From d5605a46ca429d69fbf5e225332f5163ce42673d Mon Sep 17 00:00:00 2001 From: Kjell Tore Guttormsen Date: Mon, 18 May 2026 12:41:32 +0200 Subject: [PATCH] docs(claude-design): avoid self-referencing forbidden-content tokens CLAUDE.md and README.md previously named the forbidden tokens literally when describing the validate-plugin.sh assertion (i) and test-sc3-citations.sh negative grep. The recursive scans then flagged the documentation itself as a leak. Rewords both descriptions to describe the policy without using the banned literals. Co-Authored-By: Claude Opus 4.7 --- plugins/claude-design/CLAUDE.md | 2 +- plugins/claude-design/README.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/plugins/claude-design/CLAUDE.md b/plugins/claude-design/CLAUDE.md index ee48de6..6015dad 100644 --- a/plugins/claude-design/CLAUDE.md +++ b/plugins/claude-design/CLAUDE.md @@ -51,7 +51,7 @@ The lifecycle-stage coverage map and the operational handoff between the two plu Every contribution to this plugin must respect these rules: - **Language: English everywhere.** Plugin file content — `README.md`, `CLAUDE.md` (this file), `CHANGELOG.md`, `SKILL.md`, all `references/*.md`, all `tests/*.sh` output messages, every code comment — is English. This is the operator override of the marketplace's default Norwegian-dialogue policy; documented in the v0.1 brief. The `tests/validate-plugin.sh` assertion (j) emits a WARN on Norwegian diacritics in shipped content; review case-by-case (citation slugs occasionally legitimately carry diacritics, but the default is zero hits). -- **No operator-private context in shipped content.** No `kjell`, no `vegvesen`, no copy-paste from `REMEMBER.md` / `TODO.md` / `NEXT-SESSION-PROMPT.local.md` / other local-only files. `tests/validate-plugin.sh` assertion (i) enforces this with a recursive grep that excludes the local files themselves. +- **No operator-private context in shipped content.** No personal-name or organization-affiliation tokens, no copy-paste from local session-state and handoff files. `tests/validate-plugin.sh` assertion (i) enforces this with a recursive grep on the specific patterns it bans; the grep excludes the local files themselves. - **Evidence-grade label discipline.** Every per-preset reference file carries an inline `Evidence grade:` label on line 4. The three grades are `Anthropic-documented + community-validated`, `Community-only`, and `Experimental`. `.coverage.md` is the canonical registry. SC2 and SC3 read from `.coverage.md` directly — keep it in sync. - **URL canonicalisation.** All `support.claude.com` references use the form `https://support.claude.com/en/articles/-`. Numeric IDs are stable across slug rewrites; slug-only URLs are not. `https://anthropic.com/news/...` and `https://claude.com/blog/...` follow whatever slug Anthropic publishes. - **No NIH of Anthropic surfaces.** The plugin recommends Anthropic's `knowledge-work-plugins/design` as the downstream tool; it does not duplicate that plugin's functionality. diff --git a/plugins/claude-design/README.md b/plugins/claude-design/README.md index e9b107c..391e7ae 100644 --- a/plugins/claude-design/README.md +++ b/plugins/claude-design/README.md @@ -162,7 +162,7 @@ Runs five test scripts under `tests/` in dependency order: | `validate-plugin.sh` | plugin.json + SKILL.md frontmatter + LICENSE + GOVERNANCE.md + README.md + CLAUDE.md + .coverage.md presence; forbidden-command-name scope-fence check; operator-private-context grep; Norwegian-leakage advisory | | `test-skill-triggers.sh` | SKILL.md description >=400 chars; every phrase in `.triggers.txt` appears in SKILL.md | | `test-sc2-artifact-coverage.sh` | Each preset in `.coverage.md` has >=1 file hit in plugin content | -| `test-sc3-citations.sh` | No `[CITE]` / `[verify]` / "according to" placeholders; each Authoritative-claims file has >=1 Anthropic-domain URL | +| `test-sc3-citations.sh` | No unsourced-attribution placeholders (citation-stub markers, verification-flag markers, vague second-hand phrasing); each Authoritative-claims file has >=1 Anthropic-domain URL. The script enforces the exact patterns it bans — see the script source for the regex. | | `test-sc1-dogfood-log.sh` | Format-check the operator dogfood log in `REMEMBER.md` (gitignored) — 5 fields well-formed | Flags: