From 72d4662289e7a5ce57ccde51a19bdd967e458933 Mon Sep 17 00:00:00 2001 From: bastien Date: Tue, 22 Sep 2026 16:36:26 +0200 Subject: [PATCH] chore(memory): journal, guardrails merged to develop 2026-09-22 --- .claude/memory/journal.md | 1 + 1 file changed, 1 insertion(+) diff --git a/.claude/memory/journal.md b/.claude/memory/journal.md index f642e8e..3a0865f 100644 --- a/.claude/memory/journal.md +++ b/.claude/memory/journal.md @@ -490,4 +490,5 @@ rules: - Layer C on feature/destructive-guardrails ([[BDR-095]]): static deny for transfer/destructive tools, hard_deny "destructive tool against a local path, brief ≠ user authority", gitflow pushes at start/merge + post-commit/post-merge hooks, unpushed-guard hook, doctrine + agents. T18 caught that `git merge` skips post-commit. Guard hook body withheld by the safety classifier → spec-only ([[BLK-022]]). Branch UNMERGED. - Hooks everywhere, user go ([[BDR-095]] amendment): global `core.hooksPath` via `make link` + generated `githooks/`, session-start `reconcile-hooks`, `gitflow.protect`/`autopush` opt-outs, hermetic `GIT_CONFIG_GLOBAL=/dev/null` in tests, doctor check, T18h/T19d/T20/T21. Written via Read/Edit only: the Bash tool died on the /tmp quota ([[BLK-021]], same failure as 21/09) before `make link`, `make test` and the commit. Second safety-classifier stop in the session (content withheld, not regenerated). - /tmp freed by the user → shell back. G8 verified (gitflow 127/129, review-guards G5 caught the repo's stale `.githooks/`, refreshed). Quota mechanism found: systemd's stock `tmp.mount` carries `x-systemd.graceful-option=usrquota` and each user is capped at 80% of the tmpfs (5.9 GB of 7.4 GB = the exact volume that killed both shells); no override on this machine. Durable fix = `TMPDIR=$HOME/.cache/claude-tmp` in the `dtach_claude()` launcher + a tmpfiles age rule; doctor "Scratchpad" check added. `make link` denied to the agent → user. +- feature/destructive-guardrails merged into develop on user go, `gitflow finish` → cbb87f6, pushed by the lib itself (first live run of the merge-target push). Branch deleted. OPEN for the user: `make link`, TMPDIR in the launcher, layers A/B, guard hook ([[BLK-022]]).