guard: add the guard package with its three effects #653

New issue

Closed

opened 2026-09-29 16:35:18 +00:00 by hexajon · 0 comments

hexajon commented

2026-09-29 16:35:18 +00:00

Owner

What to build

A package in internal/service that decides whether a write may run, by what the write does:

A write to the default branch: refused. The one exception is the first push into an empty repo (no HEAD).
A write that destroys unrecoverable work: refused, unless madtea computes a proof that nothing unrecoverable is lost (ADR 0029).
A content write to a populated repo outside the session's scope: refused, with the scope rule of ADR 0043. The rule moves here from internal/mcp/forgewrite_guard.go.

The package takes no override of any kind. Each effect has one refusal text, which names the next step and never a way around the refusal.

Acceptance

Table tests cover each effect, the empty-repo exception, and a failed scope read.
No input, flag, or setting turns a refusal off.

## What to build A package in `internal/service` that decides whether a write may run, by what the write does: - A write to the default branch: refused. The one exception is the first push into an empty repo (no `HEAD`). - A write that destroys unrecoverable work: refused, unless madtea computes a proof that nothing unrecoverable is lost (ADR 0029). - A content write to a populated repo outside the session's scope: refused, with the scope rule of ADR 0043. The rule moves here from `internal/mcp/forgewrite_guard.go`. The package takes no override of any kind. Each effect has one refusal text, which names the next step and never a way around the refusal. ## Acceptance - Table tests cover each effect, the empty-repo exception, and a failed scope read. - No input, flag, or setting turns a refusal off.

hexajon referenced this issue

2026-09-29 16:39:56 +00:00

guard: the git write functions call the guard #659

hexajon referenced this issue

2026-09-29 16:40:31 +00:00

guard: the forge client send functions call the guard #660

hexajon added a new dependency

2026-09-29 16:41:10 +00:00

#659 guard: the git write functions call the guard

hexajon added a new dependency

2026-09-29 16:41:10 +00:00

#660 guard: the forge client send functions call the guard