1.0

Open

Due by October 31, 2026

•Last updated Oct 19, 2026

The guard fails closed, known bypasses are closed, and the test suite passes on Linux and macOS (on the Python engine).

46% complete

watch-secrets misses the reader family the harness now covers
chris-peterson/ClaudeWatch#29 · opened on Sep 2, 2026 · 1.0
Replace "dispositioned" in the learn skill and SK-19
chris-peterson/ClaudeWatch#32 · opened on Sep 12, 2026 · 1.0
Close the /tmp and quoted-$( gaps in the recursive rm screening
chris-peterson/ClaudeWatch#35 · opened on Sep 24, 2026 · 1.0
Make the PreToolUse guards fail closed
chris-peterson/ClaudeWatch#41 · opened on Oct 8, 2026 · 1.0
Deny hook input the engine can't read
chris-peterson/ClaudeWatch#40 · opened on Oct 3, 2026 · 1.0
Say that unconfigured sessions start in auto, so asks don't prompt
chris-peterson/ClaudeWatch#37 · opened on Sep 28, 2026 · 1.0
Close screening gaps exposed by Claude Code 2.1.299
chris-peterson/ClaudeWatch#42 · opened on Oct 14, 2026 · 1.0
Stop asking on cat of skill caches under ~/.claude
chris-peterson/ClaudeWatch#45 · opened on Oct 19, 2026 · 1.0
Name the hook prerequisites and the sandboxed toggle
Unread
#46 opened Oct 19, 2026 · Updated Oct 19, 2026Draft
Screen secret reads by any reader, not just cat
Unread
#47 opened Oct 19, 2026 · Updated Oct 19, 2026Draft
Close the quoted-script and scratch-path rm gaps
Unread
#48 opened Oct 19, 2026 · Updated Oct 19, 2026Draft
Make the guard fail closed
Unread
#49 opened Oct 19, 2026 · Updated Oct 19, 2026Draft

Issues