Bastien Chanot 999c7c475e job4: install guard fail-closed ...

install-plugins.sh: mktemp failure building CFG_SNAPSHOT now aborts
the install loudly (err + exit 1) instead of warning and continuing
UNGUARDED — a failed guard used to mean CLAUDE.md/.claude/settings.json/
settings.json could be silently rewritten by graphify's installer for
the rest of that run. Closes §3.4.

Added T5 to lib/tests/curated-config-guard.test.sh: extracts the
WIDER header block (GUARDED_CONFIGS through the closing `fi` — the
fail-closed logic lives in the top-level if/else, outside
restore_curated_configs(), so it needs its own awk range) in a
subshell with a stubbed `mktemp` forced to fail; asserts exit 1 and a
loud "mktemp failed" message. +2 assertions (4→6).

Verified: bash -n clean, shellcheck clean (both files), full `make
test` exit 0.

2026-07-06 21:52:10 +02:00

..

profiles

feat(install): wire impeccable into the toolchain — deterministic design floor + /impeccable verbs

2026-07-05 14:42:42 +02:00

project-archetypes

refactor(onboard,init-project): migrate file paths to .claude/

2026-04-23 16:06:14 +02:00

tests

job4: install guard fail-closed

2026-07-06 21:52:10 +02:00

analyze-before-plan.md

feat(analyze-before-plan): read-before bookend — scan memory (+code) before planning

2026-06-26 23:46:41 +02:00

animation-lib-check.sh

feat(animation): auto-install motion lib + detection across init/onboard/advisor

2026-04-27 15:32:46 +02:00

archetype-detector.md

feat(archetypes): add project archetype library + detection algorithm

2026-04-21 22:37:07 +02:00

capitalize-commit.md

chore(lib): capitalize-commit include protocol

2026-06-26 12:46:51 +02:00

contract-interview.md

feat(agents): contract interview include + verifier agent (verify-loops lot 2)

2026-07-03 18:50:28 +02:00

deploy-commit.sh

fix(deploy): final-review fixes — NEXT.sh-absence regen, git-ignored fail-loud (rc5), bootstrap gitignore guard, doc polish

2026-06-27 18:11:14 +02:00

design-gate.md

feat(install): wire impeccable into the toolchain — deterministic design floor + /impeccable verbs

2026-07-05 14:42:42 +02:00

design-tool-gate.sh

job4: seam design-tool-gate.sh

2026-07-06 21:46:19 +02:00

detect-plugins.sh

fix(rtk): rtk resolution + absolute-path rewrite — compression was silently dead

2026-07-02 14:07:22 +02:00

doc-commit.md

feat(doc-sync): MINOR-shape oracle + fail-loud commit (strengthen MINOR gate)

2026-06-29 17:41:24 +02:00

doc-commit.sh

feat(doc-sync): MINOR-shape oracle + fail-loud commit (strengthen MINOR gate)

2026-06-29 17:41:24 +02:00

doc-shape.sh

feat(doc-sync): MINOR-shape oracle + fail-loud commit (strengthen MINOR gate)

2026-06-29 17:41:24 +02:00

gitflow-aiguillage.md

feat(gitflow): chore branch type + aiguillage for standalone memory/doc skills

2026-07-01 13:25:36 +02:00

gitflow-test.sh

job4: SPEC-05 init-identity-precheck-zero-mutation

2026-07-06 19:10:27 +02:00

gitflow.sh

fix(gitflow): gitflow_finish validates its named branch against HEAD

2026-07-03 13:57:59 +02:00

memory-commit.sh

job4: fix memory-commit fail-loud

2026-07-06 19:34:31 +02:00

profile.sh

job4: seam profile.sh

2026-07-06 19:39:19 +02:00

reconcile.sh

feat(reconcile): deterministic declared-vs-real engine + thin gated skill

2026-06-30 13:42:24 +02:00

toggle-external.sh

job4: fix toggle-external logical cd (BLK-006 class)

2026-07-06 19:37:41 +02:00

verify-secure-loop.md

feat(agents): wire contract + verify + security into feat/bugfix/hotfix (verify-loops lot 4)

2026-07-03 20:47:07 +02:00