ingpoc avatar

enforcement

Use when implementing hooks that BLOCK invalid actions, creating quality gates for state transitions, or enforcing tested:true verification. Load when designing enforcement mechanisms. Uses exit code 2 to block, JSON permissionDecision:deny, or updatedInput modification. Rules are instructions; h...

提供方 ingpoc|开源

Enforcement

Enforcement converts one already-proven invariant into a blocking control.

Procedure

  1. Identify the repeated invalid action and the existing deterministic assertion that detects it.
  2. Confirm the actual runtime owner: repository script, CI gate, Codex rule, plugin hook, operating-system sandbox, or external service policy.
  3. Place the block at the narrowest point before irreversible state change.
  4. Fail closed only for destructive, secret, security, or external-send boundaries. Keep ordinary routing and quality guidance informational unless the repository explicitly requires a block.
  5. Test an allowed case, a denied case, diagnostic output, and recovery after the condition is corrected.
  6. Document how to disable or remove the guard safely.

Boundary

  • determinism owns the machine-checkable assertion.
  • enforcement owns where and how that proven assertion blocks an action.
  • verify reports readiness but does not create blocking runtime policy.

Runtime-specific hook schemas belong in the plugin or repository that implements them, not in this global skill.

下载 Skill