907 B
ADR 0001: standalone runtime and trusted policies
Status: accepted, 27 August 2026
pi-native-hooks is one Pi package and extension. It loads only direct-child TypeScript policies from the current OS user's ~/.config/pi-native-hooks/policies, after owner, mode, regular-file, and no-symlink checks. Policies are trusted executable code with Pi's authority; validation is not a sandbox.
Analyzer execution is package-owned and coalesced by effective analyzer key. The MVP adapter is ast-grep. Verification is exact-command, revision-scoped evidence, persisted on the active session branch. Pending armed checks force an agent_settled follow-up; a reasoned agent waiver is visible and expires on the next relevant mutation.
Node-native erasable TypeScript is required on Node >=22.19. Unsupported syntax fails that policy with an actionable load error; no implicit transpiler fallback is used.