lockdown: emit code-comments-compliant lockdown-deny.sh #94
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Problem
coily lockdown --apply --replaceemits a 5-line contiguous comment block in.claude/lockdown-deny.sh, which violates the agentic-os v0.2.8code-commentsrule (MAX_CONTIGUOUS=2). Repos that adopt the v0.2.8 hook suite then trip on the regenerated file every timecoily lockdownruns.Current output
```sh
#!/bin/sh
Auto-generated by coily. Do not edit; regenerate via coily lockdown --apply --replace.
Delegates to coily hook pre-tool-use, which calls the shared
cli-guard/hook engine with coily's integrity rules + route
table. See coilysiren/coily#248 + cli-guard#74.
exec coily hook pre-tool-use
```
Desired
A 1-2 line header pointing to durable docs. Hand-fixed in cli-mcp@dispatch/issue-66 as:
```sh
#!/bin/sh
Auto-generated by coily lockdown --apply --replace. See docs/lockdown.md.
exec coily hook pre-tool-use
```
(Or any other shape that fits MAX_CONTIGUOUS=2 and the 90-char cap. The cli-guard / coily#248 references can live in a docs/ pointer or in the SKILL.md.)
Origin
Surfaced by coilysiren/cli-mcp#66 while sweeping code-comments violations.
Ported from coilysiren/coily#343.
Merged into #85 in the 2026-05-29 backlog burn-down. Duplicate lockdown-deny.sh comment-header TOL=2 bug Reopen if it should stand alone.