a4e667de10
Single-commit clean baseline after security scrub of niche-tells, project codenames, internal jargon, and contributor-email leaks. Contents: - 100 Rust crates (_primitives/_rust/) - 37 agent manifests (_manifests/) + generated specs (_generated/) - 67 user-invocable skills (skills/) - 33 hooks (hooks/) - Composition blocks (_blocks/) - Documentation (docs/, README.md) - TS adapter packages (_ts_packages/) - Assembler (_assembler/) - Roles (_roles/) - Templates (_templates/) - Forgejo CI (.forgejo/) Author: Denis Parfionovich <info@greendragon.info> License: see LICENSE.
73 lines
2.7 KiB
Bash
Executable file
73 lines
2.7 KiB
Bash
Executable file
#!/usr/bin/env bash
|
|
# RULE 0.17 enforcement — block Edit/Write of numeric claims without
|
|
# evidence marker. Bypass: RULE_017_BYPASS=1 prefix.
|
|
#
|
|
# Reads tool-call JSON on stdin (Claude Code hook protocol).
|
|
|
|
set -euo pipefail
|
|
|
|
# Bypass check
|
|
if [[ "${RULE_017_BYPASS:-0}" = "1" ]]; then
|
|
exit 0
|
|
fi
|
|
|
|
# Read the tool input from stdin
|
|
INPUT="$(cat)"
|
|
|
|
# Extract the new content (Edit: new_string, Write: content)
|
|
NEW_CONTENT="$(printf '%s' "$INPUT" | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)"
|
|
|
|
if [[ -z "$NEW_CONTENT" ]]; then
|
|
exit 0
|
|
fi
|
|
|
|
# Patterns that indicate a numeric claim
|
|
# - "~N min/hour/day/week"
|
|
# - "N MB/GB/LOC/tests/crates/atomars"
|
|
# - "~$N", "$N/mo"
|
|
# - "Nm Ns", "займёт N", "should take N"
|
|
NUMERIC_PATTERN='(~\s*[0-9]+(\.[0-9]+)?\s*(min|minute|hour|hr|day|week|month|sec|second|MB|GB|KB|LOC|line|test|crate|atomar|%|µs|ms|ns|TPS|req/s)|[0-9]+m\s*[0-9]+s|\$[0-9]+(\.[0-9]+)?(/(mo|hr|day|run))?|~\s*\$[0-9]+|should take|will take|takes about|займёт|за ~|estimated at|ETA[: ]|approximately\s+[0-9])'
|
|
|
|
# Markers that satisfy the rule
|
|
EVIDENCE_PATTERN='\[(REAL|FROM-JOURNAL|ESTIMATE-HTC)[: ]'
|
|
|
|
# Check if numeric pattern present
|
|
if ! echo "$NEW_CONTENT" | grep -iqE "$NUMERIC_PATTERN"; then
|
|
exit 0
|
|
fi
|
|
|
|
# Numeric pattern present — check for evidence marker
|
|
if echo "$NEW_CONTENT" | grep -qE "$EVIDENCE_PATTERN"; then
|
|
exit 0
|
|
fi
|
|
|
|
# Violation
|
|
MATCHED="$(echo "$NEW_CONTENT" | grep -iEo "$NUMERIC_PATTERN" | head -3 | tr '\n' '; ')"
|
|
|
|
cat >&2 <<EOF
|
|
═══════════════════════════════════════════════════════════════════
|
|
RULE 0.17 — Numeric claim without evidence marker.
|
|
═══════════════════════════════════════════════════════════════════
|
|
|
|
Found in Edit/Write content:
|
|
$MATCHED
|
|
|
|
Required: append ONE of these markers in the same paragraph:
|
|
[REAL: <file:line | commit | timestamp>]
|
|
[FROM-JOURNAL: ~/.claude/memory/time-metrics/<file>.jsonl#<id>]
|
|
[ESTIMATE-HTC: <one-sentence reason this can't be measured yet>]
|
|
|
|
Or write the actual measurement to a JSONL journal first:
|
|
echo '{"kind":"task","name":"...","duration_s":...}' \\
|
|
>> ~/.claude/memory/time-metrics/tasks.jsonl
|
|
|
|
Then cite that line.
|
|
|
|
Bypass (visible, per-call):
|
|
RULE_017_BYPASS=1 <command>
|
|
|
|
See: ~/.claude/rules/numeric-claims-evidence.md
|
|
═══════════════════════════════════════════════════════════════════
|
|
EOF
|
|
|
|
exit 1
|