Skip to content

PREFLIGHT_FLOOR_KINDS

const PREFLIGHT_FLOOR_KINDS: readonly ["script-env-leak", "open-world"]

Defined in: _worktrees/docs-release/gaunt-sloth/packages/core/src/core/shell/raterVocabulary.ts:124

The deterministic preflights that can floor a command at destructive, in the FIXED order import(‘./rater.js’).preflightFloorFinding evaluates them.

  • script-env-leak — an interpreter invocation expanding an ALL_CAPS environment variable into its arguments. §11.1b’s narrowing of the attack clause rests on this arm firing.
  • open-world — (§4.6) a host literal in a fetch/transfer position. Its reason NAMES THE HOST, so, unlike the other arm’s, its text varies per command: identify this arm by its kind, never by matching its prose.

They are arms of a single decision rather than independent checks, and the outcome is identical whichever fires — the order is the order of the explanation a human reads. Anything that attributes a floored decision to a mechanism must key on this list, so that a preflight added to the gate cannot go unattributed.