[takashi-matsuyama]

Two moat-safe fixes from a takashimatsuyama-blog dogfeedback report: basou orient correctly detected staleness (the v0.21.0 top banner), but the remediation (basou refresh) was advisory only, so a consuming agent skipped it and read the repo directly — bypassing the freshness gate.

[#1 moat-safe] opt-in basou orient --refresh

Imports every adapter first (writes provenance), then renders a guaranteed-fresh position — so a SessionStart hook can close the freshness gate in one command. Bare basou orient stays read-only (it never imports; the dry-run probe only reports staleness). The deliberate invariant — a plain orient never mutates the store — is preserved.

Default-on auto-refresh (the report's proposal #1) was deliberately NOT adopted: it would reverse orient's read-only contract and make every consumer (portfolio view, CI) a writer. The enforcement belongs in the hook layer (which may write), orchestrated via this opt-in flag — not in the read command.

[#4] Assert confirmed staleness instead of hedging

For the confirmed-stale branch only (newSessions>0 || updatedSessions>0), the top banner and bottom verdict now state plainly that the view is stale (with the uncaptured count) + an imperative "run basou refresh first", instead of "might be stale". basou counted the uncaptured work, so it asserts it rather than understating the urgency. The genuinely-uncertain branches keep their hedged wording (un-re-importable grown session: "cannot confirm"; unrun probe: "run refresh to check").

Not adopted (with reasons)

• OIDC trusted publishing + signed Release pipeline (release.yml) #2 suppress the orient body when stale — removes the honest hedged orientation the report itself praised, and doesn't stop the repo-direct bypass.
• Update(deps): Bump sigstore/cosign-installer from f713795cb21599bc4e5c4b58cbad1da852d7eeb9 to 398d4b0eeef1380460a10c8013a76f728fb906ac #5 re-inject before the first work command — a larger PreToolUse hook design; backlog.

This is consistent with the earlier Stop-hook decision (advisory nudge over forced block): basou's moat is advisory + read-only + human-in-the-loop. The forced-gate proposals are the same enforcement posture already declined there.

Adversarial review (Codex)

No findings. Confirmed: wording confined to the confirmed-stale branch (unverifiable/null branches stay non-asserted), --refresh runs refreshAll before the probe with a full non-dry/non-force import, no stdout pollution of the orient body, bare orient writes no provenance, and a refresh failure routes through the existing clean error handler.

Tests

+1 cli (orient --refresh imports an uncaptured session → verdict flips to current); updated the confirmed-stale wording assertions. Full suite green: core 1143, sdk 18, cli 820. typecheck + lint clean. Verified by smoke against the real workspace.

🤖 Generated with Claude Code