Skip to content

docs(plans): one raw-git worktree method and the reaper's backstops - #233

Merged
twistedmelonman merged 1 commit into
mainfrom
claude/docs-worktree-one-method-3f3a7d59
Oct 28, 2026
Merged

twistedmelonman merged 1 commit into
mainfrom
claude/docs-worktree-one-method-3f3a7d59

Conversation

@twistedmelonman

Copy link
Copy Markdown
Member

Updates the permission policy plan to the worktree decision made on 2026-10-27. Docs only.

  • Worktrees section rewritten for the one method shipped in fix(hooks): one worktree method; audit out-of-scope git worktree add claude-config#798: raw git worktree add --no-track in every repo, no EnterWorktree. Removal: the agent tries git worktree remove after a MERGED and clean check, deletes the branch only if that succeeded, and leaves any failure to the reaper.
  • Two launch-repo sandbox gaps recorded (hypotheses that fit every observation): creating .git/worktrees/ itself is denied, and a worktree that existed at session start cannot be removed by that session.
  • Reaper safety requirements: report-only first, a realpath allowlist, independent checks right before each removal (PR MERGED for that branch, head SHA match, clean including ignored files, not locked, no process inside), git-only deletes, a per-run cap, and a fully stubbed test suite whose first real run is in a disposable VM.
  • Follow-ups updated: done items moved up; logged for the next session: reviewers without MCP or telemetry, and BLOCKING findings on hook files that the arbiter cannot overrule.

The Worktrees section described EnterWorktree. Andrew chose one method
on 2026-10-27: raw `git worktree add --no-track` in every repo, shipped
in claude-config#798. Removal: the agent tries `git worktree remove`
after a MERGED and clean check, and leaves a failure to the reaper.

Record the two launch-repo sandbox gaps found tonight (creating
.git/worktrees/ itself, and removing a worktree that existed at session
start), and the reaper's safety requirements: report-only first, an
allowlist, independent checks before each removal, git-only deletes, a
per-run cap, and a stubbed test suite with its first real run in a
disposable VM.

Log the next-session follow-ups: reviewers without MCP or telemetry,
and BLOCKING findings on hook files that the arbiter cannot overrule.
@twistedmelonman
twistedmelonman merged commit f39ff54 into main Oct 28, 2026
5 checks passed
@twistedmelonman
twistedmelonman deleted the claude/docs-worktree-one-method-3f3a7d59 branch October 28, 2026 03:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant