docs(odd): track pinned path-consent safety correction chain

[dnlrsls]

PR Type

• Documentation only (type:docs)

Summary

Draft integration tracker for three focused correction slices; DO NOT MERGE. Review children, not inherited #1610 work.
The dependency branch is an immutable upstream mirror of the approved pin, not the contributor's branch. This tracker initially targets that mirror rather than main to keep the tracker diff honest.

Changes

File	Purpose
odd/tasks/path-fence-1659-1660.md	Exact specs, authorized scope, evidence and work-unit plan

Chain Context

Field	Value
Chain	path-fence safety follow-ups
Tracker	This draft PR
Position	tracker
Base	feat/path-fence-1610-base
Depends on	#1610, exact pin162c9bda
Follow-up	#2049 filesystem -> #2050 launcher -> #2051 security
Review budget	64 /400
Starts at	approved #1610 pin
Ends with	tracking only; children require review/integration

main <- #1610 (open)
  pinned mirror feat/path-fence-1610-base
    📍 tracker feat/path-fence-safety (draft/no-merge)
      filesystem -> launcher -> security

Scope and autonomy

Includes tracking; excludes inherited foundation review, child integration and merge. CI is not assumed green. Structural readback and clean diff observed; rollback removes only the feature document.

Linked Issue

Closes #1660
Related: #1659 (primary fix is inherited from #1610, not authored here). Both issues retain status:approved.

Verification limits

• Windows local affected-file seam: 178 pass, 0 fail, 8 existing skips. Typecheck: no regressions (187 recorded diagnostics).
• Independent filesystem unit: 38/38. Independent launcher: 122 pass/1 isolation failure/8 unchanged skips; a separately authorized single-case recheck passed1/1 after removing ancestor-dependency contamination. This is not rewritten as a full-file-green verifier run.
• Initial full pnpm test was stopped with181 provisional failure records, without a final summary. Remaining corpus is unclassified; no blanket inherited-failure or full-suite-green claim.
• Local POSIX-host execution was not run; Ubuntu CI verify has now succeeded. Actual Windows console Ctrl+C E2E remains unexecuted. Windows interruption uses a modeled event on the real launcher, with real child termination.
• Provider contract, runtime harness and generated-module checks passed locally. Remote CI completed: tracker docs(odd): track pinned path-consent safety correction chain #2048, filesystem test(fixtures): isolate unreadable history and repository discovery #2049 and security fix(safety): deny unavailable confirmation capability and pin schema coverage #2051 green (including their package/packed-install jobs). Launcher test(launcher): make Windows execution and interruption fixtures faithful #2050 fails macOS cleanup in tests/gentle-agents.test.ts:5430 (ENOTEMPTY); its other jobs pass. Cause not classified; no retry or source correction. Chain integration remains blocked.
• No shell scripts or skills changed; shellcheck/skill-change validation are N/A.
• Draft/no-merge: fix(safety): require consent for path tools outside the session worktree (#1305) #1610 is OPEN and moved to e262890dcb5f69ff6b7289f7baa491ec72a9bc03; this chain retains the explicitly approved pin 162c9bda89242a73f5ed55d7383a8d96ad19660d. Reconcile the base before integration.

Contributor Checklist

• Linked approved issue and added exactly one matching type label.
• Conventional commits; no Co-Authored-By trailers.
• Tests/docs accompany their behavior; no production launcher/history/registry changes in fixture units.
• Modified-shell/skill checks: N/A, none modified.
• Complete CI green and base reconciled before merge.

Delivery status

#2048 → #2049 → #2050 → #2051 are published draft slices. #2050 CI is blocked; do not integrate/merge. Needs maintainer decision on bounded macOS cleanup diagnosis. Original pin remains unchanged; #1610 base reconciliation is also outstanding.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}