r1ckshot/team-marketplace

PreToolUse hook that blocks shell writes to .env* files (redirect, tee, cp/mv, sed -i, $IFS-obfuscated spaces, node -e/python -c inline writes). Permission deny rules only see Write/Edit tool calls, not a shell writing the file itself.

Keeps a numbers-driven product honest while it grows: /scaffold-rule walks one figure from an allowlisted source to a test, /scaffold-scenario drives a whole vertical slice through all ten registration points, the scenario-tests skill derives benchmarks by hand and breaks the code on purpose to prove they hold, feature-ship gates the commit, and a PreToolUse hook refuses layer-crossing imports at write time instead of after the test run.