Skip to content

Detect double governance (two PreToolUse hooks) - #12

Merged
davidcrowe merged 1 commit into
mainfrom
feat/detect-duplicate-hook
Aug 14, 2026
Merged

Detect double governance (two PreToolUse hooks)#12
davidcrowe merged 1 commit into
mainfrom
feat/detect-duplicate-hook

Conversation

@davidcrowe

Copy link
Copy Markdown
Contributor

Warns when both the installer's settings.json hook and the marketplace plugin's hooks.json are registered — each calls /govern/tool-use on every tool call. Reports the plugin copy's version and prints both remediation commands; never edits hook config itself (#403). Verified firing against a real duplicated machine; bash -n clean. Refs davidcrowe/gatewaystack-connect#690.

Found in the wild 2026-08-14 — a v0.3.0 marketplace copy from April
still firing beside the current hook, doubling gateway load and so the
scale-out latency tail that turns a slow answer into a fail-closed deny
(gatewaystack-connect#690), from a code path nobody had read in four
months.

Detect and report, never delete: hook wiring is governance config and
that stays the operator's to change. Printing the exact command is the
whole job.
@davidcrowe
davidcrowe merged commit d035169 into main Aug 14, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant