mirror of
https://github.com/affaan-m/ECC.git
synced 2026-08-31 04:09:51 +02:00
Souptik Chakrabortyandhaelyra
4377ea1753
GateGuard reads five GATEGUARD_* environment variables that were absent from skills/gateguard/SKILL.md, so the only discoverable escape hatch was ECC_GATEGUARD=off - disabling the load-bearing destructive-Bash gate along with the noisy ones (#2573). Documented, with defaults and exact accepted values read from the hook: - GATEGUARD_BASH_ROUTINE_DISABLED (was undocumented everywhere) - GATEGUARD_EXEMPT_GLOBS (previously only in a 2.1.0 release note) - GATEGUARD_BASH_EXTRA_DESTRUCTIVE (was undocumented) - GATEGUARD_DISABLED (was undocumented) - GATEGUARD_STATE_DIR (was undocumented; named in a runtime warning) - GATEGUARD_FACT_FORCE_FULL_DENIALS (already documented; folded into the same table for one lookup point) Adds tests/ci/gateguard-env-documented.test.js, which asserts every GATEGUARD_* variable the hook reads appears in the skill doc, and that the doc names no variable the hook has stopped reading. That surface test is what found the three knobs beyond the two the issue reported. Docs and test only; no hook behaviour changes. Refs #2573