mirror of
https://github.com/affaan-m/ECC.git
synced 2026-10-15 12:45:29 +02:00
Review findings on the rebased branch. Number.parseInt accepted partial values, so GATEGUARD_FACT_FORCE_MAX_DENIALS set to '3.5', '3oops', or '0x3' silently became a finite cap of 3 and weakened the gate on a typo. The value is now matched whole and anything that is not a complete non-negative decimal integer leaves the gate uncapped, which is the stricter outcome. Also names the setting in the condensed denial's recovery text, so a capped session can discover the control that is dampening it, and documents that malformed values fall back to uncapped. Tests: adds a Write pass-through case, an exact-boundary case where the denial that reaches the cap still denies and the next path passes, one case per malformed value, and an assertion that the condensed denial names the cap. Pass-through assertions now require a parsed output object rather than accepting a missing one. 207 hook tests pass. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Bvrwu6iCpKP3C2rh8tBsdJ