V4: Output redaction on Claude Code - #13

Merged

afogel merged 55 commits into

mainfrom

Sep 6, 2026

Commits on Sep 6, 2026

V4 scaffold: Output redaction on Claude Code
afogel
committed
656a8a2
Plan V4, and resolve F1 by running it
afogel
committed
5cab2f3
Revise the V4 plan for what the review redistribution landed under it
afogel
committed
56cbaa6
Ship the redact rules and the post-tool gate
afogel
committed
ef924fe
Build the result envelope from a PostToolUse payload
afogel
committed
165448c
Check outputs.within, and watch the unwrapArguments guard fail
afogel
committed
59d111b
Assemble the post-tool snapshot from a result envelope
afogel
committed
c5ed2a1
Name the assembler the manifest actually means, and tie the envelope to it
afogel
committed
9b6aabb
Name both assemblers in N23's row, and record the sibling ruling in V4
afogel
committed
afcc79b
Give each hook its own decisions block
afogel
committed
dc427ba
Watch the two new per-hook gates fail
afogel
committed
4d6951a
Close the prototype hole in governStep's own guard
afogel
committed
ceb54b0
Let a redaction address an array element
afogel
committed
18078bf
Repoint the array-descent test at validateDecision to V4's new behaviour
afogel
committed
2ab9f93
Pin the three ways array descent could regress unwatched
afogel
committed
8671d18
Synthesize a redaction for the result gate
afogel
committed
4e9849c
Name both modification shapes in N24's row
afogel
committed
cd6b5b2
Pin the redaction pointer where both declarations meet
afogel
committed
ff89ce1
Correct the plan's mapping stanza: `from` names the transform object
afogel
committed
1373a22
Say where `rule.from` is actually read
afogel
committed
645a19c
Name the mutation that isolates the redaction pin
afogel
committed
64116c0
Redact tool output end to end
afogel
committed
03e75a4
Register the result gate for a live agent
afogel
committed
a6a2858
Say what N7 applies modifications to, and where the result lands
afogel
committed
d55490e
Record the mutation in the test that catches it, with the real count
afogel
committed
9a3978b
Refuse an unpatchable result gate before a decision is sought
afogel
committed
e579605
Say what actually exits 2, and scope the claim that stopped being universal
afogel
committed
3d0b067
Word a refusal for the gate it can be reached from, not one of them
afogel
committed
61d3590
Anchor the hook matchers, so the host's pattern semantics stop mattering
afogel
committed
29f4229
Correct what the README tells an operator installing the hooks
afogel
committed
62b115c
Guard the projection's path, and pin the type mismatch that is reachable
afogel
committed
7cecb05
Let a redaction say why, at the gate the model reads
afogel
committed
24a244b
Type-check the field the patch lands on, not one a second parse resolves to
afogel
committed
0f59d67
Finish the exit-2 enumeration, and stop asserting the host behaviour anchoring avoids
afogel
committed
ac3e9a6
Record the audited-proceed-that-did-not-happen, where it can be found
afogel
committed
f67b13e
Refuse a result modification this host cannot apply
afogel
committed
b54bc6c
Say what else N7 refuses, and record the redaction that changed nothing
afogel
committed
cadcff7
Scope the landing check's claim to what it checks, and record both holes
afogel
committed
abdb088
Narrow two claims the landing check does not support, and file both holes
afogel
committed
cfc7b1a
Give V4's per-modification check an owner, on both ends
afogel
committed
1a87aa5
Say what the result gate does, and correct V3's temporary edit
afogel
committed
5d47907
Say which half of the parked check is pinned, because only one is
afogel
committed
ed80a53
Declare the gate V4 added, and check the declaration against the dispatch
afogel
committed
4b02d29
Put "reliably" back in the demo sentence, at all four sites
afogel
committed
57de218
Name the fields the handshake carries, and file the hazard V4 measured
afogel
committed
c1e9b49
Correct seven declarations that describe something else
afogel
committed
e55f83d
Name the hook when `arguments:` is not a path
afogel
committed
e55598c
Carry the branches below V4 through its own tests and seams
afogel
committed
1a9b971
Say which document, which leaf, and which language, once each
afogel
committed
2a846ba
Say what this slice's code does now, not how it got here
afogel
committed
b0bfa42
Extend the same pass to the shim and the integration tests
afogel
committed
6030411
Say what these tables mean, not which review or task produced them
afogel
committed
df39d70
Withhold for every disposition a result gate cannot carry out, not only deny
afogel
committed
c853a9e
Declare ask and defer at PostToolUse, and gate every entry that withholds
afogel
committed
73c4c07
Say what this gate does with an ask, and capture it
afogel
committed
0a6a9e3