Security Hook Override — Dispatcher Decision Explorer

PR #1974 · run-hook.mjs · Toggle the inputs and watch whether a security hook listed in .claude/hook-overrides.json is protected or silently disabled — before vs. after the fix.

Inputs

Hook being dispatched security-critical Listed in hook-overrides.json disabled[] someone tried to turn this hook off Bundle dist/*.mjs available OFF = fresh CI checkout / partial install

Dispatcher path

Models the early-probe hoist from src/hooks/bin/run-hook.mjs. The bug: when the bundle can't load, the dispatcher short-circuits to SILENT_OK before the post-bundle override check — so a security hook in disabled[] is honored silently. The fix runs the SECURITY_HOOKS probe first.
See issue #686 · this is a self-contained playground; no network calls.