feat(exec): raw-exec guard matches the real process; LOOK-debt guard refuses page-creating scripts (#228 #232)

[MendixMau]

What changed and why

Draft until one field run on a laptop (instrument rule 4). Two commits, two guards in project-bin/exec.sh.

#228 raw-exec guard (project-bin/_common.sh gains mxtk_proc_list and mxtk_raw_exec_on). A process counts only when argv0 is mxcli/mxcli.exe, exec is an argument, and the args name this model's path or file name. The exec.sh shell's own ancestors and descendants are excluded by pid from one process snapshot (the $(...) subshells running the check used to show up under the caller's argv and made the guard refuse itself). A confirmed raw exec on the same model refuses with exit 1 and a BUILD-LOG row; FORCE_EXEC=1 overrides; MXTK_NO_RAW_GUARD=1 opts out. When no process list is available it warns and continues. Fixture tests/wave2/test-exec-raw-guard.sh 10/10, fails 4 against the pre-fix exec.sh.

#232 LOOK-debt guard (supersedes #188). project-bin/look-ledger.sh gains unseen and creates. exec.sh step 4b refuses a script that CREATEs pages (exit 3, BUILD-LOG row) when more than LOOK_OWED_MAX (default 5, 0 = off) built pages are unseen. These pass: ALTER-only scripts, --patch, a -- PROOF-OF-LOOK line in the first 30 script lines, a Waived obligation look/<Module or Module.Page> register line or a PROOF-OF-LOOK citation in a ui-review report, FORCE_EXEC=1, MXTK_NO_LOOK_GUARD=1. With no look-ledger Read hook in .claude/settings*.json it warns once and steps aside. Fixture tests/wave2/test-exec-look-guard.sh 17/17, fails 4 against the pre-fix exec.sh; existing test-look-ledger.sh 11/0.

Not in this PR: gate-check.sh Stage 5 still computes its own inline unseen count (size cap); the #232 residuals (fidelity mean/floor gate, content-aware Stage 6, owed count in build-plan-status, stub-overwrite guard, breadcrumb skill edits) stay open.

Field evidence

None yet. Fixtures only. The Windows process probe (PowerShell Get-CimInstance) is unexercised; the Linux fixture parses this host's real ps output rather than a committed golden capture.

Checklist

• Size cap: 6 files excluding fixtures and CHANGELOG
• Test tier: T1 (shell fixtures with fake mxcli and mxbuild); needs a T2 field run before relying on the LOOK threshold
• Instrument rules: accepts outside evidence (PROOF-OF-LOOK, waivers, ui-review citations); never blocks the remedy (ALTER and --patch pass; env opt-outs); both layouts via _common.sh roots; Windows branch guarded but unrun
• CHANGELOG line per commit under Unreleased
• bash -n, check-portability, check-scripts 102/102, leak guard, check-pr-discipline clean

🤖 Generated with Claude Code

https://claude.ai/code/session_01VJgWP5vEoAsNsJYqCDMGNw

---

Generated by Claude Code