forked from bchanot/claude
Bastien Chanot
1f7afc1d49
Reroute hotfix's deeper-bug escalation to the /bugfix skill (bugfixer is now a pure executor, not loadable standalone). loops-light locks repointed to the bugfix orchestrator + bugfixer-executor shape.
92 lines
4.2 KiB
Bash
92 lines
4.2 KiB
Bash
#!/usr/bin/env bash
|
|
# ============================================================
|
|
# Structure locks — light-flow wiring (verify-loops lot 4)
|
|
# feat/bugfix get contract + fresh verifier + security gate
|
|
# (bounded 3x); hotfix gets contract + security gate whose
|
|
# FAILURE REVERTS (never loops). Locks the load-bearing clauses.
|
|
# ============================================================
|
|
set -u
|
|
|
|
REPO="$(cd "$(dirname "$0")/../.." && pwd)"
|
|
INC="$REPO/lib/verify-secure-loop.md"
|
|
FSK="$REPO/skills/feat/SKILL.md"
|
|
BUG="$REPO/agents/bugfixer.md"
|
|
BSK="$REPO/skills/bugfix/SKILL.md"
|
|
HOT="$REPO/agents/hotfixer.md"
|
|
HSK="$REPO/skills/hotfix/SKILL.md"
|
|
HSKL="$REPO/skills/hotfix/SKILL.md"
|
|
PASS=0; FAIL=0
|
|
|
|
tf() { # tf <label> <file> <fixed-string>
|
|
if grep -qF -- "$3" "$2" 2>/dev/null; then
|
|
echo " PASS $1"; PASS=$((PASS+1))
|
|
else
|
|
echo " FAIL $1 — missing: $3"; FAIL=$((FAIL+1))
|
|
fi
|
|
}
|
|
tr_() { # tr_ <label> <file> <ERE>
|
|
if grep -qE -- "$3" "$2" 2>/dev/null; then
|
|
echo " PASS $1"; PASS=$((PASS+1))
|
|
else
|
|
echo " FAIL $1 — no match: $3"; FAIL=$((FAIL+1))
|
|
fi
|
|
}
|
|
tn() { # tn <label> <file> <fixed-string> — PASS when ABSENT (mirror of tf, inverted)
|
|
if grep -qF -- "$3" "$2" 2>/dev/null; then
|
|
echo " FAIL $1 — present (should be absent): $3"; FAIL=$((FAIL+1))
|
|
else
|
|
echo " PASS $1"; PASS=$((PASS+1))
|
|
fi
|
|
}
|
|
|
|
echo "── verify-secure-loop.md (shared include) ──"
|
|
if [ -f "$INC" ]; then echo " PASS include exists"; PASS=$((PASS+1)); else echo " FAIL include missing"; FAIL=$((FAIL+1)); fi
|
|
tf "gate1 fresh verifier" "$INC" "GATE 1 — REQUEST CONFORMITY (fresh verifier)"
|
|
tf "gate2 fresh auditor" "$INC" "GATE 2 — SECURITY (fresh security-auditor)"
|
|
tf "blind — no dev summary" "$INC" "Never pass the dev's summary"
|
|
tf "conforme first pass no loop" "$INC" "First-pass conforme = no loop"
|
|
tf "conformity max 3" "$INC" "Max 3 conformity iterations"
|
|
tf "security max 3" "$INC" "Max 3 security iterations"
|
|
tf "reverify request first" "$INC" "re-verify the REQUEST first"
|
|
tf "order invariant" "$INC" "always re-checked BEFORE security"
|
|
tf "mute never a pass (verify)" "$INC" "NEVER a PASS"
|
|
tf "nominal cheap stated" "$INC" "one verifier dispatch + one security dispatch"
|
|
|
|
echo "── feat/SKILL.md (feat orchestrator wiring) ──"
|
|
tf "feat contract step" "$FSK" "STEP 0.7 — CONTRACT"
|
|
tf "feat contract-interview" "$FSK" "lib/contract-interview.md"
|
|
tf "feat verify+secure step" "$FSK" "STEP 4 — VERIFY + SECURE"
|
|
tf "feat uses shared include" "$FSK" "lib/verify-secure-loop.md"
|
|
tf "feat nominal 1+1 dispatch" "$FSK" "verifier + one security dispatch"
|
|
tf "feat dispatches feater" "$FSK" 'subagent_type="feater"'
|
|
|
|
echo "── skills/bugfix/SKILL.md (bugfix wiring — reflection inline) ──"
|
|
tf "bug contract step" "$BSK" "STEP 3.5 — CONTRACT"
|
|
tf "bug diagnosis feeds it" "$BSK" "feeds it: REQUEST verbatim"
|
|
tf "bug fresh gates" "$BSK" "the two fresh gates per"
|
|
tf "bug uses shared include" "$BSK" "lib/verify-secure-loop.md"
|
|
tf "bug dispatches bugfixer" "$BSK" 'subagent_type="bugfixer"'
|
|
|
|
echo "── agents/bugfixer.md (bugfix executor — sonnet, no Agent) ──"
|
|
tn "bugfixer lacks Agent tool" "$BUG" "Agent"
|
|
tf "bugfixer model sonnet" "$BUG" "model: sonnet"
|
|
tf "bugfixer report grammar" "$BUG" "BUGFIX-EXEC REPORT"
|
|
|
|
echo "── hotfixer.md (hotfix executor — sonnet, no Agent) ──"
|
|
tn "hotfixer lacks Agent tool" "$HOT" "Agent"
|
|
tf "hotfixer model sonnet" "$HOT" "model: sonnet"
|
|
tf "hotfixer report grammar" "$HOT" "HOTFIX-EXEC REPORT"
|
|
|
|
echo "── skills/hotfix/SKILL.md (hotfix wiring — revert, not loop) ──"
|
|
tf "hotfix silent contract" "$HSKL" "STEP 1.7 — CONTRACT (silent autofill)"
|
|
tf "hotfix zero questions" "$HSKL" "questions ever"
|
|
tf "hotfix security gate" "$HSKL" "Security gate (fresh auditor)"
|
|
tf "hotfix block reverts" "$HSKL" "failure REVERTS, never loops"
|
|
tf "hotfix no verifier" "$HSKL" "No verifier is dispatched at hotfix weight"
|
|
tf "hotfix skill has Agent" "$HSK" " - Agent"
|
|
tf "hotfix dispatches hotfixer" "$HSKL" 'subagent_type="hotfixer"'
|
|
|
|
echo ""
|
|
echo "loops-light structure locks: $PASS pass, $FAIL fail"
|
|
[ "$FAIL" -eq 0 ]
|