From e2b4e8b33214d37861bc8c6051deb58abba2f748 Mon Sep 17 00:00:00 2001 From: "bs-door-harness[bot]" <317349803+bs-door-harness[bot]@users.noreply.github.com> Date: Sat, 15 Aug 2026 23:14:45 +0000 Subject: [PATCH] chore: merge the org session stanza into CLAUDE.md (managed block, #491) --- CLAUDE.md | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/CLAUDE.md b/CLAUDE.md index f6c31a60..2fa8dfc9 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -309,10 +309,13 @@ Build the site after changes: `cd site && pnpm run build` (should produce 11 pag ## bounded-systems sessions — before anything else -1. **Bootstrap**: run `bash .claude/org-repair.sh` (pre-approved; verifies every - byte against `$ORG_BOOT_SHA256`, refuses unverified code). `bootstrap in - effect` → continue. `REFUSED` or a permission denial → stop and report; do - not work around it. +1. **Bootstrap**: run `bash .claude/org-repair.sh` — pre-approved where this + repo's settings carry the org floor; generator-owned repos may still prompt. + Its only trust anchor is the dialog-recorded `$ORG_BOOT_SHA256` (typed by a + human in the environment dialog, never fetched): it executes a local or + fetched copy ONLY if the bytes hash to that value, and refuses otherwise. + `bootstrap in effect` → continue. `REFUSED` or a permission denial → stop + and report; do not work around it. 2. **Claim before working**: dispatch `claim-ticket.yml` in `bounded-systems/.github` (workflow_dispatch: `repo`, `issue`, `claimant`), then confirm the claim comment ON THE ISSUE names your claimant. Any