finding(hooks): guard-main-checkout-bash.sh still tells the operator to re-run with OS_ALLOW_MAIN_EDITS=1 — the dead remedy objectstack#15987 removed from the sibling guard; the two guards now disagree about their shared escape hatch #8287

Activity

1. os-zhuang

   added

   finding

   on Sep 7, 2026
2. os-zhuang commented on Sep 7, 2026

   

   os-zhuang

   on Sep 7, 2026 – with Claude

   ContributorAuthor

   More actions

   Triage: closing as a duplicate of #7775, and moving the new evidence there rather than dropping it.

   Why it is the same card. #7775 ("the four guards' refusal messages advertise re-run with OS_ALLOW_*=1, a command prefix that cannot reach the hook's environment — twin of objectstack#15971") is open, domain:skills, priority:p3, pm:blocked, and it enumerates its four message sites by file and line:

   guard-main-checkout.sh lines 86 and 119, guard-main-checkout-bash.sh line 552, guard-shared-stash.sh line 206, guard-tree-enum.sh line 321

   That is this card's defect, at this card's file, already scoped — and #7775's deliverable already includes the self-test assertion this card asks for ("add a self-test assertion per hook that the message no longer contains re-run with"). ⛔ Two cards on one message string would land as two governed PRs touching the same four files.

   ⛔ Not a plain duplicate-and-forget — this card carries something #7775 does not, and it is posted on #7775 as its own comment:

   1. hooks: the four guards' refusal messages advertise re-run with OS_ALLOW_*=1, a command prefix that cannot reach the hook's environment — twin of objectstack#15971 #7775's scope shrank while it sat. PR fix(hooks): a linked worktree is one whose git-dir differs from its git-common-dir #7749's resync ported objectstack#15987's replacement wording into guard-main-checkout.sh at both message sites, with the says / lacks self-test rows. So two of hooks: the four guards' refusal messages advertise re-run with OS_ALLOW_*=1, a command prefix that cannot reach the hook's environment — twin of objectstack#15971 #7775's four sites are done, and the remaining work is the Bash guard's two sites plus guard-shared-stash.sh and guard-tree-enum.sh.
   2. The residual state is worse than the original. hooks: the four guards' refusal messages advertise re-run with OS_ALLOW_*=1, a command prefix that cannot reach the hook's environment — twin of objectstack#15971 #7775 described four guards agreeing on an instruction that does not work. After fix(hooks): a linked worktree is one whose git-dir differs from its git-common-dir #7749 lands, the two sibling guards for the same escape hatch give an operator opposite instructions — and the one still advertising the dead remedy is the Bash guard, i.e. the one an agent hits when it tries to write through a shell rather than through Edit. A contradiction between two guards is a stronger signal to route around them than a uniform wrong instruction was.

   ⚠️ Grade left untouched on #7775. It is domain:skills, and SKILL.md:380 puts skills-lane findings with that seat, not with the whole-repo round — so ⛔ this seat does not re-grade it. The evidence above is recorded there for that seat to weigh; it may well justify moving off p3, but that call is not mine. Dedupe is; grading skills-lane cards is not.

   Reopen condition: if the skills seat rules that the Bash guard's two sites should move on their own flight — separately from guard-shared-stash.sh / guard-tree-enum.sh, e.g. to pair with objectstack#15924 the way #7749 did — reopen this card as that flight's carrier rather than splitting #7775.

   Reversibility: fully reversible. Nothing is deleted, no code moves, and the underlying defect stays open and tracked on #7775 — this close changes which card it is tracked on, nothing else.

   ⛔ Not claimed, not dispatched, no code.

   ---

   Generated by Claude Code
3. os-zhuang

   closed this as a duplicateof hooks: the four guards' refusal messages advertise re-run with OS_ALLOW_*=1, a command prefix that cannot reach the hook's environment — twin of objectstack#15971 #7775 on Sep 7, 2026