From 94adc0c6e7cde7e900041d036cbae211b4168209 Mon Sep 17 00:00:00 2001
From: Jordan Winters <dralgorhythm@users.noreply.github.com>
Date: Fri, 24 Jul 2026 14:52:58 -0500
Subject: [PATCH 1/2] =?UTF-8?q?feat(ci):=20real=20dependency=20scanning=20?=
 =?UTF-8?q?=E2=80=94=20repo=20Trivy=20vuln=20scan=20+=20per-stack=20audit?=
 =?UTF-8?q?=20gates=20(U20/O7)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

security.md's checklist claimed "automated dependency scanning" that existed
nowhere in this repo's CI or stack packs. Make the claim true before commit 2
relabels it:

- framework-invariants.yml: Trivy secret-scan job now runs
  `--scanners secret,vuln` (was secret-only), same blocking exit-code style.
  Trivially green today (no manifests in this repo); real for forks/adopters
  that add one.
- Every stack-pack ci-gates.yml (TypeScript, Python, Go, Rust) gains one
  native dependency-audit step: `pnpm audit --audit-level high`,
  `uvx pip-audit`, `govulncheck ./...`, `cargo audit`. Each cites
  .claude/rules/security.md's Dependency Safety section rather than
  restating it.
- Each pack's golden-path.skill.md "Gates Wiring" sentence corrected from
  "CI runs the identical gates" to name the new CI-only audit step — it has
  no local pre-commit-verification.sh equivalent, so the old claim would
  otherwise become a fresh instance of the exact false-claim pattern this
  unit exists to close.
- MIGRATION.md (v4.0.x) and CHANGELOG.md document the change for adopters
  who already pasted a pack's ci-gates.yml block.

Stack-pack README "Exemplar current as of" lines already read 2026-07
(current month); no edit needed since the granularity is monthly and no
month boundary was crossed.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 .claude/templates/stack-packs/go/ci-gates.yml             | 3 +++
 .claude/templates/stack-packs/go/golden-path.skill.md     | 2 +-
 .claude/templates/stack-packs/python/ci-gates.yml         | 2 ++
 .claude/templates/stack-packs/python/golden-path.skill.md | 2 +-
 .claude/templates/stack-packs/rust/ci-gates.yml           | 2 ++
 .claude/templates/stack-packs/rust/golden-path.skill.md   | 2 +-
 .claude/templates/stack-packs/typescript/ci-gates.yml     | 1 +
 .../templates/stack-packs/typescript/golden-path.skill.md | 2 +-
 .github/workflows/framework-invariants.yml                | 3 ++-
 CHANGELOG.md                                              | 1 +
 MIGRATION.md                                              | 8 ++++++++
 11 files changed, 23 insertions(+), 5 deletions(-)

diff --git a/.claude/templates/stack-packs/go/ci-gates.yml b/.claude/templates/stack-packs/go/ci-gates.yml
index 3465685..df8f702 100644
--- a/.claude/templates/stack-packs/go/ci-gates.yml
+++ b/.claude/templates/stack-packs/go/ci-gates.yml
@@ -19,6 +19,9 @@ gates:
     - uses: golangci/golangci-lint-action@v9.3.0
       with:
         version: v2.12
+    # dependency scan — .claude/rules/security.md Dependency Safety
+    - run: go install golang.org/x/vuln/cmd/govulncheck@latest
+    - run: govulncheck ./...
     - run: go test ./...
     - run: go vet ./...
     - run: go build ./...
diff --git a/.claude/templates/stack-packs/go/golden-path.skill.md b/.claude/templates/stack-packs/go/golden-path.skill.md
index 6358ee2..532e233 100644
--- a/.claude/templates/stack-packs/go/golden-path.skill.md
+++ b/.claude/templates/stack-packs/go/golden-path.skill.md
@@ -34,7 +34,7 @@ Regenerate `go.sum` with `go mod tidy` after every dependency change — never h
 
 ## Gates Wiring
 
-`.claude/hooks/pre-commit-verification.sh` auto-detects this stack from `go.mod` and reminds you to run these commands before a commit lands. CI runs the identical gates — see this pack's `ci-gates.yml`.
+`.claude/hooks/pre-commit-verification.sh` auto-detects this stack from `go.mod` and reminds you to run these commands before a commit lands. CI runs the same gates plus a dependency-audit step (`govulncheck ./...`) that has no local pre-commit equivalent — see this pack's `ci-gates.yml`.
 
 ## Related Skills
 
diff --git a/.claude/templates/stack-packs/python/ci-gates.yml b/.claude/templates/stack-packs/python/ci-gates.yml
index a3d52f7..6459017 100644
--- a/.claude/templates/stack-packs/python/ci-gates.yml
+++ b/.claude/templates/stack-packs/python/ci-gates.yml
@@ -15,6 +15,8 @@ gates:
       with:
         enable-cache: true
     - run: uv sync --locked
+    # dependency scan — .claude/rules/security.md Dependency Safety
+    - run: uvx pip-audit
     - run: uv run pytest
     - run: uv run ruff check .
     - run: uv run ruff format --check .
diff --git a/.claude/templates/stack-packs/python/golden-path.skill.md b/.claude/templates/stack-packs/python/golden-path.skill.md
index cd587b2..4f9fc70 100644
--- a/.claude/templates/stack-packs/python/golden-path.skill.md
+++ b/.claude/templates/stack-packs/python/golden-path.skill.md
@@ -33,7 +33,7 @@ Regenerate `uv.lock` with `uv lock` (`uv sync` regenerates it implicitly too) 
 
 ## Gates Wiring
 
-`.claude/hooks/pre-commit-verification.sh` auto-detects this stack from `pyproject.toml` and reminds you to run these commands before a commit lands. CI runs the identical four gates — see this pack's `ci-gates.yml`.
+`.claude/hooks/pre-commit-verification.sh` auto-detects this stack from `pyproject.toml` and reminds you to run these commands before a commit lands. CI runs the same four gates plus a dependency-audit step (`uvx pip-audit`) that has no local pre-commit equivalent — see this pack's `ci-gates.yml`.
 
 ## Related Skills
 
diff --git a/.claude/templates/stack-packs/rust/ci-gates.yml b/.claude/templates/stack-packs/rust/ci-gates.yml
index e235126..2480279 100644
--- a/.claude/templates/stack-packs/rust/ci-gates.yml
+++ b/.claude/templates/stack-packs/rust/ci-gates.yml
@@ -15,6 +15,8 @@ gates:
     - uses: actions-rust-lang/setup-rust-toolchain@v1.17.0
       with:
         components: clippy, rustfmt
+    - run: cargo install cargo-audit --locked  # dependency scan — .claude/rules/security.md Dependency Safety
+    - run: cargo audit        # vulnerability audit
     - run: cargo test        # test suite
     - run: cargo clippy      # lint
     - run: cargo fmt --check # format check
diff --git a/.claude/templates/stack-packs/rust/golden-path.skill.md b/.claude/templates/stack-packs/rust/golden-path.skill.md
index ae5ac42..d35c20a 100644
--- a/.claude/templates/stack-packs/rust/golden-path.skill.md
+++ b/.claude/templates/stack-packs/rust/golden-path.skill.md
@@ -34,7 +34,7 @@ Cargo regenerates `Cargo.lock` automatically on any command that resolves depend
 
 ## Gates Wiring
 
-`.claude/hooks/pre-commit-verification.sh` auto-detects this stack from `Cargo.toml` and reminds you to run these commands before a commit lands. CI runs the identical gates — see this pack's `ci-gates.yml`.
+`.claude/hooks/pre-commit-verification.sh` auto-detects this stack from `Cargo.toml` and reminds you to run these commands before a commit lands. CI runs the same gates plus a dependency-audit step (`cargo audit`) that has no local pre-commit equivalent — see this pack's `ci-gates.yml`.
 
 ## Related Skills
 
diff --git a/.claude/templates/stack-packs/typescript/ci-gates.yml b/.claude/templates/stack-packs/typescript/ci-gates.yml
index 53bfdb4..2e1aec4 100644
--- a/.claude/templates/stack-packs/typescript/ci-gates.yml
+++ b/.claude/templates/stack-packs/typescript/ci-gates.yml
@@ -16,6 +16,7 @@ gates:
         node-version: lts/*
         cache: pnpm
     - run: pnpm install --frozen-lockfile
+    - run: pnpm audit --audit-level high  # dependency scan — .claude/rules/security.md Dependency Safety
     - run: pnpm test        # vitest run
     - run: pnpm lint        # biome check .
     - run: pnpm typecheck   # tsc --noEmit
diff --git a/.claude/templates/stack-packs/typescript/golden-path.skill.md b/.claude/templates/stack-packs/typescript/golden-path.skill.md
index 53a9b9d..ba9373d 100644
--- a/.claude/templates/stack-packs/typescript/golden-path.skill.md
+++ b/.claude/templates/stack-packs/typescript/golden-path.skill.md
@@ -34,7 +34,7 @@ Regenerate `pnpm-lock.yaml` with `pnpm install` — never hand-edit it. Commit i
 
 ## Gates Wiring
 
-`.claude/hooks/pre-commit-verification.sh` auto-detects this stack from `package.json` and reminds you to run these commands before a commit lands. CI runs the identical four gates — see this pack's `ci-gates.yml`.
+`.claude/hooks/pre-commit-verification.sh` auto-detects this stack from `package.json` and reminds you to run these commands before a commit lands. CI runs the same four gates plus a dependency-audit step (`pnpm audit --audit-level high`) that has no local pre-commit equivalent — see this pack's `ci-gates.yml`.
 
 ## Related Skills
 
diff --git a/.github/workflows/framework-invariants.yml b/.github/workflows/framework-invariants.yml
index c5ce752..cb69c90 100644
--- a/.github/workflows/framework-invariants.yml
+++ b/.github/workflows/framework-invariants.yml
@@ -59,7 +59,8 @@ jobs:
         uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0 (SHA-pins its own setup-trivy dependency; older releases referenced since-deleted setup-trivy tags)
         with:
           scan-type: fs
-          scanners: secret
+          # No manifests exist in this repo today, so vuln findings are trivially green here — the scanner is real for forks/adopters that add them.
+          scanners: secret,vuln
           exit-code: 1
 
   diff-size:
diff --git a/CHANGELOG.md b/CHANGELOG.md
index dcf2bfc..56fe2cf 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -39,6 +39,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `pre-commit-verification.sh` rewritten from advisory-only to enforcing (jq present): on `git commit`, runs every gate `gate-lib.sh` detects, each under `timeout "${CLAUDE_GATE_TIMEOUT_SECS:-120}"` from the project dir, logging to `.claude/hooks/.state/gate-<label>.log`. All green writes a hook-authored evidence stamp (`.claude/hooks/.state/commit-verified`, `{epoch, tree-hash}`) trusted on a later commit only when BOTH ≤5 minutes old AND its tree-hash matches the current `git write-tree` output — content-bound, not time-only (review F8), so an edit staged seconds ago forces a re-run despite an otherwise-fresh stamp. A red gate denies the commit, naming the gate, its log, and the existing anti-test-deletion sentence; a gate that exceeds its budget asks instead of silently killing or hanging, and writes no stamp. No gates detected → falls back to the original advisory text, unchanged. `CLAUDE_SKIP_GATE_HOOK=1` escape hatch allows unconditionally with the skip always disclosed in context; the jq-absent path is unchanged (silent fail-open). `settings.json`'s registration for this hook is raised from 5s to 300s to fit real gate runs (per-gate defaults sum safely under it). New `scripts/hook-tests.d/30-gates-lane.sh` covers the red/green/timeout/escape-hatch/cache-invalidation matrix against three fixtures — `scripts/fixtures/failing-project/` and `.../slow-gate/` each gain an (empty) `package-lock.json` so `gate-lib.sh` picks npm over pnpm (GitHub-hosted ubuntu-latest ships the former, not the latter, keeping the fixtures CI-executable); new sibling fixture `scripts/fixtures/passing-project/` covers the green/stamp path. `docs/hooks.md` gains a "Quality Gates" subsection documenting the stamp, `CLAUDE_GATE_TIMEOUT_SECS`, and the escape hatch (unit U5b)
 - `.claude/hooks/gate-lib.sh` gains `gate_lib_timeout_bin`: the portable timeout-binary resolution (`timeout`/`gtimeout`/unbounded) `pre-commit-verification.sh` (U5b) used inline, now shared verbatim with the new `task-quality-gate.sh` — DRY, the same justified pattern `gate_lib_detect` itself set in U5a. `pre-commit-verification.sh` calls the new helper instead of resolving the binary inline; behavior is unchanged (verified: the full `30-gates-lane.sh` matrix passes unmodified against the refactored hook)
 - New `.claude/hooks/task-quality-gate.sh`, registered by **default** under `hooks.TaskCompleted` in `.claude/settings.json` (timeout 120s) — the framework's only true completion-time quality gate no longer ships disabled (unit U5c; decision record: `artifacts/adr_default_quality_gate.md`, Decision D1). Runs the same `gate-lib.sh`-detected gates `pre-commit-verification.sh` runs at commit time, but at task-completion time — a second, independent checkpoint. A red gate blocks via exit code 2 (the platform's documented `TaskCompleted` mechanism), naming the gate, its log (`.claude/hooks/.state/taskgate-<label>.log`, a separate namespace from the commit gate's), and the same anti-test-deletion reminder. A gate exceeding its `${CLAUDE_GATE_TIMEOUT_SECS:-90}`-second budget is treated as non-blocking (allows, with an honest stderr note) rather than the commit gate's `ask`, since a task completion should not hard-fail on slowness alone. `CLAUDE_SKIP_GATE_HOOK=1` — the same variable the commit gate honors — disables it, disclosed on stderr, never silent. No detectable stack or `jq` absent → silent allow. New `scripts/hook-tests.d/60-taskgate.sh` covers the red/green/no-stack/escape-hatch/jq-absent matrix against the existing `failing-project`/`passing-project` fixtures; `scripts/test-hooks.sh`'s `run_case` gains `exit2-stderr-contains:`/`exit0-stderr-contains:` expectation forms for TaskCompleted's exit-code-plus-stderr contract (documented in the runner's own header). `docs/hooks.md` gains a "Quality Gates (task-quality-gate.sh)" subsection beside the commit gate's, a Built-in Hooks table row, and its opt-in-recipes preamble is rewritten so "ships disabled by default" accurately scopes to the recipes that remain opt-in (the forced-eval skill-activation hook, `docs/examples/worker-budget-hook.sh`) instead of contradicting the newly-shipped default; `artifacts/adr_default_quality_gate.md` records the context, the decision, the rejected keep-opt-in-but-prominent alternative, the reversal path, and consequences (MIGRATION.md entry, below)
+- Real dependency scanning (O7/unit U20): `framework-invariants.yml`'s Trivy job now scans `fs --scanners secret,vuln` instead of `secret` alone, same blocking exit-code style — trivially green today since this repo carries no dependency manifests, but real for any fork/adopter that adds one. Every stack-pack `ci-gates.yml` (TypeScript/JavaScript, Python, Go, Rust) gains one native audit step — `pnpm audit --audit-level high` / `uvx pip-audit` / `govulncheck ./...` (via `go install golang.org/x/vuln/cmd/govulncheck@latest`) / `cargo install cargo-audit --locked` + `cargo audit` — each citing `.claude/rules/security.md`'s Dependency Safety section rather than restating it. Each pack's `golden-path.skill.md` "Gates Wiring" sentence is corrected from "CI runs the identical gates" to name the new CI-only audit step, since it has no local pre-commit equivalent. Closes the gap `research_ai_coding_frustrations.md`'s audit flagged: `security.md`'s checklist claimed "automated dependency scanning" that existed nowhere in repo CI or stack packs
 
 ## [4.0.0] - 2026-07-23
 
diff --git a/MIGRATION.md b/MIGRATION.md
index f4e6e5c..ee7ab8b 100644
--- a/MIGRATION.md
+++ b/MIGRATION.md
@@ -324,4 +324,12 @@ This is a deliberate doctrine change, not an oversight — see `artifacts/adr_de
 - To skip gate enforcement for one task completion, set `CLAUDE_SKIP_GATE_HOOK=1` — the same escape hatch the commit gate honors (one variable disables both).
 - If you don't want this hook running at all, remove the `TaskCompleted` entry from `.claude/settings.json`'s `hooks` block — see `docs/hooks.md`'s "How to disable a hook."
 
+### Dependency-audit step added to CI (repo Trivy scan + stack-pack `ci-gates.yml`)
+
+**Who is affected:** anyone whose repo's CI workflow was built by pasting a stack-pack `ci-gates.yml` snippet (TypeScript/JavaScript, Python, Go, or Rust); at the framework-repo level, anyone who forks this repo and later adds a dependency manifest.
+
+**What breaks:** nothing — purely additive. This repo's own `framework-invariants.yml` Trivy job now scans `secret,vuln` instead of `secret` only (trivially green today: this repo carries no dependency manifests, real for any fork that adds one). Each stack pack's `ci-gates.yml` gains one blocking audit step using that stack's native tool (`pnpm audit --audit-level high`, `uvx pip-audit`, `govulncheck ./...`, `cargo audit`) — see `.claude/rules/security.md`'s Dependency Safety section. Each pack's `golden-path.skill.md` "Gates Wiring" sentence is corrected to name this CI-only step, since it has no local pre-commit equivalent.
+
+**Action required:** if you previously pasted a pack's `ci-gates.yml` block into your own workflow, re-paste it (or add the one new audit step by hand) to pick up the gate — these are exemplars, not live includes, so nothing updates automatically in an already-copied file.
+
 <!-- Future migration notes appended here. -->

From 2bc6e8c0af7bebb1574634bdc389f3cdc3922a42 Mon Sep 17 00:00:00 2001
From: Jordan Winters <dralgorhythm@users.noreply.github.com>
Date: Fri, 24 Jul 2026 14:54:42 -0500
Subject: [PATCH 2/2] docs(rules): security checklist truth-in-labeling by
 enforcement rung (U20/O7)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Now that commit 1 makes dependency scanning real, relabel the checklist so
mechanisms lead labels instead of the reverse:

- Every Security Checklist line is tagged with its actual Enforcement Ladder
  rung (1–4), keeping the existing parenthetical style.
- Secrets line: cites pre-tool-use-validator.sh's Bash redirect/heredoc
  coverage (not just Write/Edit) and Trivy's `secret,vuln` scanners —
  accurate post-hardening, rung 3+4.
- Dependencies line: parenthetical is now genuinely true — cites the repo's
  own Trivy vuln scan plus the four stack-pack audit gates, rung 4.
- The five adopter-only lines (input validation, SQL parameterization,
  auth/authz, encryption, error messages) get an explicit rung-1 marker:
  "adopter-level: enforce in your application/CI; this framework cannot
  check it" — no framework mechanism has ever checked these, so the bare
  checklist line was silently implying enforcement that didn't exist.
- Enforcement Ladder preamble sentence reworded to name the per-line rung
  tags, replacing "step 1" with "rung 1" for consistency with the rest of
  the repo's vocabulary (postmortem, land-the-plane, CONTRIBUTING.md).

File growth: 0 lines (85 -> 85) — every annotation extends an existing
line rather than adding a new one. rules-lines total unchanged (426/500).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 .claude/rules/security.md | 16 ++++++++--------
 CHANGELOG.md              |  1 +
 2 files changed, 9 insertions(+), 8 deletions(-)

diff --git a/.claude/rules/security.md b/.claude/rules/security.md
index 97bec4e..40effc2 100644
--- a/.claude/rules/security.md
+++ b/.claude/rules/security.md
@@ -11,17 +11,17 @@ This file states requirements. It does not, by itself, enforce them. Enforcement
 3. **Hooks** (`.claude/hooks/*`) — deterministic guardrails, not a security boundary. This repo's hooks are **fail-open by design**: if `jq` is missing or input can't be parsed, the check is skipped and the tool call proceeds. See `docs/hooks.md` for the full security model.
 4. **`permissions.deny` + CI** — boundaries. `permissions.deny` in `settings.json` cannot be overridden by any allow rule at any scope. CI checks (`.github/workflows/`) run outside the agent's control and block merges on failure.
 
-Only the mechanically checkable items on this page have enforcement below step 1. The checklist states what must be true; it is the hooks, `permissions.deny` entries, and CI jobs cited in each line's parenthetical that actually verify it.
+Only the mechanically checkable items on this page have enforcement below rung 1. The checklist below tags every line with its actual rung (1–4, matching the ladder above) and names the hook, `permissions.deny` entry, or CI job that verifies it; a rung-1 tag means prose only — nothing here mechanically checks it.
 
 ## Security Checklist
 
-- [ ] No hardcoded secrets or credentials (enforced via `pre-tool-use-validator.sh` hook secret detection + CI secret-scan job, Trivy `fs --scanners secret`, blocking)
-- [ ] All user input is validated and sanitized (enforce via input validation middleware)
-- [ ] SQL queries use parameterized statements
-- [ ] Authentication and authorization are properly implemented
-- [ ] Sensitive data is encrypted at rest and in transit
-- [ ] Error messages don't expose internal details
-- [ ] Dependencies are up to date and vulnerability-free (enforce via automated dependency scanning)
+- [ ] No hardcoded secrets or credentials (rung 3+4 — enforced via `pre-tool-use-validator.sh` hook secret detection across Write/Edit content and Bash redirects/heredocs, plus CI secret-scan job, Trivy `fs --scanners secret,vuln`, blocking)
+- [ ] All user input is validated and sanitized (rung 1 — adopter-level: enforce in your application/CI; this framework cannot check it)
+- [ ] SQL queries use parameterized statements (rung 1 — adopter-level: enforce in your application/CI; this framework cannot check it)
+- [ ] Authentication and authorization are properly implemented (rung 1 — adopter-level: enforce in your application/CI; this framework cannot check it)
+- [ ] Sensitive data is encrypted at rest and in transit (rung 1 — adopter-level: enforce in your application/CI; this framework cannot check it)
+- [ ] Error messages don't expose internal details (rung 1 — adopter-level: enforce in your application/CI; this framework cannot check it)
+- [ ] Dependencies are up to date and vulnerability-free (rung 4 — enforced via this repo's own Trivy `fs --scanners secret,vuln` CI job, blocking (trivially green today: no dependency manifests exist in this repo); every stack pack ships a matching native audit gate — `pnpm audit --audit-level high` / `uvx pip-audit` / `govulncheck ./...` / `cargo audit` in `.claude/templates/stack-packs/*/ci-gates.yml` — reaching the same CI rung in an adopter's own repo once merged)
 
 ## Data Routing
 
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 56fe2cf..7c57dcf 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -40,6 +40,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `.claude/hooks/gate-lib.sh` gains `gate_lib_timeout_bin`: the portable timeout-binary resolution (`timeout`/`gtimeout`/unbounded) `pre-commit-verification.sh` (U5b) used inline, now shared verbatim with the new `task-quality-gate.sh` — DRY, the same justified pattern `gate_lib_detect` itself set in U5a. `pre-commit-verification.sh` calls the new helper instead of resolving the binary inline; behavior is unchanged (verified: the full `30-gates-lane.sh` matrix passes unmodified against the refactored hook)
 - New `.claude/hooks/task-quality-gate.sh`, registered by **default** under `hooks.TaskCompleted` in `.claude/settings.json` (timeout 120s) — the framework's only true completion-time quality gate no longer ships disabled (unit U5c; decision record: `artifacts/adr_default_quality_gate.md`, Decision D1). Runs the same `gate-lib.sh`-detected gates `pre-commit-verification.sh` runs at commit time, but at task-completion time — a second, independent checkpoint. A red gate blocks via exit code 2 (the platform's documented `TaskCompleted` mechanism), naming the gate, its log (`.claude/hooks/.state/taskgate-<label>.log`, a separate namespace from the commit gate's), and the same anti-test-deletion reminder. A gate exceeding its `${CLAUDE_GATE_TIMEOUT_SECS:-90}`-second budget is treated as non-blocking (allows, with an honest stderr note) rather than the commit gate's `ask`, since a task completion should not hard-fail on slowness alone. `CLAUDE_SKIP_GATE_HOOK=1` — the same variable the commit gate honors — disables it, disclosed on stderr, never silent. No detectable stack or `jq` absent → silent allow. New `scripts/hook-tests.d/60-taskgate.sh` covers the red/green/no-stack/escape-hatch/jq-absent matrix against the existing `failing-project`/`passing-project` fixtures; `scripts/test-hooks.sh`'s `run_case` gains `exit2-stderr-contains:`/`exit0-stderr-contains:` expectation forms for TaskCompleted's exit-code-plus-stderr contract (documented in the runner's own header). `docs/hooks.md` gains a "Quality Gates (task-quality-gate.sh)" subsection beside the commit gate's, a Built-in Hooks table row, and its opt-in-recipes preamble is rewritten so "ships disabled by default" accurately scopes to the recipes that remain opt-in (the forced-eval skill-activation hook, `docs/examples/worker-budget-hook.sh`) instead of contradicting the newly-shipped default; `artifacts/adr_default_quality_gate.md` records the context, the decision, the rejected keep-opt-in-but-prominent alternative, the reversal path, and consequences (MIGRATION.md entry, below)
 - Real dependency scanning (O7/unit U20): `framework-invariants.yml`'s Trivy job now scans `fs --scanners secret,vuln` instead of `secret` alone, same blocking exit-code style — trivially green today since this repo carries no dependency manifests, but real for any fork/adopter that adds one. Every stack-pack `ci-gates.yml` (TypeScript/JavaScript, Python, Go, Rust) gains one native audit step — `pnpm audit --audit-level high` / `uvx pip-audit` / `govulncheck ./...` (via `go install golang.org/x/vuln/cmd/govulncheck@latest`) / `cargo install cargo-audit --locked` + `cargo audit` — each citing `.claude/rules/security.md`'s Dependency Safety section rather than restating it. Each pack's `golden-path.skill.md` "Gates Wiring" sentence is corrected from "CI runs the identical gates" to name the new CI-only audit step, since it has no local pre-commit equivalent. Closes the gap `research_ai_coding_frustrations.md`'s audit flagged: `security.md`'s checklist claimed "automated dependency scanning" that existed nowhere in repo CI or stack packs
+- Security checklist truth-in-labeling (O7/unit U20): every `.claude/rules/security.md` Security Checklist line now names its real Enforcement Ladder rung instead of mixing enforced and aspirational claims in one visual register. The secrets line's citation is updated to name `pre-tool-use-validator.sh`'s Bash redirect/heredoc coverage and Trivy's `secret,vuln` scanners (both landed in the prior entry); the dependency line's parenthetical is now genuinely true, citing that same Trivy vuln scan plus the four stack-pack audit gates; the five adopter-only lines (input validation, SQL parameterization, auth/authz, encryption, error messages) are marked "rung 1 — adopter-level: enforce in your application/CI; this framework cannot check it" instead of implying framework-level enforcement that never existed. The Enforcement Ladder preamble is reworded to name the per-line rung tags; file grows 0 lines (annotations extend existing lines, not new ones) — rules-lines total unchanged
 
 ## [4.0.0] - 2026-07-23