README: list the handoff-needs-smoke-test hook

[EdbertChan]

Summary

The main readme has a table listing every safety hook and what it does.

This adds the row for the new hook lower in this stack. That hook checks that a script handed to a person has been run first.

The PR checker counts the main readme as documentation, a separate kind of change, so the row lives in its own PR.

Review Claim

Approve one new row in the main readme's hook table, for the hook added at the bottom of this stack.

Review Lane

docs

Review Unit

docs

Safety Invariant

Only one table row is added. No code changes.

Slice Rationale

The row describes a hook added lower in this stack, so this lands after it. Keeping it separate lets the hook PR hold one kind of change.

Non-goals

• Does not change the hook, its own guide, or its inventory row.
• Does not list the login-shell hook; that hook is not in this stack.

Test Plan

Test Plan

Every CI command, run on this commit:

rc=0  bash scripts/run_all_tests.sh
rc=0  python3 scripts/check_no_tracked_local_artifacts.py
rc=0  python3 scripts/check_hook_test_coverage.py
rc=0  python3 scripts/check_rules_are_wired.py
rc=0  python3 scripts/check_skills_three_harnesses.py
rc=0  python3 scripts/check_ecosystem_boundaries.py
rc=0  python3 scripts/check_skill_file_refs.py
rc=0  python3 scripts/check_skill_test_coverage.py --base origin/main --head HEAD
rc=0  python3 scripts/check_skill_test_debt_no_growth.py
rc=0  python3 scripts/check_skill_trigger_mechanism.py
rc=0  python3 scripts/check_dora_baseline.py
rc=0  python3 scripts/check_no_dated_provenance.py --base origin/main
rc=0  python3 scripts/check_no_new_comments.py --base origin/main
rc=0  shellcheck install.sh

Revert Plan

Revert Plan

• Safe to revert? Yes
• Revert command: git revert <sha>
• Post-revert steps: None. The row leaves the readme table.
• Data migration? No

🤖 Generated with Claude Code

Depends-On: #511

---

Note

Low Risk
Documentation-only: one new table row in README with no code or behavior changes.

Overview
Documents the handoff-needs-smoke-test safety hook in the main README hooks table with a new row placed after ui-input-guard.

The row states that when a reply hands the user a script via ! bash <path> that was never run in the session, the agent must run it or explain why it cannot run here.

^{Reviewed by Cursor Bugbot for commit 80028fe. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_6980cd14-9a4a-4131-a5b6-715c8daa7ad5)

[EdbertChan]

This pull request is part of a Mergify stack:

#	Pull Request	Link
1	hook: a script handed to the user is a claim that it runs	#506
2	audit(token_audit): count "bogus" and "it didn't run" as the same class	#507
3	gate: a branch taken per operating system needs a test that injects one	#509
4	audit(token_audit): one submission carrying two slash commands is one message	#510
5	audit: use the transcript's own markers for what the human actually sent	#511
6	README: list the two new hooks from this stack	#535	👈

[cursor]

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_e5f100c5-e9ef-4e81-9d56-f1151354611b)

[EdbertChan]

Revision history

#	Type	Changes	Reason	Date
1	initial	062b3db		2026-09-13 18:39 UTC
2	content	062b3db → 5c0e9dc (raw)		2026-09-13 18:39 UTC

[cursor]

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_cf226e98-0dd2-4b86-b300-b8f7785835e9)

[cursor]

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_62320c7e-c0d8-40e3-8a6e-8cec9df9e83a)

[cursor]

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_a49484af-fb4b-422c-b066-afd0bfd4a75d)

[cursor]

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_87b4af01-bdaf-48e4-85cf-d9e4e73c4c25)

[cursor]

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_7d23ad88-d457-4922-94fd-70b7a4e1a298)

[EdbertChan]

@Mergifyio queue

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-09-14 05:43 UTC · Rule: admin-bypass · triggered by @EdbertChan with the @mergifyio queue command
• ✅ Checks passed · on draft merge queue: checking #535 on main (d42d17e) #606
• ✅ Merged — 2026-09-14 05:49 UTC · at 8f032ddb47bd40a936d4bca3281ba373eedaf693 · squash

This pull request spent 6 minutes 1 second in the queue, including 5 minutes 21 seconds running CI.

Required conditions to merge

• check-success = lint
• check-success = test
• check-success = validate
• depends-on = EdbertChan/catstack#511 [⛓️ audit: use the transcript's own markers for what the human actually sent #511]
  • README: list the handoff-needs-smoke-test hook #535