chore(spec-loop): sync specs to main and advance .last-sync - #1375
Merged
Merged
Conversation
Reconciles the spec-loop specs with the functionality that shipped between 5c75abd and bcd8b7f: - agent-isolation-sandbox: the hardware-key touch policy (sig cached + aut off with OpenPGP signing, aut cached with gpg.format=ssh) (apache#1367); touch-watcher owner is the harness (apache#1365); macOS overlay closes on deactivation (apache#1325); whole-user git hooks allowRead and dispatcher flavour (apache#1364, apache#1322, apache#1358); agent-guard finds the git subcommand past global flags (apache#1330); agent-guard plugin counts as a complete install (apache#1323); per-tool cooldown_days, bubblewrap 0.13.0 (apache#1360). - sandbox-diagnostics: ten catalogue entries (prek/uv not found, git hooks silently skipped) (apache#1359, apache#1364); doctor probes as scripts, with probes 7 and 8 (apache#1336, apache#1362, apache#1364); verify's 12 checks and conditional-checks.md (apache#1334). - vetted-command-surface: HTTP read backend with the OSV and CVE.org operations (apache#1326); the vetted-op-read recipe spelling (apache#1339); the plugin copy resolves standalone (apache#1357). - cve-tooling: tools/osv (contract:security-cross-ref) and the cve-org check through vetted-ops (apache#1297, apache#1326). - security-issue-lifecycle: step 2b proposes going ahead on a quiet reporter (apache#1340); the post-advisory security-pages update (apache#1355). - meta-and-quality-tooling: name: must match the skill directory (apache#1361); skill-evals fixture containment and grader retry (apache#1315, apache#1341); optimize-skill budgets, eval gate, rewrite and extract-code passes (apache#1331, apache#1332, apache#1335, apache#1338); diff-scoped prek CI (apache#1317). - marketplace-distribution: substrate plugins (apache#1368, apache#1357). - adversarial-review (new): the tool and substrate plugin as shipped (apache#1368), with its known gaps. Generated-by: Claude Opus 5
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
tools/spec-loop/specs/back in step with the 43 commits that shipped between the last sync (5c75abd2) andmainatbcd8b7f2, and advancestools/spec-loop/.last-synctobcd8b7f2.adversarial-review.md) for the tool and substrate plugin feat(adversarial-review): other models' adversarial review, as a tool and substrate plugin #1368 shipped — no existing spec covered it, whichPROMPT_update.mdsays calls for a new one. The per-spec breakdown with PR numbers is in the commit message.Type of change
.claude/skills/<name>/) — eval fixtures updated belowtools/<system>/*.md)tools/*/withpyproject.toml)docs/,README.md,CONTRIBUTING.md)projects/_template/)prek, workflows, validators)Test plan
prek runon every changed file passes (includingspec-validate,check-doc-sync,lychee)spec-validate: no violations; spec-inventory tests passRFC-AI-0004 compliance
No principle touched; specs describe shipped behaviour only.
Linked issues
Refs #1367, #1368, #1291
Notes for reviewers (optional)
adversarial-review.md: nothing invokes the tool yet (setup wiring, pre-PR block andwith-reviewers:unbuilt), the design'scommandssubcommand does not exist,modeis parsed but unused, there is no sandbox exclusion, and codex can still read outside the checkout. The tool's README currently claims skills already run it — ahead of the code; worth a follow-up.plugins/magpie-pr-management/skills/triage/from the fix(plugins): name each skill after its plugin directory #1361 rename makestools/dev/check-family-plugins.pyfail locally.Generated-by: Claude Opus 5
🤖 Generated with Claude Code