Safety GateSAFE

CocoPlus is an Agentic Operating System for Snowflake Coco. It brings structured, multi-agent workflows to data engineering projects — covering everything from project initialization through spec, plan, build, test, review, and ship phases.

The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: "safety-normal"
description: "Set Safety Gate to normal mode. In normal mode, destructive SQL operations trigger a soft-gate confirmation prompt before execution. Recommended for development environments."
version: "1.0.0"
author: "CocoPlus"
tags:
  - cocoplus
  - safety-gate
---

Your objective is to set the Safety Gate to normal mode.

Before proceeding, verify that `.cocoplus/` exists.
If not: output "CocoPlus not initialized in this directory. Run `$pod init` to begin." Then stop.

Remove any existing safety mode flags (cross-platform using the Bash tool):
```
node -e "['safety.strict','safety.off'].forEach(f=>{try{require('fs').unlinkSync('.cocoplus/modes/'+f)}catch(_){}});console.log('Old flags cleared.');"
```

Create normal mode flag: create the file `.cocoplus/modes/safety.normal` with empty content using the Write tool.

Update AGENTS.md (keep ≤200 lines): replace Safety line with `- Safety: normal (WARN + confirm for destructive SQL)`

Output: "✓ Safety Gate set to NORMAL. Destructive SQL operations will require explicit confirmation before execution. This setting persists across sessions."

## Anti-Rationalization

| Shortcut / Temptation | Why It Fails |
|-----------------------|--------------|
| Keep strict/off flags while enabling normal | Mixed flags create unpredictable gate decisions |
| Skip warning semantics in the summary message | Developers may mistake normal mode for full blocking |
| Avoid updating AGENTS.md to save time | Runtime posture becomes opaque to the team |

## Exit Criteria

- [ ] `.cocoplus/modes/safety.normal` exists
- [ ] `.cocoplus/modes/safety.strict` and `.cocoplus/modes/safety.off` do NOT exist
- [ ] `.cocoplus/AGENTS.md` Safety line reads `- Safety: normal (WARN + confirm for destructive SQL)`
- [ ] Confirmation output states normal mode is active with warning + confirmation behavior

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

What the source does

Filesystem

none-observed

Network

none-observed

Shell

none-observed

Dependencies

pinned

Secrets in source

none-found

Findings (0)

No findings outside the package's declared scope.

Gates applied: no_behavioural_pass.