- .claude/hooks/** joins the always-high row: a hook script runs on the
workstation.
- Bas narrows to **/*.md and LICENSE: a script or an image added under
docs/ or reports/ is no longer low.
- package.json: a package moved between devDependencies and dependencies,
or any line of the dependencies block, is high; the script now tracks
the block each package line belongs to.
- Calibration records the choices Max confirmed on 2026-10-19.
Replay unchanged: 20 haut out of 31.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The escape-sequence pitfall had lost its own example on the way: the
backslash-u002d sequence landed decoded as a plain dash. It is written
back with the backslash built by chr(92) and checked with od -c.
The script's docstring no longer lists the environment and log-line
triggers dropped during calibration, and AUTH no longer matches
timingSafeEqual and createHash, which the Haut table does not name.
Replay unchanged: 20 haut out of 31.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
REVIEW.md sets the review level of a PR from the files it touches
(routing and auth, write surfaces, image, workstation agents, CI and
guards), the rules of each zone with their source, the verification
commands and the review pitfalls. scripts/review-levels.py replays the
levels on the 31 PRs that reached main and checks, offline, that its
patterns match the Haut table.
CLAUDE.md said "no auto-deploy": since 2026-10-12 a push to main
redeploys through the Forgejo webhook. The Deploy section now says so
and points to REVIEW.md.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
