jpmschweitzerandClaude
55fe0f9083
Commits a .claude/settings.json rather than leaving permissions to per-developer local state, and initialises a pql vault for this repo's tickets and internal decisions. Every git deny rule appears in both the `git <verb>` and `git * <verb>` forms. Only the second catches `git -C <path>`, and without it the whole deny list is decorative -- it looks like a policy and stops nothing. The allow list carries pql's absolute path alongside the bare name. pql is installed to ~/.local/bin, which is on the login PATH but not the one a non-interactive shell gets, so the bare-name rules match nothing on their own and every call would prompt anyway. .gitignore now covers .claude/settings.local.json, which is machine-local and must never be shared. `pql init` contributed the .pql/* rules with an exception for the changelog, which is the replication log of record and has to be committed for tickets to travel with a clone. Co-Authored-By: Claude <noreply@anthropic.com>
12 lines
572 B
SQL
12 lines
572 B
SQL
-- Changelog format marker, written by pql. Comments only: this file
|
|
-- is never executed — Import descends into the per-table directories
|
|
-- and does not read the changelog root.
|
|
--
|
|
-- A changelog carrying no marker is format 1, the shape that existed
|
|
-- before formats were versioned. An older format is migrated forward
|
|
-- by `pql plan upgrade` (and automatically from the post-merge hook);
|
|
-- a newer one is refused rather than replayed under rules this binary
|
|
-- does not know. See D-28 and docs/versions.md.
|
|
-- pql:changelog_format: 2.0.0
|
|
-- pql:written_by: 2.2.0
|