statecraft.
Catalog/statecraft-cli

064-protected-home-entries

The protected set is the product home's entries, not the operator's worktrees

Lifecycle approvedImplementation completeVerification unknownQualification unknown

Amends spec 004 section 3.18 rule 2. The protected roots a confinement takes from the product home are the home's top-level entries, every one except a closed operator list (worktrees and Finder's .DS_Store), rather than the home as one root. An unknown or later entry is still protected. The self-test's sentinel and socket directory live in one fixed protected entry. A multiply linked file in a protected entry still refuses.

Read the full pinned specification ↗

Relationships

Claimed units

  • extends
    {
  "nature": "additive",
  "spec": "002-environment-lifecycle",
  "unit": {
    "kind": "directory",
    "path": "crates/statecraft-home/"
  }
}
  • extends
    {
  "nature": "additive",
  "spec": "006-command-surface",
  "unit": {
    "kind": "directory",
    "path": "crates/statecraft-cli/"
  }
}

Source headings

  1. 064: The protected set is the product home's entries
  2. 1. Purpose
  3. 2. Territory
  4. 3. Behavior
  5. 3.1 The protected roots
  6. 3.2 What the alias scan still refuses
  7. 3.3 A stable record
  8. 3.4 What is accepted
  9. 4. Out of scope
  10. 5. Resolved decisions
  11. Verification

Frozen anchors

No frozen anchors declared.