docs(claude-native-practice): bring the practice pages current to Claude Code 2.1.302 - #1234

…P1 at 887f929)

The headless-sdk row (agent-sdks.md:9 and its slots.json mirror) offered CLAUDE_CODE_FORK_SUBAGENT=0
as an alternative to keeping Agent out of --tools for a worker that must not fan out. [email protected]
L35 says the variable turns off fork subagents (subagent_type "fork") only, so a named subagent can still
fan out. The row now keeps Agent out of --tools as the control and describes the toggle as fork-only.

tests/test_native_practice_fork_toggle.py pins the corrected text (it fails on 887f929 with only the
test overlaid) and the page's mirror of the row. The two files' evidence rows are refreshed through
scripts/host_receipts.py register_file.

Source: anthropics/claude-code CHANGELOG.md at tag v2.1.302, line 35.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

…bel the slot manifest

A fold on 728141f that applies the PR #1234 diffs of the command center's owed-checks report
(command-center/claude-native/OWED-CHECKS-2.1.302-20261017.md, written 2026-10-17T02:43:07Z). Each
page edit is mirrored in its slots.json row. Rule source: anthropics/claude-code CHANGELOG.md at tag
v2.1.302, cited as [email protected] L<n> with the release each line sits under.

- native-clients.md:53-54, settings-permissions (report F1.1, F1.2): L245 (2.1.299) fixes rm
  prompts on shell -c scripts; it does not change rule evaluation. The evidence and the note now
  cite L373 and L280 for rule evaluation and L245 for the built-in prompt. The owed audit of mcp__
  rules against L373, L280 and L270 (2.1.299) replaces the owed sentence: no rule relied on prefix
  matching, so none changes.
- workers.md:13, subagent-definitions (F2.1, F2.2): the note said four host copies differ from
  adoption/agents/claude and four host-only definitions exist. diff -rq of adoption/agents/claude
  and of .claude/agents against ~/.claude/agents exits 0, 11 files each, so the claim was false at
  728141f. The owed audit of the tools: lists against L374 (2.1.299) is recorded: 25 whole-name
  grants from six servers, and no list changes.
- token-efficiency.md:50-51, output-compression (F3.1): the owed check of the rtk hook against the
  updatedInput validation of L189 (2.1.300) is recorded (rtk-ai/[email protected]
  src/hooks/hook_cmd.rs:648-651 replaces only command), and L916 (2.1.290) joins the evidence.
- mcp-surfaces.md:12-13, mcp-config-tool-search (F4.1): the owed measurement of the up-front
  context at the 4,096-character default of L469 (2.1.296) is recorded, beside L377 (2.1.299);
  L602 (2.1.295) and L1926 (2.1.280) join the evidence.
- observation-inference.md:13, usage-cost-monitoring (F5.2): the note said each new field is to be
  added to the collector's allowlists. It now says neither collector profile keeps the five event
  fields of L126 (2.1.300), L75 and L76 (2.1.301) and L18 (2.1.302), and that the span attributes
  of L130 (2.1.300) need no allowlist entry because the templates export no Claude traces.

The six diffs were applied with git apply after git apply --check (exit 0 each). Each replaced
evidence or notes line occurs once at 728141f; the "]," lines that the slots.json hunks also rewrite
are placed by their context. Each result has the sha256 the report proposes.

Label fix: current_decision_source.sha256_when_labeled in claude-native-slot-manifest.json now names
the sha256 of this commit's slots.json, taken from sha256sum. This corrects 728141f, which changed
slots.json without moving the label, so tests.test_native_practice_snapshot_provenance
(test_the_label_names_the_shipped_slots_file) fails there; the CC had capped its test selection for
that commit. differs_from_this_snapshot_in is unchanged. Of the fields the manifest exports, the fold
changes only evidence, in settings-permissions, output-compression and mcp-config-tool-search, and
the manifest already lists all three. Notes are not exported.

The manifests/evidence.json rows of the seven changed files were refreshed with
scripts/host_receipts.register_file; scripts/evidence_manifest.py --write left the file unchanged.

Checks, run with the fold applied before this commit: python3 scripts/validate.py rc 0;
python3 scripts/evidence_manifest.py --check rc 0. The test modules that name a changed path (grep
-rl over tests/ for each changed file's basename, claude-native-practice and slot-manifest, not
capped) are 72; each ran on its own (unittest counted 4,099 tests). 64 pass, among them
tests.test_native_practice_snapshot_provenance (9 tests) and tests.test_native_practice_fork_toggle
(2). The other 8 fail from this host's environment, not the fold; at 728141f the only test that
failed in CI was the label test. Four fail the same way on the untouched 728141f:
tests.test_local_pages_overview (the 2 ComposerTests failures);
tests.test_local_pages_architecture_read_boundary and tests.test_local_pages_architecture_sources
(26 errors each, no /usr/bin/zstd); and one test of tests.test_token_e2e_grader (git clone --local
cannot hardlink across filesystems). The other four need jsonschema, which this host's python3
lacks: tests.test_component_matrix, tests.test_final_admission, tests.test_final_stack and
tests.test_gap_closeouts. With the fold they pass in a Python 3.12 venv built from
.github/requirements-ci.txt, as do tests.test_lane_packets, tests.test_paired_runs_results and
tests.test_saturation_ledger, whose jsonschema tests had skipped.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

… each pinned by a test

Fold 4 on 1af2052. Both reads of 1af2052 are done; this commit fixes the four findings the command
center listed from them. Each correction has a regression test that fails, with an AssertionError,
on the text it replaces.

1. P2: F5.2 had no regression test (observation-inference.md:13, slots.json:2107; F5.2 of the
   command center's owed-checks report, OWED-CHECKS-2.1.302-20261017.md). The new class
   UsageCostMonitoringSpanAttributeTests in tests/test_native_practice_owed_check_corrections.py
   checks that the row and the page:
   - lack "is to be added to the collector's tool-name and privacy allowlists";
   - carry "The span attributes need no allowlist entry" and "To be tested, with Claude traces on".
   It also checks that the test line the note cites (tests/test_observability_tool_names.py:178)
   still asserts OTEL_TRACES_EXPORTER "none". Run with only the test file overlaid on 728141f,
   each of its 3 tests fails. They pass at 1af2052, where fold 2 made the correction, and at this
   commit.

2. P3: the L916 sentence ([email protected] L916, 2.1.290) left out F3.2 (token-efficiency.md:51,
   slots.json:785). One sentence is added to the output-compression note, written to the row and
   the page from one string. It says three things:
   - rtk 0.51.0 rewrites every npx command (rtk-ai/[email protected] src/discover/rules.rs:120);
   - none of the 19 `npx *skills` deny rules in the user settings has an `rtk npx` twin;
   - PR #1238 adds the 19 twins to the template.
   The counts come from an exact-key read of permissions.deny at 2026-10-17T04:41:38Z (19 rules, 0
   twins). The repository's own matcher (ProfileTemplateSettingsTests.bash_rule_matches) finds no
   deny rule for six rtk spellings of the skills CLI there, and one for the plain spelling. PR
   #1238's template holds 19 rules and 19 twins at its head 6bf2eb5.
   OutputCompressionRtkNpxGapTests checks that the row and the page carry the sentence after the
   force-push one; both checks fail on 728141f and on 1af2052. It also checks that the template
   still holds 19 `Bash(npx *skills` rules, which stays true after #1238. The slot manifest's
   sha256_when_labeled is the sha256 of this commit's slots.json, taken from sha256sum.
   differs_from_this_snapshot_in is unchanged because notes are not exported
   (test_no_other_exported_field_differs passes).

3. P3: fold 3's "current locator `:1649`" in docs/decisions/2026-10-09-claude-code-gap-resolution.md:174
   would go stale. As the command center ruled, the record is back to main's bytes (git checkout
   origin/main; git diff --quiet origin/main exits 0), because its citation is already pinned to the
   search revision 8c95a50. The evidence row fold 3 added for it is removed; the record has none on
   main. DispositionCitationTests in tests/test_upstream_surface_watch.py already checks this record
   against references that move. It gains two tests:
   - the routines sentence keeps `reference/slots.json:1625` and has no "current locator" (fails on
     1af2052; passes on 728141f and here);
   - line 1625 is "Cloud routines" at 8c95a50 (skipped when the history lacks that revision).

4. P3: the slot manifest's note (claude-native-slot-manifest.json:69) named six slots whose notes
   differ from the snapshot when 21 do. It also named three of the five top-level keys that differ:
   checked_at and client_version differ too, since this PR's first commit. The sentence now names
   fields, not slots: "Slot fields this export does not carry also differ (notes, primary_sources,
   primary_sources_total and github-action's retired block), and so do the top-level checked_at,
   client_version, cross_client, selection_rule and status_values." A new test in
   tests.test_native_practice_snapshot_provenance's BaselineHistoryTests,
   test_the_note_names_what_differs_beyond_the_exported_fields, builds that sentence from the
   baseline and current slots files. On failure it prints the sentence to write; it fails on
   728141f and on 1af2052. The note's other counts hold at this commit: the 2.1.302 update changed
   the evidence of eleven slots and four routes.

Evidence rows: manifests/evidence.json is 450608c's copy, with rows registered through
scripts/host_receipts.register_file for the six files this fold changes and for the fold-3 test.
Against 1af2052 it drops the record's row and refreshes those six. scripts/evidence_manifest.py
--write left it unchanged.

Checks, run with fold 4 in the tree before this commit:
- python3 scripts/validate.py rc 0; python3 scripts/evidence_manifest.py --check rc 0.
- The five acceptance modules, each by name, all OK:
  tests.test_native_practice_ledger_obs_sched (8 tests), tests.test_native_practice_ledger_rows_1 (3),
  tests.test_native_practice_ledger_rows_tokeff_new (7), tests.test_native_practice_snapshot_provenance
  (10) and tests.test_skills_manifest (38).
- The test selection is not capped: grep -rl over tests/ for the basename of every path this PR or
  this fold changes, plus claude-native-practice and slot-manifest, gives 76 modules.
  - 75 ran one at a time and unittest counted 4,324 tests; 66 modules pass.
  - tests.test_runtime_worker_openhands_push_gate, which reads the committed HEAD, runs after this
    commit.
  - The other 9 fail because of this host, not the fold; CI passed every validate shard at 450608c.
- These fail the same way with the tracked tree at 450608c, as measured for fold 3:
  - tests.test_upstream_surface_watch: the same 4 CachedArtifactTests, which read this host's
    surface-watch cache. Its new record tests pass.
  - tests.test_local_pages_overview: the 2 ComposerTests.
  - tests.test_local_pages_architecture_read_boundary and tests.test_local_pages_architecture_sources:
    26 errors each, no /usr/bin/zstd.
  - one test of tests.test_token_e2e_grader: git clone --local across filesystems.
- tests.test_component_matrix, tests.test_final_admission, tests.test_final_stack and
  tests.test_gap_closeouts need jsonschema, which this host's python3 lacks. With fold 4 they pass in
  a Python 3.12 venv built from .github/requirements-ci.txt, as do tests.test_lane_packets and
  tests.test_paired_runs_results.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

…e row; scope the rtk npx sentence

Fold 5 on 609d3e1. Both reads of 609d3e1 requested changes, and the higher rating governs. This
commit fixes the two findings the command center listed.

1. P1 (Muse): the command center corrects ruling 3 of fold 4.
   - docs/decisions/2026-10-09-claude-code-gap-resolution.md stays at main's bytes, but its
     manifests/evidence.json row must not be dropped.
   - Fold 3 (1af2052) registered the record. The PR-registration check requires a row for every
     path a PR commit registered (scripts/validate.py:776 and :786-788). CI runs it with the PR
     base and the previous heads (.github/workflows/validate.yml:173-178). Only a deleted file may
     lose its entry (docs/lanes.md:119-127; the fixtures at tests/test_registry_rows.py:68-84 and
     :112).
   - At 609d3e1, python3 scripts/validate.py --registration-base 1af2052 and
     --registration-base f00d478 each exited 1 with "docs/decisions/2026-10-09-claude-code-gap-resolution.md:
     required registration row missing", and CI's validate-shard-0 failed.
   - scripts/host_receipts.register_file restores the row with the reverted file's current sha256
     and bytes (15899 bytes; the file is unchanged against main).

2. P3 (Claude and Muse): "Every npx command is rewritten too" is false at rtk v0.51.0
   (rtk-ai/rtk@e001f773) for an npx command that a deny rule matches.
   - rtk's Claude hook checks the original command against the Bash deny rules first
     (src/hooks/permissions.rs:84-90) and skips the rewrite on a match
     (src/hooks/hook_cmd.rs:688-691); only the remaining npx commands reach the npx rule
     (src/discover/rules.rs:120).
   - The sentence now limits the rewrite to npx commands that no deny rule matches, and says that
     the twins in #1238 cover the `rtk npx` spelling, which rtk's own deny check does not cover.
   - The edit script reads the sentence from the test's CLAUSE and writes it to
     token-efficiency.md:51 and slots.json:785. The module docstring is scoped the same way.
   - With only the test file overlaid on 609d3e1,
     OutputCompressionRtkNpxGapTests.test_the_row_names_the_gap_and_its_fix and
     test_the_page_carries_the_row each fail with an AssertionError; both pass here.
   - The slot manifest's sha256_when_labeled is the sha256 of this commit's slots.json, taken from
     sha256sum. differs_from_this_snapshot_in is unchanged, because notes are not exported.

Evidence rows: register_file refreshed the rows of slots.json, token-efficiency.md, the slot
manifest and the test module, and restored the record's. scripts/evidence_manifest.py --write left
the file unchanged.

Checks, run with fold 5 in the tree before this commit:
- python3 scripts/validate.py rc 0; python3 scripts/evidence_manifest.py --check rc 0. The
  registration checks read the committed head, so validate.py with --registration-base origin/main
  and with --registration-base 1af2052 runs after this commit; the PR body records the exits.
- The five acceptance modules all pass: tests.test_native_practice_ledger_obs_sched (8 tests),
  tests.test_native_practice_ledger_rows_1 (3), tests.test_native_practice_ledger_rows_tokeff_new (7),
  tests.test_native_practice_snapshot_provenance (10) and tests.test_skills_manifest (38).
- The uncapped selection is the same 76 modules as for fold 4. 75 ran before the commit, in two
  streams, with tests.test_saturation_ledger alone afterwards; unittest counted 4,324 tests.
  - 66 pass, among them tests.test_registry_rows, tests.test_validate and tests.test_host_receipts.
  - tests.test_runtime_worker_openhands_push_gate runs on the committed head.
  - The other 9 are the environment failures recorded for fold 4. Each fails the same way at the
    previous head, or passes in the CI-requirements venv: four CachedArtifactTests, two
    ComposerTests, no /usr/bin/zstd (two modules), one cross-filesystem clone, and four modules
    that need jsonschema.

Co-Authored-By: Claude Opus 5.5 <[email protected]>