2026-06-04 · judged vs CC 2.1.162 / v8.18 · this PR = chore/m119-closeout · playground gate artifact
9
Open issues
3
Close (done/N-A)
2
Drop (obsolete)
3
Re-scope/defer
1
Real work (this PR)
This PR does the only real code work — #1497 (5 hooks fail-soft on array/object tool_input.file_path),
and closes the 3 already-resolved issues. After thorough review, M119 had one genuine code task; the rest is
already done, obsolete, or a verified non-issue.
Per-issue verdict
The #527 correction (why verification matters)
The reassessment first flagged #527 (fork-PR security) as “do now”. Verification flipped it to already-handled:
no workflow uses pull_request_target, so GitHub withholds repository secrets from fork PRs onpull_request by default. On top of that, claude-review/ultrareview are label-gated
(maintainer-only) and docs.yml degrades to a local stub on the fork 401. No code change — closing with rationale.
What this PR ships / closes
CODE (1)#1497 5 skill hooks now guard tool_input.file_path with
typeof === 'string' — fail-soft on array/object input (defense-in-depth; floor
2.1.148 ≫ the 2.1.85 runtime fix, so prod was already safe). 8579 unit + 11 property tests green.
CLOSES (3 — done / non-issue)#2095 docs/site drift — fixed by #2198 this session (resync + drift gate)
#925 CI Phase 2 — 2600t category budgets already exist + tested
#527 fork-PR security — verified non-issue (no pull_request_target; secrets withheld from forks)
RE-SCOPE / DEFER (3 — commented on issue)#924 CI Phase 1 — budget test exists; trim to index-size + stale-count remnants
#1473 spawn-count warn — reassess vs CC 2.1.152 native /usage per-subagent breakdown
#1471 /clear topic-shift — capacity /clear ships; /recap+compaction lowered urgency
DROP — OBSOLETE (2 — commented, recommend close)#926 CI Phase 3 progressive-loading — never built, moot post lean-prompt (2.1.154)
#1472 Monitor loop advisory — CC harness now natively blocks long foreground sleep
Reassessment via /ork:brainstorm (evaluation mode) + Explore current-state check, verdicts grounded in file:line evidence.
#1497 downgraded from "blocker" to defense-in-depth (runtime floor guarantees string types). #527 corrected from "do now"
to "already-handled" after checking GitHub's fork-secret model. Built off main @ 8.18.1.