#329 Prove parity cell: gated delete of unrecoverable gitignored data (AN-1) on Claude Code

[Anonymous]

Originally created by: fu351

The parity matrix shows "Deleting unrecoverable gitignored data is gated (AN-1)" as ◻ on every host. There's no proven sibling yet anywhere, so this starts from the engine test, not a host test.

What to do

1. Read the engine-level proof: tests/unit/test_rule_commands.py::test_unrecoverable_gitignored_data_delete_requires_auth. It drives DestructiveCommandRule directly with commands like rm data/app.db, rm .env, rm config/server.key and asserts AUTH plus ReasonCode.destructive_command.
2. Write the Claude Code host-hook equivalent in tests/unit/test_hosthook_claude_pre.py, mirroring the wiring of test_destructive_bash_is_denied in the same file: call _pre("Bash", {"command": "rm data/app.db"}, cwd). The default headless prompter resolves an AUTH to permissionDecision == "deny" (see test_webfetch_to_external_url_triggers_auth for the same shape) — assert that, and also assert "[AUTH]" (not "[BLOCK]") is in the reason so the test can't pass on the wrong verdict.
3. Mark it: @pytest.mark.guarantee("gitignored-delete-gate", host="claude-code")
4. Mutation-check it (the bar for a ✅, not just a green test): temporarily comment out the unrecoverable-data branch in DestructiveCommandRule (src/doberman/engine/rules/commands.py), confirm your test goes red, revert. Note "mutation-checked" in the PR.
5. Regenerate the matrix: python -m tools.parity.generate_parity (CI's --check fails if you skip this).

Directory deletes stay out of scope — AN-1 only covers a delete naming a file matching *.db/*.sqlite*/.env/*.key. A small, concrete first parity proof.

[Anonymous]

Ticket changed by: fu351

• status: open --> closed