PREFLIGHT_FLOOR_KINDS
constPREFLIGHT_FLOOR_KINDS: readonly ["script-env-leak","open-world"]
Defined in: _worktrees/docs-release/gaunt-sloth/packages/core/src/core/shell/raterVocabulary.ts:124
The deterministic preflights that can floor a command at destructive, in the FIXED order
import(‘./rater.js’).preflightFloorFinding evaluates them.
script-env-leak— an interpreter invocation expanding an ALL_CAPS environment variable into its arguments. §11.1b’s narrowing of theattackclause rests on this arm firing.open-world— (§4.6) a host literal in a fetch/transfer position. Its reason NAMES THE HOST, so, unlike the other arm’s, its text varies per command: identify this arm by itskind, never by matching its prose.
They are arms of a single decision rather than independent checks, and the outcome is identical whichever fires — the order is the order of the explanation a human reads. Anything that attributes a floored decision to a mechanism must key on this list, so that a preflight added to the gate cannot go unattributed.