admin
0404f60e6a
gates / gates (push) Successful in 10s
The workspace root is already documented (workspace-CLAUDE.md, the workspace-root CLAUDE.md 'stay inside it') and work drifted into a home directory anyway. A rule that has failed once as a reminder is not fixed by writing it down again, so it is now asserted where it can bite. A push is the right trigger: throwaway clones under /tmp for probes and red-proofs never push, so nothing legitimate breaks. Symlinks are resolved on both sides; an absent workspace root SKIPS the check rather than failing it, so this cannot brick a legitimate clone on another machine. The only bypass is the documented --no-verify, whose use is already reportable. Identical in all four repos.