## At a glance

12New version-matrix entries (2.1.112–114)
6New deny patterns (rm + find family)
10deniedDomains baseline entries
7723Tests, all pass

## Security hardening

rm /private/{etc,var,home} — macOS symlink targets added to DENY_REGEX_PATTERNS hook
find -delete / -fprint — non-compound destructive flags rejected in auto-approve hook
sandbox.network.deniedDomains baseline — paste/exfil domains blocklisted settings

## Before / after — dangerous-command-blocker

− Only caught rm -rf / and rm -rf ~
+ Also catches rm -rf /private/etc, /private/var, /private/home (macOS symlink targets)
− find . -delete would auto-approve (no ; separator, not compound)
+ find . -delete falls through to manual approval via REJECT_PATTERNS

## Commits

`feat(hooks): block rm on macOS /private/{etc,var,home}`4e0ae64e
`fix(hooks): reject find -delete/-fprint in auto-approve-safe-bash` 8e0efa81
`chore: bump CC minimum to >=2.1.113` ba964ba8
`feat(settings): harden ork deny list + seed deniedDomains` f61ed6a9
`test(hooks): native-binary compat regression` 4b106a91
`docs(skills): CC 2.1.113 notes across 4 skills` 78e36b37
`test(hooks): sync cc-version-matrix test counts` 6a79848b
`refactor(tests): cc-2178-hooks-wiring → hooks-json-wiring + timeout fix` 98ce165d

## Key files

`src/hooks/src/pretool/bash/dangerous-command-blocker.ts` modified
`src/hooks/src/lib/bash-patterns.ts` modified
`src/hooks/src/lib/cc-version-matrix.ts`+12 entries
`src/settings/ork.settings.json` deny+domains
`tests/hooks/test-native-binary-compat.sh` new
`src/hooks/src/__tests__/e2e/hooks-json-wiring.test.ts` renamed
`src/skills/{security-patterns,bare-eval,mcp-visual-output,commit}/SKILL.md` docs

## Explicitly out of scope

Analytics parser for /loop wakeup marker — warrants its own PR with test coverage deferred
expected_runtime frontmatter on 36 agents — field with no code consumer is cruft deferred