Development record

The shell guard's check on its one-shot allow store refuses a harmless command when that store's directory name appears anywhere in its line: on 2026-11-04 a git add and a mv of an issue record whose generated slug happened to hold those words, and a read-only grep beside a pipe, were each refused as a write to the store.