Audit the session-drift control estate, then close the gaps it found - #40

Merged

wshallwshall merged 12 commits into

mainfrom

claude/session-drift-prevention-0979f7

Jul 29, 2026

Commits on Jul 29, 2026

docs: inventory the session-drift control estate, and audit what it actually enforces
wshallwshall
committed
2bdbb79
feat(worktree-gate): leave a receipt on every deny, and stop offering the primary as a worktree to reuse
wshallwshall
committed
a3dc8ee
fix(worktree-gate): resolve the tree a git command acts on once, and stop reading verbs out of prose
wshallwshall
committed
de2b43b
feat(worktree-gate): make the INSTALLED gate observable, and stop rule 4 activating as a side effect
wshallwshall
committed
46ece65
docs: record which drift gaps are now closed, and that none of it is live until re-install
wshallwshall
committed
773cb08
fix(worktree-gate): judge what a command does, not how its characters are arranged
wshallwshall
committed
6758b6b
fix(worktree-gate): close the review's remaining findings — a blind parity test, unattributed rules, overstated docs
wshallwshall
committed
58a3d32
feat(worktree-gate): govern the gate's own kill switch, and the git config that disarms every worktree
wshallwshall
committed
79bd201
fix(worktree): one allowlist for both hooks, guard the second installer, and deliver the leak-gate token to first-party worktrees
wshallwshall
committed
f9e1ac0
docs: re-measure rule 2's premise — the subagent-denial claim it rests on does not hold
wshallwshall
committed
b8fe116
feat(worktree-gate): stop one session deleting another session's worktree
wshallwshall
committed
42e6a29
fix(worktree): $env:USERPROFILE is null off Windows, and in a param default that preempts the guard behind it
wshallwshall
committed
6a37fe5