bchanot/claude
1
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(verifier): floor-guard waivers outside test files need a CLARIFICATIONS ack

Browse Source 
Security-gate MEDIUM: a self-service floor-guard: allow <reason> neutralised
the detector in the same commit. User chose strict: the tool prints WAIVED,
the contract authorizes, the verifier counts the rest as gaps. BDR-102
amendment.
This commit is contained in:
bastien
2026-09-27 21:20:36 +02:00
parent 740138337c
commit 6617889b77
3 changed files with 14 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CHANGELOG.md
+4 -1
View File
@@ -24,7 +24,10 @@ Format follows [Keep a Changelog](https://keepachangelog.com/).
`floor-guard: allow <reason>` waiver, rc 0/2/3. Mandatory verifier
STEP 3 (`agents/verifier.md`), documented under GATE 1 of
`lib/verify-secure-loop.md`. Suite `lib/tests/floor-guard.test.sh`: 6
kinds plus a WAIVED and a CLEAN fixture, each flip-tested. Adapted from agent-skills `constraint-driven-development`.
kinds plus a WAIVED and a CLEAN fixture, each flip-tested. Waivers
outside test files count as gaps unless the contract's CLARIFICATIONS
names them (security-gate MEDIUM, user chose strict). Adapted from
agent-skills `constraint-driven-development`.
- **`lib/tests/skill-routing-census.test.sh`** (+ `lib/skill-routing-census.py`)
— TF-IDF cosine census of skill-description collisions across the live
catalog (routing ambiguity, not naming): top 10 pairs, WARN ≥ 0.50,