pk protect

pk protect is a PreToolUse hook on Edit and Write. It denies any write under docs/plans/, because a preserved plan is a record of what was approved, and a record that can be edited is not one.

The check resolves symlinks and compares case-insensitively on Windows, so the directory cannot be reached through an alias.

Amending a plan

Plans are superseded, never edited. When the approach changes, write and approve a new plan. The sequence in docs/plans/ is the history of decisions, reversals included.

pk protect is a no-op in an unconfigured repository (no .pk.json).