Bastien Chanot 56aa3c8a17 chore(memory): BDR-069 + LRN-130 + EVAL-024 — deny-list design pass ...

- BDR-069: keep broad Edit(**/.env.*), keep .env.example name (option A).
  Rename rejected (~30 refs); glob narrowing rejected (fails open on
  .env.production outside the Next.js convention).
- LRN-130: a deny glob is absolute — allow, `!` negation and PreToolUse
  hooks all fail to exempt it (permissions.md :33/:35/:361, verbatim).
  Only lever = the glob's own shape.
- EVAL-024: the pass shipped one unauthorized weakening (scope inversion +
  framework parochialism) on my own permission boundary, caught by the
  auto-mode classifier rather than self-caught. Reverted pre-commit. Also
  logs a false-positive automated review and a bad subagent glob claim.

2026-07-16 15:02:00 +02:00

..

blockers.md

chore(memory): backmerge BLK-016 from release/1.0.0 (resolved on develop)

2026-07-08 15:59:09 +02:00

decisions.md

chore(memory): BDR-069 + LRN-130 + EVAL-024 — deny-list design pass

2026-07-16 15:02:00 +02:00

evals.md

chore(memory): BDR-069 + LRN-130 + EVAL-024 — deny-list design pass

2026-07-16 15:02:00 +02:00

journal.md

chore(memory): journal — v1.1.0 cut + v4.0.0 stale-tag watch-item

2026-07-16 14:06:58 +02:00

learnings.md

chore(memory): BDR-069 + LRN-130 + EVAL-024 — deny-list design pass

2026-07-16 15:02:00 +02:00