autonomic-bot d38a695fa3 feat(1e): HC2 repo-local approval allowlist (default-deny) + discovery gate ...

- tests/repo-local-approved.txt (empty ⇒ default-deny); CCCI_REPO_LOCAL_APPROVED_FILE override.
- discovery: repo_local_approved()/_gated() centralize the gate; resolve_overlay_op + generic_op
  (HC3 additive split); custom_tests/install_steps/pre_op_hook all honor the gate.
- unit tests rewritten for approved-vs-not + the generic floor.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-28 02:55:58 +01:00

..

test_discovery.py

feat(1e): HC2 repo-local approval allowlist (default-deny) + discovery gate

2026-05-28 02:55:58 +01:00