hook-enforcement-audit

What problem does it solve?

Audits a Claude Code hook system (settings.json + hook .js files) to identify where enforcement infrastructure is built but deliberately softened to advisory-only.

Core Features & Use Cases

• Build inventory of hooks from settings.json; identify event → hook file pairs and whether the file exists
• Classify each hook's authority (hard block, advisory, advisory+flag, inject, pass-through) and map enforcement vs advisory
• Check receipt/state patterns (e.g., masonry-state.json) to determine if compliance is tracked or stale
• Generate findings tables and actionable remediation steps for gaps, with prioritized tiers
• Produce deployment prerequisites and enablement guidance for enforcement flags if prerequisites are met

Quick Start

Run the hook-enforcement-audit against your Claude Code setup to identify advisory vs enforcement gaps