Skip to content

Wire the shared commit guards into this repo - #12

Merged
pablo-tech merged 1 commit into
mainfrom
guard/wire-chain
Sep 25, 2026
Merged

pablo-tech merged 1 commit into
mainfrom
guard/wire-chain

Conversation

@pablo-tech

Copy link
Copy Markdown
Contributor

This repo has no commit-time guard chain, so nothing here refuses an oversized blob (GitHub hard-rejects anything over 100 MiB, and by then it is already in history and costs a rewrite), a stray credential, or a subagent-memory file that belongs in pablo-tech/plover-context.

.githooks/pre-commit is the thin shim every already-wired repo carries, byte-identical. The guard logic stays in plover-context (infra/git-hooks/guards.sh), so a threshold or a new guard changes in one place and never here; each guard scopes itself, so the ones that do not apply to this repo exit 0.

core.hooksPath is local config and does not travel with a clone. On every machine holding this repo, after merging:

git config core.hooksPath .githooks

Found by plover-context's scripts/doctor.sh once its coverage was derived from infra/standards/estate.json instead of a hardcoded list of six paths (pablo-tech/plover-context#282) — this repo was one of six committing unguarded.

🤖 Generated with Claude Code

…zed blob or a stray secret here

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@pablo-tech
pablo-tech merged commit 957899c into main Sep 25, 2026
4 checks passed
@pablo-tech
pablo-tech deleted the guard/wire-chain branch September 25, 2026 15:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant