## kenryu42/cc-safety-net — v2.5.1…v2.5.2

_24 commits._

### Features
- **feat(policy): ignore project policy weakenings under CC_SAFETY_NET_PROJECT_TIGHTEN_ONLY** (aac3c67)
- **feat(gate): give every deny a fixed rule id** (755a78f)
- **feat(gate): allow find -delete under a workspace subdirectory** (c27c7cf)
- **feat(doctor): warn about ignored legacy inline rule configs** (662f10a)

### Fixes
- **fix(policy): measure project capability weakenings against the session level** (9e21cd0)
- **fix(gate): gate find -delete workspace scope on the paranoid rm rule state** (e0669e7)
- **fix(gate): judge rm -r targets the way rm -rf targets are judged** (29d04e3)
- **fix(gate): quote parallel job values the way GNU parallel does** (d0437e9)
- **fix(gate): analyze a multi-word parallel template as shell source** (e74a0ae)
- **fix(gate): analyze a quoted parallel command as shell source** (9fa33ad)
- **fix(gate): unwrap caffeinate as a built-in exec wrapper** (ba7e526)
- **fix(kimi): preserve comment newlines when removing inline hooks** (b50be0d)

### Backend
- **release: v2.5.2** (3db0a46)
- **Merge pull request #196 from kenryu42/test/share-secret-invariant-verdicts** (28c70fd)

### Tests
- **test(secret): decide each corpus command once per default mode in the invariant block** (2573184)
- **test: give the 5461-job parallel budget row room on Windows** (00f5c4d)
- **test: consolidate duplicate suites at production boundaries** (9335078)
- **test: give every release git test room to finish on Windows** (797d673)

### Docs
- **docs(readme): color the Blocked outcome red in the how-it-works diagram** (1e3c00d)
- **docs(readme): cut the README to pitch, CLIs, features, and quick start** (698846d)
- **docs(readme): trim the README to a landing page and fence it in AGENTS.md** (b2d3f45)

### Chore
- **ci: run the dependency audit after earlier full-check failures** (1265092)
- **ci: start packed-runtime with the source checks and audit dependencies last** (74acb5c)
- **build: ignore the unpatched http-cache-semantics advisory in bun audit** (15e4793)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/kenryu42/cc-safety-net?utm_source=github-action)._