Render findings as the same text block the CC plugin emits to Claude.

Create Condition from dict.

The wrapped <project-security-guidance> block, or empty string.

Load project-specific guidance and patterns once per hook invocation. Called from the hook's main() before dispatching. Failures are non-fatal —

Run a single query and return whether the skill was triggered. Creates a command file in .claude/commands/ so it appears in Claude's availabl

Save the git baseline SHA to state.

SOFT diff-intersect: tag each candidate ``_diff_anchor: "in_diff" | "off_diff"`` and sort in_diff first; do NOT drop. Investigate reads full

User-supplied pattern rules in the same shape as SECURITY_PATTERNS.