gates
claudeThree stateless PreToolUse gates, a PostToolUse JSON-config guard, a 1Password signing nudge, and a docs-consolidation trigger. Denies a git commit that changes code without staging its covering docs (per-plugin README/CLAUDE.md pairs, or the nearest README/CLAUDE/AGENTS walking up); denies a high-fan-out Workflow script with no per-agent model: override and asks before a denylisted built-in named workflow; denies an ad-hoc Agent dispatch that omits model unless the agent type pins one in frontmatter. Separately, a never-blocking trigger counts commits since the .docs-sync record and nudges toward /docs-consolidate, and when a Bash command fails on a locked 1Password SSH agent, a nudge tells Claude to ask you to unlock it instead of retrying. Every gate has an ack marker, and GATES_DISABLE turns any of them off from a settings.json env block. Separately, a PostToolUse hook re-parses settings.json/.mcp.json after an edit and reports a syntax error, which Claude Code otherwise swallows by silently dropping the config it cannot parse.
1 skill · hooks