feat: enforce the write gate and command gate #378

Activity

1. pacphi

   added this to the 4.0.0-beta.4 milestone on Oct 1, 2026
2. pacphi

   added a parent issue on Oct 1, 2026

   • feat: project-scope P7, enforce the write gate (epic) #302
3. pacphi

   added

   v4.0.0Routing: v4.0.0 boardRouting: v4.0.0 board

   size:MA few modules; one to three daysA few modules; one to three days

   ws:project-scopeThe project-scoped management redesignThe project-scoped management redesign

   on Oct 1, 2026
4. pacphi

   marked this as blocked by 2 issues on Oct 1, 2026

   • feat: ak uninstall on project state #358
   • feat: Maintenance writes only in opted-in projects #373
5. pacphi

   marked this as blocking 3 issues on Oct 1, 2026

   • refactor: delete the machine-reconciliation code paths #379
   • test: upgrade acceptance on real machines #384
   • chore: publish 4.0.0-beta.4 #388
6. pacphi commented on Oct 7, 2026

   

   pacphi

   on Oct 7, 2026

   OwnerAuthor

   More actions

   Decision: enforce in 4.0.0-beta.4 (option A)

   Decided by the maintainer on 2026-10-07. P7-01 keeps its place in 4.0.0-beta.4.

   Why

   • P7-01 is blocked by P5-04 (uninstall on project state) and P6-11 (Maintenance writes only in opted-in projects). The gates cannot enforce earlier without new exceptions, and this card rules new exceptions out.
   • Betas 1 to 3 run report-only. The contract tests in test: contract tests with the current violations as baseline #328 already fail CI on any new user-level write from beta.1.
   • The real-machine upgrade test (GA-06) in rc.1 is blocked by this card, so it runs on an enforcing build.

   This card is not the install cutover. Global installs are removed by P2-03 in beta.1, and latest moves at 4.0.0 GA. This card only starts refusing writes and commands. It relies on P2-03 having removed every npm install -g.

   Open points to settle in this card (found in the review of #467, where the report-only gates landed):

   • Should npm uninstall -g and npm update -g be reported or refused? Today the gate reports install forms only. ak itself runs npm uninstall -g in uninstall, so enforcement needs a deliberate rule.
   • What is the default scope of a claude mcp|plugin change with no -s? claude --help does not say, so the gate does not classify it today.
   • 26 files call child_process directly and bypass the command gate, which only covers run(). Decide whether enforcement covers them.

   Related: #327 (report-only gates, merged in #467), #328 (contract tests).