- block-invisible-unicodebyopen-coder-ai
The mechanizable slice of prompt-injection defense, enforced at two points: at commit (the git hook, over staged…
- block-test-skipsbyopen-coder-ai
Blocks newly added test skips and focus markers -- @pytest.mark.skip/skipif, @unittest.skip, it/describe/test.skip,…
- block-wildcard-agent-permissionsbyopen-coder-ai
The mechanizable slice of excessive agency, enforced at two points: at commit (the git hook, over staged changes) and…
- guard-memory-writesbyopen-coder-ai
Refuses agent-memory writes that hold what memory must never hold: pasted git history (diff headers, hunk headers,…
- java-securitybyopen-coder-ai
trigger: writing Java or Kotlin -- Spring, Jakarta EE, Struts, Quarkus, Micronaut, Vert.x or Android -- SQL, JPA or…
- limit-diff-sizebyopen-coder-ai
trigger: staging a large change, committing more than a reviewer can read at once. avoid: one commit carrying hundreds…
- no-a11y-regressionbyopen-coder-ai
trigger: remediating accessibility, editing markup, emptying or removing an alt, aria-label, label or lang that an…
- pin-github-actionsbyopen-coder-ai
The mechanizable slice of CI supply-chain hardening, enforced at two points: at commit (the git hook, over staged…
- protect-main-branchbyopen-coder-ai
Block direct commits and pushes to main or master. Enforced at commit time by reading the current branch, and at push…
- protect-test-integritybyopen-coder-ai
Blocks a commit that turns tests green by weakening them instead of fixing the code: a deleted test file, a net loss of…
- scan-secretsbyopen-coder-ai
Blocks known credential patterns -- vendor key prefixes, private-key blocks, and key/token/password assignments -- at…
- verify-dependency-existsbyopen-coder-ai
Block hallucinated or unknown dependencies before they enter the repo. Watches requirements.txt, pyproject.toml,…
