diff 1.2.0: digest-only inline hook edits do not expose a reviewer-judgeable capability impact #934

During the stricter agent-capability outreach replay, an otherwise relevant PR could not supply a concrete hook impact that a recipient could judge from the product output.

Real PR: CirrusRedOrg/EntityFrameworkCore.Jet#303

Published agents-shipgate 1.2.0, static replay only. No candidate code or hook was executed.

CLI excerpt, unchanged:

  high     changed  claude-code .claude/settings.json
                   PreToolUse: command changed (<not-shown> sha256:f23acba4b10f → <not-shown> sha256:3f1dc36980b7)
                   hook edit; authority direction is unknown

The output is correct about a command edit and appropriately leaves authority direction unknown. However, both command summaries are <not-shown>; two different SHA-256 prefixes do not tell the reviewer what capability or guard changed. The coverage text also says this command shape is not resolved. This case was excluded from the qualified outreach count, rather than interpreting the hook manually and putting that interpretation in the email.

Related closed #819 added bounded matcher/command/timeout fields; this remaining case has those fields but still no meaningful command summary. #826 only covers a small grammar of unconditional inline allow emitters, which is a different claim.

Requested outcome: either publish a deterministic, redacted, bounded description for supported inline command shapes, or clearly distinguish a digest-only edit that requires opening the config from a row that explains a capability impact. Do not infer widening, execute hooks, or expose raw commands/secrets to fill the gap.

Evidence in this experiment: research_notes/outreach-1.2.0-agent-capability-50-2026-10-02/cases/CirrusRedOrg__EntityFrameworkCore.Jet__pr303/{replay.json,diff.json,diff.txt,current-context.json}.
Replay identities: base 416a2aa46e17c2ea9e9bf4302be5b130bd6c8f37, head 0d999b84e6dc62a68a8a553a10ab37b08c8bf226.