7a43c175d0
Single PreToolUse router-gate hook replaces 5 existing hooks (chain-recommendation / classifier-match / graph-first / semgrep-security / override-limit) + override-vocab.json. Key principles: - Hard wall — no inline overrides, no substring-match vocab - User approval everywhere for router output (single + chains) - Direct invocations (slash-commands, explicit 'use X') bypass - Read-only baseline (Read/Grep/Glob/LS/TodoWrite/AskUser) always allowed - All decisions logged to router-gate-decisions.jsonl Observability migration: - Loses: override-usage.jsonl, hook-outcomes.jsonl Cut 11 - Gains: router-gate-decisions.jsonl + 3 new brain-retro tables - Etap 6 brain-retro adaptation included in epic Implementation 6-8.5 hours across 6 etap'ов. Risk: 7 preserved hooks lose their findOverride escape valves (except rationalization-audit) — explicit acknowledged risk. Driver: brain-retro #10 (override events 12->679 in 4 days), self-retrospect #2 (2/5 commitments broken in 6 hours). User-approved Section by section (1-5) via AskUserQuestion. cspell-words.txt += вокабуляр / Бypass / sess. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>