Session Handoff [default]: Shared-Hook Install Rule and hooksPath Guard Denial Released as 2.0.774

[ptr727]

Next steps, in priority order

Re-read each issue and pull request rather than trusting these summaries.

1. unattended-handoff: adopted lesson issues stall, and the promotion STOP matches any decision issue #1812, fixed on reasoning rather than waiting for a live run to hit it. For an adopted lesson, count an answer recorded on the issue as closing its choices. For the promotion STOP, match only a decision issue that states it blocks the open develop -> main PR.
2. Close the Installer Gaps Left After the Marketplace Re-Point Fix #2019, the small installer gaps left after Refresh Skills After a Release Without Moving the Claude Marketplace Source #2017. git_in() should catch ValueError so --report survives a NUL in a registered path. The "gone" messages should not say "no longer exists" for a plain file. The host-setup cadence paragraph and check-this-repo's "Answering" section should say --snapshot-only. One short PR.
3. Deny the Remaining core.hooksPath and no-verify Bypass Routes in the Guard #2177, the guard's remaining hook-bypass routes. These are a persistent git config core.hooksPath, the GIT_CONFIG_* environment forms, and wrapped or aliased git. Done looks like the bypass check reusing rule 6's _all_git_invocations walk and alias resolution. Its heredoc false-positive item overlaps the auto-2112 lane (Session Handoff [auto-2112]: Strip Every Heredoc Body a Line Opens in the Guard per #2112 #2123), so check that lane's state first.
4. Exercise the unattended loop's parked-lane half. An attended "resume the handoff" of a lane parked under blocked has still never run. Done looks like one parked lane coming back through the attended procedure intact.
5. Say the Hub Commits the Report Wherever Done-Means-Audited Is Stated #1826: reword the remaining places that say the audited repository "carries" a committed reports/<repo>/audit.md.
6. Carry the code-review skill bootstrap to seven repos whose Copilot reviews never state coverage #1815: carry the code-review skill bootstrap and the .github/skills tree into the seven repositories listed there.
7. Downstream resyncs for the new Fleet Bootstrap text, per-repository work in each repository's own session. When aiopurpleair resyncs, its handoff (aiopurpleair Update codegen files #177) should drop step 3, "commit an audit report".
8. Smaller follow-ups: Copilot Refuses a Pull Request Carrying Only Default-Excluded Files, and No Rule Covers It #2180 (a Copilot refusal on a PR holding only default-excluded files has no Merge Gate substitute, filed from the HomeAutomation-Config session, not urgent), Durable Knowledge does not say where a lesson goes when no change is open #1811, audit.py --issue path never prints the no-remote hub-name warning #1810, Skill files hard-wrap while comment-and-doc-style requires one paragraph per line #1814.
9. Carried unchanged from Session Handoff [default]: WORKFLOW.md Corrections and the pyproject.toml Decision Released as 2.0.672 #1804, in its order: the native-Windows check of bootstrap.ps1, then close Bootstrap registers its temporary tree as the live Claude Code skills source, then deletes it #1756. Then Keep an Owned Tree Recognizable When Its Final Directory Removal Fails #1795, followed by Name the Leftover Old Tree When the Bash Loader Cannot Remove It #1790, Drive the PowerShell Loader's Kept-Tree Functions from the Test Suite #1791, and Lock the Bootstrap Directory for a Kept-Tree Run #1792. Gate Every Repository's Python on Its Code, Not on Its Config #1800 comes next: settle its three decisions with the maintainer before any edit, with Spec: python.profile.detect does not describe a virtual uv workspace root #1778 folded in. Then The menu's skills task registers a clone it then removes #1771 before Re-point a Claude Code registration an older bootstrap left dangling #1769, then Say Where the Deploy-Site Task Actually Requires the SSH Key #1801 and Declare the Default Workflow Token Permission in the Repository Settings Payload #1783, and A regex pins a phrase inside a # comment, so rewrapping that comment fails the test with a false explanation #1732 before skills_install --report follow-ups: stamp-less live report, bootstrap remedy text, --intended guard test #1759, skills_install source_ref hides ignored files and trusts an enclosing git repo #1758, and skills_install --report's live channel does not check that the plugin is installed and enabled #1757. After those come A stacked pull request's diff reopens after the parent squash-merges, and nothing documents it #1742, Session Handoff [default]: One Issue Closed Whose Premise Was Wrong, and a Release #1735, Converge Financial-Modeling with the hub baseline (32 findings) #1579, The widened configuration shape misses the unspaced key=value an environment file writes #1717, and issue-ref reads no URL outside instruction text, so an own-repository tracker URL in code is banned and unreported #1719. Lower priority: Two skills describe the live skills channel only as a git checkout #1772, A kept skills tree edited by hand still stamps clean #1775, Nothing tests the bootstrap loaders' kept-tree swap sequence #1767, Two concurrent bootstrap runs can remove each other's tree #1764, and install-skills.ps1 fails under a directory whose path contains a wildcard character #1765.

External blockers

Carried from #2022 and not re-verified this round.

• Financial-Modeling's shared pre-commit hook is broken until the maintainer restores .git/hooks/pre-commit.legacy over the prek hook in that repository's primary checkout. The hub-side cause, repo-worktree's hook step installs into the git hooks dir every worktree shares #1816, is now fixed, which stops a recurrence but does not repair the existing hook.
• Downstream promotions: the version-literal removals sit on develop in eleven fleet repositories until the maintainer promotes each.
• A native Windows host is needed for step 9's first item.

Internal dependencies

• Carry the code-review skill bootstrap to seven repos whose Copilot reviews never state coverage #1815 comes before relying on stated coverage in those seven repositories.
• Deny the Remaining core.hooksPath and no-verify Bypass Routes in the Guard #2177 should follow or absorb whatever the auto-2112 lane lands on heredoc handling, since both edit the guard's tokenizer path.
• Step 7's resyncs are per-repository work in each repository's own session.

State

• Hub: main is at the Promote develop to main: Check the Shared Hook Before Installing and Deny a Commit-Time hooksPath Override #2179 promotion merge, released as 2.0.774. develop holds nothing main lacks. The primary checkout is clean on develop at current origin/develop. This round left no feature branch or worktree behind.
• This machine's Codex/opencode snapshot reads current at the Promote develop to main: Check the Shared Hook Before Installing and Deny a Commit-Time hooksPath Override #2179 merge. Claude Code's fleet marketplace loads from the primary checkout on develop.
• Four unattended lanes were active today: auto-2080, auto-2112, auto-2106 (PR Refuse a Dangling Remote-Tracking Target in local_review #2121), and auto-1634 (PR Deny a Signal-0 timeout as a Wait Bound in the Guard #2117). Several claude --resume sessions were running on this host. Re-derive with handoff.py tracks and gh pr list before touching those lanes.
• Other open lane: Session Handoff [python-contract]: Escaped and Folded python-directories Values Refused, Released as 2.0.738 #2014 (python-contract).

The parked decision queue

One issue: #2170, how the prose gate widens past the Latin part of the recorded-name rule. The session answers are commented below.

What the last round did

• Fixed repo-worktree's hook step installs into the git hooks dir every worktree shares #1816 in #2178, promoted in #2179, and released as 2.0.774. repo-worktree's hook step now checks for an existing hook, tells a linked worktree from a standalone clone, and never changes a shared hook or setting from a linked worktree. gh-write-guard denies a -c/--config-env override of core.hooksPath on a commit or push.
• Filed Deny the Remaining core.hooksPath and no-verify Bypass Routes in the Guard #2177 for the older bypass routes the local review found.

What not to repeat

• A precondition added to a previously unconditional step removes coverage for every case the old step reached. The Husky.Net bullet gained "core.hooksPath already reads .husky", which silently dropped standalone clones. Local review took four passes (7, 2, 1, and 0 findings), and the last two findings were each against the previous round's fix.
• A heredoc that quotes --no-verify is denied by the guard, since it tokenizes heredoc bodies as commands. Write issue or PR bodies with the Write tool, not a cat <<EOF.

New learnings

• The shared-hook rule and its linked-worktree test are recorded in repo-worktree "Preparing Git Hooks". The remaining guard gaps are in Deny the Remaining core.hooksPath and no-verify Bypass Routes in the Guard #2177.

[ptr727]

Parked decision queue, answered at close: #2170 was answered as option 2 (a per-line or per-file allow marker for a recorded name). Its decision label is off, and it is now implementation work, ranked beside step 8. The queue now holds zero issues.

[ptr727]

External blocker cleared, 2026-09-30: Financial-Modeling's shared pre-commit hook is repaired and working. In a throwaway detached worktree at its origin/develop, git hook run pre-commit resolved to the shared hooks directory. It ran ruff check and ruff format on a staged file, both passed, and it exited 0. There is no pre-commit.legacy and no prek chain left. Drop that bullet from External blockers.

[ptr727]

Downstream promotions, 2026-09-30, on the maintainer's request. This replaces the "eleven repos" external blocker.

Merged to main:

• AudioCleaner Develop #20 (no release configured).
• HolidayLights remove duplicate line #9 (no release configured).
• HomeAutomation-Config Read a Tool Row Without a Trailing Pipe, and Report the License Column #636, released as 2.0.278.
• VSCode-Server-DotNetCore Update codegen files #137, released as 1.1.57. It replaced the conflicted Update codegen files #136. Dependabot kept bumping the retired *-task.yml workflows on main, so the conflict was resolved on a branch off main by keeping develop's deletion. The merged tree equals develop's.
• KiCadLibrary Develop #55, released as 2.1.41, after fix Update codegen files #56 (the MD033 description) landed on develop.

Still open:

• EspDinIoT Update readme and workspace #10: review-clean after fix Update README and workspace setup #11 (KiCad image digest pin, DMB-4772 price), but BLOCKED. Its main ruleset sets require_extra_approval_for_unattributed_changes, and develop holds two direct pushes with no PR, so it needs the maintainer's approval or a UI merge.
• Financial-Modeling: waiting for its unattended run to finish merging to develop. The FM session sends "go" when it ends, and no promotion PR is open yet.
• DevKitCIoT: Update branding and documentation consistency #13 was closed by the maintainer's choice. The KiCad 10 upgrade conflicts with main's MPN/CPL metadata restore in .kicad_pro and .kicad_sch, so it is resolved in KiCad by the maintainer. main also holds governance and CI commits develop lacks.

Not promoted, dependency bumps only: PhotoCleaner, MediaTools, Utilities, LanguageTags, homeassistant-purpleair, PlexCleaner, ESPHome-NonRoot, NxWitness, and the operational ESPHome-Config, Vantage-Config and HomeAssistant-Config. HomeAssistant-Config also holds version-literal removal #52.

[ptr727]

Continued in #2190, round 38 on track default.