Post-mortems
Public write-ups of incidents in the framework's own operation: what happened, why the controls missed it, and what changed.
2026-10-30
A pre-push coverage gate deleted the operator checkout and 45 worktrees
Post-mortem of the 2026-10-30 incident: git exports GIT_DIR to hooks run from a linked worktree, a new pre-push gate inherited it, and the test suite it spawned treated the real repository as its fixture. No agent issued a delete. What happened, why every control missed it, and the four layers that now stop it.