(d) — governance-drift-check.py now DECLARES the contents of ~/dotfiles/git/hooks
(README.md, pre-commit) and reports anything unexpected or declared-but-missing.
Tracked-ness is never consulted, and that is the correction: the filed form tested
"neither tracked nor pre-commit", and 066a47a was TRACKED for four weeks, so it
would have been silent throughout the only occurrence that did damage. Asserted
structurally, not in prose — a control checks that scan_hooks' code names contain
neither "git" nor "subprocess".
(b) — .gitignore for the four git-lfs shim names. DELIBERATELY NARROW: a blanket
git/hooks/* + allowlist would silently prevent committing a new legitimate hook,
which would work locally, never reach the repo, and be invisible to (d) because
(d) reads the filesystem and not the index. Verified the pair composes: a planted
shim yields 0 entries in git status AND is reported UNEXPECTED by the check.
⚠ And a fifth self-referential instrument event, in the fix for that very class.
The five new controls were appended after failed_controls is computed (702 vs
846): all ran, none counted, tally still read 48/48, and a failure among them
would have printed NOTHING. The check against blind checks was blind to itself.
Caught by comparing the printed tally to the number of controls added. Moved above
the report block (53/53) and verified by breaking one deliberately and confirming
it prints INSTRUMENT NOT VERIFIED and names itself.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NvZAKSf9aqratbqHbU9LK5
I wrote the ignore file for __pycache__, declared the tree clean, and .DS_Store
appeared in the same breath. Same class of machine droppings, same one-line fix;
listing one and not the other just means the next status is dirty again.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WuMjg3ipEVa3n8CoSzoyvc
Steward-authored edits, committed by the executor: these were on disk but not in
git, which is the same gap as 8abfe88's missing archive — the working tree is not
the record. The executor authored no content here; CLAUDE.md remains the steward's
under Constitutional Constraint #1.
Verified before committing rather than after: the CLAUDE.md diff is line 27 only
(principal **ethics** architect, and co-author of L1 with Seb). REVIEWED.md is +97
lines with exactly one deletion, and that deletion is REVIEWED-80's absent trailing
newline being supplied — no content lost. PENDING-78/81/82 are now closed by number,
so the open queue reads 15, all of it dormant since March–May.
Also adds .gitignore for scripts/__pycache__, which governance-mcp.py creates every
time it imports wake-digest.py — my own tooling's droppings, not the steward's.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WuMjg3ipEVa3n8CoSzoyvc
- Enhanced man function opens in new window with bat + Nord theme
- Batman alias now uses enhanced man function for muscle memory
- Added license scanner utility
- Fixed shell loading to use only dotfiles versions
- Added dotfiles/bin to PATH for custom scripts
- Removed legacy .zsh loading conflicts
- Fixed bat path issue for new shell contexts
Following prime directive: respecting muscle memory while enhancing capability
🤖 Generated with Claude Code
Co-Authored-By: Claude <noreply@anthropic.com>
