What are enforcement hooks in this context?

Enforcement hooks are scripts designed to maintain repository integrity, such as preventing changes to finalized documentation or ensuring PRs follow specific standards.

How does the test-hooks skill verify script behavior?

It feeds specific JSON inputs into hook scripts via Bash and compares the resulting exit codes against expected values to determine if the hook is behaving correctly.

What specific guards can this skill test?

It tests ADR immutability, proposal lifecycle states, manifest integrity, PR references, review checklists, and release readiness advisories.

Why is testing these hooks important?

Testing ensures that your automated governance policies aren't accidentally broken during updates, maintaining the security and quality standards of your project.

What is the difference between a guard and an advisory?

A guard typically blocks an action with a non-zero exit code if rules are violated, while an advisory provides warnings but allows the process to continue with an exit code of 0.

Enforcement Hook Smoke Tests

Name: Enforcement Hook Smoke Tests
Author: alexnodeland

byalexnodeland

•

安全与测试

Validates governance and workflow enforcement hooks by simulating various input scenarios to ensure correct guard and advisory behavior.

The test-hooks skill provides a comprehensive testing suite for the Principled development framework's enforcement mechanisms. It automates the verification of critical guards and advisories, such as Architecture Decision Record (ADR) immutability, proposal lifecycle states, manifest integrity, and release readiness. By feeding both valid and invalid inputs into these scripts and checking for specific exit codes, the skill ensures that repository governance policies remain robust and function as intended, preventing regression in automated quality gates.

主要功能

01Verification of manifest integrity and PR reference advisories

02Automated smoke testing for ADR and proposal lifecycle guards

033 GitHub stars

04Detailed pass/fail reporting for every test case scenario

05Simulation of git and GitHub CLI commands for advisory testing

06Validation of both blocking guards (exit 2) and advisory warnings (exit 0)

使用场景

01Verifying that accepted ADRs are correctly protected from unauthorized modifications

02Ensuring GitHub PR and release advisories trigger correctly during development workflows

03Testing custom governance scripts against edge-case inputs before deployment

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add alexnodeland/principled test-hooks

For use in Claude.ai and ChatGPT

Download Skill