Guard mode → enabled/disabled + guard.* → failsafe.* (backward-compatible)#6

Merged

Tombar merged 30 commits into

mainfrom

mode-namespace-rename

Jul 17, 2026

Commits on Jun 16, 2026

test(docs): scaffold bats doc-validation harness

Tombar
and
claude
committed
test(docs): markdown fenced-block extractor with heading anchors

Tombar
and
claude
committed
test(docs): harden extractor (literal fence match, count reset, status assert)

Tombar
and
claude
committed
test(docs): sandbox HOME, tool guards, mode-file helpers

Tombar
and
claude
committed
test(docs): harden sandbox teardown guard and mode-file CR/LF trim
Tombar
committed
test(docs): cross-cutting chain/canonical/alias claims

Tombar
and
claude
committed
test(docs): reset state per ro-alias so each alias is actively verified
Tombar
committed
test(docs): claude-statusline.sh contract + graceful degrade

Tombar
and
claude
committed
test(docs): assert jq-degrade branch skips enrichment (no cwd)
Tombar
committed
test(docs): live headless tmux toggle/status/keybinding validation

Tombar
and
claude
committed
test(docs): wezterm lua file-contract + luacheck + sudo-timeout

Tombar
and
claude
committed
test(docs): make wezterm luacheck test non-vacuous (skip if runtime broken)
Tombar
committed
test(docs): widen wezterm sudo-timeout revert margin for CI
Tombar
committed
test(docs): iterm OSC roundtrip + python read_mode/compile/import

Tombar
and
claude
committed
docs(iterm): drop unused async_get_app call (pyflakes: app assigned but never used)
Tombar
committed
ci: separate doc-validation workflow (headless bats suite)
Tombar
committed
ci(docs): make tmux keybind + wezterm luacheck checks portable across distros
Tombar
committed
test(docs): live WezTerm config-load check, iTerm manual steps, findings REPORT
Tombar
committed
test(docs): narrated demo + manual GUI test plan for live toggle validation
Tombar
committed
chore: gitignore .claude/ (harness worktrees + session state)
Tombar
committed
mode: canonicalize resolved value (migrate legacy, fail-safe to enabled)

Tombar
and
claude
committed
hook: default guard mode is 'enabled' (protected) when no source resolves

Tombar
and
claude
committed
facts: emit failsafe_enabled bool + retain legacy mode string
Tombar
committed
validate: failsafe_enabled is a known fact field
Tombar
committed
policy: boolean fail-safe gate (not failsafe_enabled==false) + failsafe.* namespace (dual-namespace)

Tombar
and
claude
committed
cli+mcp: enabled/disabled vocabulary, rich mode-set aliases, serverInfo failsafe

Tombar
and
claude
committed
corpus: add failsafe_enabled to fixtures, rename lairguard->failsafe, legacy guard.user back-compat case

Tombar
and
claude
committed
docs: enabled/disabled vocabulary, failsafe.* namespace, failsafe_enabled fact (mode legacy)

Tombar
and
claude
committed
test(docs): harness asserts enabled/disabled + failsafe_enabled boolean, legacy mode back-compat

Tombar
and
claude
committed
cleanup: refresh stale mode-vocabulary comments (enabled/disabled, boolean gate)
Tombar
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Guard mode → enabled/disabled + guard.* → failsafe.* (backward-compatible)#6

Guard mode → enabled/disabled + guard.* → failsafe.* (backward-compatible)#6
Tombar merged 30 commits into
mainfrom
mode-namespace-rename

Commits on Jun 16, 2026

test(docs): scaffold bats doc-validation harness

test(docs): markdown fenced-block extractor with heading anchors

test(docs): harden extractor (literal fence match, count reset, status assert)

test(docs): sandbox HOME, tool guards, mode-file helpers

test(docs): harden sandbox teardown guard and mode-file CR/LF trim

test(docs): cross-cutting chain/canonical/alias claims

test(docs): reset state per ro-alias so each alias is actively verified

test(docs): claude-statusline.sh contract + graceful degrade

test(docs): assert jq-degrade branch skips enrichment (no cwd)

test(docs): live headless tmux toggle/status/keybinding validation

test(docs): wezterm lua file-contract + luacheck + sudo-timeout

test(docs): make wezterm luacheck test non-vacuous (skip if runtime broken)

test(docs): widen wezterm sudo-timeout revert margin for CI

test(docs): iterm OSC roundtrip + python read_mode/compile/import

docs(iterm): drop unused async_get_app call (pyflakes: app assigned but never used)

ci: separate doc-validation workflow (headless bats suite)

ci(docs): make tmux keybind + wezterm luacheck checks portable across distros

test(docs): live WezTerm config-load check, iTerm manual steps, findings REPORT

test(docs): narrated demo + manual GUI test plan for live toggle validation

chore: gitignore .claude/ (harness worktrees + session state)

mode: canonicalize resolved value (migrate legacy, fail-safe to enabled)

hook: default guard mode is 'enabled' (protected) when no source resolves

facts: emit failsafe_enabled bool + retain legacy mode string

validate: failsafe_enabled is a known fact field

policy: boolean fail-safe gate (not failsafe_enabled==false) + failsafe.* namespace (dual-namespace)

cli+mcp: enabled/disabled vocabulary, rich mode-set aliases, serverInfo failsafe

corpus: add failsafe_enabled to fixtures, rename lairguard->failsafe, legacy guard.user back-compat case

docs: enabled/disabled vocabulary, failsafe.* namespace, failsafe_enabled fact (mode legacy)

test(docs): harness asserts enabled/disabled + failsafe_enabled boolean, legacy mode back-compat

cleanup: refresh stale mode-vocabulary comments (enabled/disabled, boolean gate)