Skip to content

Catch spaced +91 numbers and update the docs for 0.4.0 - #11

Merged
prathikcannotcode merged 1 commit into
masterfrom
fix/review-followups
Nov 11, 2026
Merged

prathikcannotcode merged 1 commit into
masterfrom
fix/review-followups

Conversation

@prathikcannotcode

Copy link
Copy Markdown
Owner

Follow-ups from an independent check of master at eb1fbd5, after PRs #8, #9 and #10 merged.

Guard

  • +91 98765 43210 and +91-98765-43210 passed the personal-data filter, though the README says it blocks +91 numbers. Lowercase PAN passed too. All three block now. Four new asserts in guardrails.test.mjs, including a Mumbai landline that must still pass.

Docs

  • README's accuracy section said "One blind run so far", and README and SECURITY.md said nothing had measured sector detection. tamarind-lend (Add tamarind-lend, a fintech blind fixture, with its first scored run #9) did. The table now shows both runs, with tamarind-lend's caveats: a subagent of the fixture's own session audited it, and a commit subject hinted at the gaps.
  • Quick start names Claude Code 2.1.295 as the minimum. Below that, onFailure: "block" is ignored, and a guard that fails to start lets the write through.
  • The plugin section no longer says all 20 skills work in any project. /vigil:audit and /vigil:onboard write assessments/ and company-profile/ into whatever project is open, unguarded, and /vigil:export needs the workspace's npm scripts.
  • SECURITY.md says agents can edit the skills, AGENTS.md, CLAUDE.md and .github/.
  • The "Last verified" line notes the 11 November catalog rows.

Release

  • package.json, plugin.json and CITATION.cff move to 0.4.0, and the Unreleased section becomes the 0.4.0 entry. Tag v0.4.0 after merge.

Checks

  • npm test: 26 pass, 0 fail, 1 skipped on Windows (CI runs it on Linux).
  • npm run validate -- --strict: 0 errors.

Not tested: claude plugin marketplace add and claude plugin install. The Claude CLI wasn't available, so run them once before announcing the plugin.

🤖 Generated with Claude Code

The guard let +91 98765 43210, the usual written form, and lowercase PAN
through, while the README said it blocked +91 numbers. Both block now,
with tests, and a landline still passes.

The README and SECURITY.md still said no run had measured sector
detection after tamarind-lend did. The accuracy table now covers both
blind runs with tamarind-lend's caveats, Quick start names Claude Code
2.1.295 as the minimum, and the plugin section stops claiming every
skill works in any project.

Versions move to 0.4.0, and the Unreleased section becomes its entry.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@prathikcannotcode
prathikcannotcode merged commit 0641b66 into master Nov 11, 2026
1 check passed
@prathikcannotcode
prathikcannotcode deleted the fix/review-followups branch November 11, 2026 15:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant