7394740a91
Implements architectural enforcement to prevent framework fade (voluntary compliance failures). This addresses Case Study #27028 where AI skipped session-init.js despite explicit CRITICAL warnings while implementing anti-fade enforcement mechanisms. ## New Components ### Hook Validators (scripts/hook-validators/) - validate-file-edit.js: Pre-Edit enforcement (CSP, conflicts, boundaries) - validate-file-write.js: Pre-Write enforcement (overwrites, boundaries) - check-token-checkpoint.js: Prevents checkpoint fade at 50k/100k/150k ### Documentation - CONTINUOUS_ENFORCEMENT_ARCHITECTURE.md: Technical architecture - BOOTSTRAPPING_SOLUTION.md: Solves auto-run session-init problem - PRE_APPROVED_COMMANDS.md: Extracted from CLAUDE.md (context reduction) - Case Study #27028: Framework fade during anti-fade implementation ### Session Initialization Enhancement - scripts/session-init.js: Added Section 8 (Hook Architecture Status) - Reports hook validator installation and pre-approved commands ### CLAUDE.md Reduction (Not Committed - .gitignored) - Reduced from 235 lines to 86 lines (63% reduction) - Philosophy: "If it can be enforced in code, it should not be documented" ## Key Findings Case Study #27028 proved documentation-based governance fundamentally cannot work. AI skipped session-init.js despite "⚠️ CRITICAL" warning while actively implementing anti-fade enforcement. This validates the thesis that architectural enforcement (code that runs automatically) is the only viable solution. ## Next Steps Bootstrapping solution required: session-init.js needs automatic invocation on continued sessions. Without this, framework fade will recur. Options documented in BOOTSTRAPPING_SOLUTION.md. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
97 lines
1.3 KiB
Text
97 lines
1.3 KiB
Text
# Dependencies
|
|
node_modules/
|
|
|
|
# Environment variables
|
|
.env
|
|
.env.local
|
|
.env.*.local
|
|
|
|
# Logs
|
|
logs/
|
|
*.log
|
|
npm-debug.log*
|
|
yarn-debug.log*
|
|
yarn-error.log*
|
|
|
|
# MongoDB data
|
|
data/mongodb/*
|
|
!data/mongodb/.gitkeep
|
|
|
|
# Generated files
|
|
public/downloads/*.pdf
|
|
public/downloads/*.epub
|
|
public/downloads/*.docx
|
|
|
|
# IDE
|
|
.vscode/
|
|
.idea/
|
|
*.swp
|
|
*.swo
|
|
*~
|
|
|
|
# OS
|
|
.DS_Store
|
|
Thumbs.db
|
|
|
|
# Testing
|
|
coverage/
|
|
.nyc_output/
|
|
|
|
# Build
|
|
dist/
|
|
build/
|
|
|
|
# Temporary files
|
|
tmp/
|
|
temp/
|
|
*.tmp
|
|
|
|
# ============================================
|
|
# SECURITY: Private GitHub Protection
|
|
# ============================================
|
|
|
|
# Sensitive internal documentation (keep private, never push)
|
|
CLAUDE.md
|
|
CLAUDE.md.backup
|
|
CLAUDE_Tractatus_Maintenance_Guide.md
|
|
SESSION-HANDOFF-*.md
|
|
docs/SECURITY_AUDIT_REPORT.md
|
|
docs/FRAMEWORK_FAILURE_*.md
|
|
old*
|
|
*.backup
|
|
|
|
# Framework session state (regenerated each session)
|
|
.claude/session-state.json
|
|
.claude/token-checkpoints.json
|
|
|
|
# Secrets and credentials
|
|
*.key
|
|
*.pem
|
|
*.p12
|
|
*.pfx
|
|
secrets/
|
|
credentials/
|
|
|
|
# Database dumps and backups
|
|
dump/
|
|
backups/
|
|
*.sql
|
|
*.sql.gz
|
|
*.dump
|
|
|
|
# SSH keys (extra safety)
|
|
*.ssh/
|
|
id_rsa*
|
|
id_ed25519*
|
|
|
|
# Deployment configurations with secrets
|
|
deployment-config.json
|
|
production.json
|
|
|
|
# Temporary audit files
|
|
/tmp/*.md
|
|
|
|
# Screenshots and temporary images
|
|
Screenshot*.png
|
|
*.screenshot.png
|
|
umami-local/
|