AFK guard suppresses the policy-absent nudge too (P379)" {
-  run env WR_SUPPRESS_OVERSIGHT_NUDGE=1 CLAUDE_PROJECT_DIR="$DIR" CLAUDE_PLUGIN_ROOT="$PLUGIN_ROOT" bash "$HOOK"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}
-
-@test "AFK guard WR_SUPPRESS_OVERSIGHT_NUDGE=1 suppresses the nudge entirely" {
-  printf 'placeholder policy\n' > "$DIR/RISK-POLICY.md"
-  run env WR_SUPPRESS_OVERSIGHT_NUDGE=1 CLAUDE_PROJECT_DIR="$DIR" CLAUDE_PLUGIN_ROOT="$PLUGIN_ROOT" bash "$HOOK"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}
-
-@test "guard value other than 1 does not suppress" {
-  printf 'placeholder policy\n' > "$DIR/RISK-POLICY.md"
-  run env WR_SUPPRESS_OVERSIGHT_NUDGE=0 CLAUDE_PROJECT_DIR="$DIR" CLAUDE_PLUGIN_ROOT="$PLUGIN_ROOT" bash "$HOOK"
-  [[ "$output" == *"docs/risks/ is missing"* ]]
-}
-
-@test "silent when CLAUDE_PROJECT_DIR points at a non-existent path" {
-  run env CLAUDE_PROJECT_DIR="$DIR/nonexistent" CLAUDE_PLUGIN_ROOT="$PLUGIN_ROOT" bash "$HOOK"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}