fix(hook): add score floor HOK_MIN_SCORE=0.3 to silence weak matches (HOK-01)

The hook took the top-5 matches by rank, ignoring r.score, so incidental single-keyword matches (~0.1-0.25) leaked irrelevant pointers (observed: claude-guardian/duel-system on a memory-os prompt). Add a calibrated min-score floor: against the live 336-entry index, noise tops out ~0.25 and genuine topical matches begin ~0.33+, so 0.3 delivers the design's 'below-threshold -> emit nothing'. Recall on keyword-rich entries (game canon) is a separate Phase-2 keyword-curation concern. smoke-test.ps1 now does a mirror-vs-live drift check (HOK-05) and runs under a scratch HOME so it never writes the live usage.jsonl.

Applied to mirror + live (byte-identical, hash 21879425...); live backup at loadout-hook.mjs.bak-pre-hok01-20260616. settings.json wiring unchanged. Verified: noise/off-topic prompts silent, strong matches preserved, ~51ms.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: mcp-tool-shop

apps/hook/loadout-hook.mjs

@@ -6,7 +6,7 @@
 //   • matchLoadout(prompt, index) against it
 //   • Emit AT MOST 5 entries as one-line pointers: "- <id> — <summary> → <path>"
 //   • Total additionalContext kept ≤ ~200 tokens
-//   • Below-threshold match  emit nothing (silent)
+//   • Below-threshold match (score < HOOK_MIN_SCORE) → emit nothing (silent)
 //   • Always-record loaded events to ~/.ai-loadout/usage.jsonl
 //
 // Off-switch: AI_LOADOUT_HOOK=off  no-op exit 0.
@@ -25,6 +25,13 @@ const INDEX_PATH = resolve(HOME, '.ai-loadout', 'index.json');
 const USAGE_PATH = resolve(HOME, '.ai-loadout', 'usage.jsonl');
 const MAX_ENTRIES = 5;
 const MAX_LINE_CHARS = 180;
+// Minimum match score for a DOMAIN entry to be injected. Core entries (score 1.0)
+// always pass. Calibrated 2026-06-16 against the live 336-entry index: observed
+// incidental single-keyword noise tops out at ~0.25, genuine topical matches begin
+// ~0.33+, so 0.3 is the "confident match" floor that delivers the design's
+// "below-threshold → emit nothing". Recall on keyword-rich entries (e.g. game
+// canon) is a separate Phase-2 keyword-curation concern, not this floor's job.
+const HOOK_MIN_SCORE = 0.3;
 
 function readStdinSync() {
   try {
@@ -66,7 +73,9 @@ async function main() {
 
   let results;
   try { results = matchLoadout(prompt, index); } catch { safeExit(0); return; }
-  const top = (results || []).filter(r => r && r.entry && r.entry.priority !== 'manual').slice(0, MAX_ENTRIES);
+  const top = (results || [])
+    .filter(r => r && r.entry && r.entry.priority !== 'manual' && r.score >= HOOK_MIN_SCORE)
+    .slice(0, MAX_ENTRIES);
   if (top.length === 0) { safeExit(0); return; }
 
   const lines = top.map(r => {

apps/hook/smoke-test.ps1

@@ -1,13 +1,73 @@
+#requires -Version 5
+<#
+  Smoke test for the loadout hook.
+
+  - Drift check (HOK-05): mirror (apps/hook) vs live (~/.claude/loadout-hook) must be byte-identical.
+  - Threshold check (HOK-01): drives the hook with representative prompts and shows what it injects.
+    A min-score floor means weak/incidental matches and off-topic prompts go silent.
+
+  Isolation: runs the hook under a SCRATCH HOME (a copy of the live ~/.ai-loadout/index.json),
+  so testing never appends to the live usage.jsonl.
+
+  Usage:
+    ./smoke-test.ps1                 # tests the MIRROR copy (this repo) by default
+    ./smoke-test.ps1 -HookPath live  # tests the LIVE copy (~/.claude/loadout-hook)
+#>
+param(
+  [string]$HookPath = 'mirror'
+)
 $ErrorActionPreference = 'Continue'
-$hook = 'C:/Users/mikey/.claude/loadout-hook/loadout-hook.mjs'
+
+$mirror = Join-Path $PSScriptRoot 'loadout-hook.mjs'
+$live   = Join-Path $HOME '.claude/loadout-hook/loadout-hook.mjs'
+
+# ── Drift check (HOK-05) ────────────────────────────────────────
+Write-Output ('=' * 78)
+Write-Output 'DRIFT CHECK — mirror vs live (must be byte-identical)'
+Write-Output ('=' * 78)
+$mirrorHash = (Get-FileHash $mirror -Algorithm SHA256).Hash
+if (Test-Path $live) {
+  $liveHash = (Get-FileHash $live -Algorithm SHA256).Hash
+  if ($mirrorHash -eq $liveHash) { Write-Output "OK — identical ($mirrorHash)" }
+  else { Write-Output "DRIFT — mirror=$mirrorHash  live=$liveHash" }
+} else {
+  Write-Output "live copy not found at $live"
+}
+Write-Output ''
+
+# ── Resolve which hook to drive ─────────────────────────────────
+$hook = if ($HookPath -eq 'live') { $live } else { $mirror }
+Write-Output "Driving: $hook"
+Write-Output ''
+
+# ── Scratch HOME (isolate from live usage.jsonl) ────────────────
+$scratch = Join-Path ([System.IO.Path]::GetTempPath()) ("loadout-smoke-" + [guid]::NewGuid().ToString('N').Substring(0,8))
+New-Item -ItemType Directory -Force -Path (Join-Path $scratch '.ai-loadout') | Out-Null
+$liveIndex = Join-Path $HOME '.ai-loadout/index.json'
+if (Test-Path $liveIndex) {
+  Copy-Item $liveIndex (Join-Path $scratch '.ai-loadout/index.json')
+} else {
+  Write-Output "WARN: no live index at $liveIndex — matching will be empty"
+}
+
+# Redirect the hook's homedir() (USERPROFILE on Windows) to the scratch dir so
+# usage events land in scratch, never the live ~/.ai-loadout/usage.jsonl.
+$origUserProfile = $env:USERPROFILE
+$origHome        = $env:HOME
+$env:USERPROFILE = $scratch
+$env:HOME        = $scratch
 
 $prompts = @(
   @{ label = '1. GAME prompt (Star Freight visual canon)';
      payload = @{ prompt = 'I want to update the Star Freight visual canon — the Renna identity packet needs a new portrait variant. Open the right canon paths and the workflow profile.' } },
   @{ label = '2. TOOL prompt (shipcheck a repo before publish)';
      payload = @{ prompt = 'Run shipcheck audit on the role-os repo before npm publish — full treatment afterwards if it passes.' } },
   @{ label = '3. GENERIC prompt (mundane filesystem)';
-     payload = @{ prompt = 'list the files in the current directory' } }
+     payload = @{ prompt = 'list the files in the current directory' } },
+  @{ label = '4. NOISE prompt (the known bad case — should be silent or strong-only)';
+     payload = @{ prompt = "Let's build memory-os out using the dogfood swarm protocol." } },
+  @{ label = '5. OFF-TOPIC prompt (should be silent)';
+     payload = @{ prompt = 'what is the weather like today and should I bring an umbrella' } }
 )
 
 foreach ($p in $prompts) {
@@ -20,17 +80,21 @@ foreach ($p in $prompts) {
   $start.Stop()
   $ms = $start.ElapsedMilliseconds
   if (-not $out -or $out.Trim().Length -eq 0) {
-    Write-Output "(silent — no pointer injection)"
+    Write-Output '(silent — no pointer injection)'
   } else {
     try {
       $parsed = $out | ConvertFrom-Json
-      $ctx = $parsed.hookSpecificOutput.additionalContext
-      Write-Output $ctx
+      Write-Output $parsed.hookSpecificOutput.additionalContext
     } catch {
       Write-Output "RAW OUTPUT: $out"
     }
   }
-  Write-Output ""
+  Write-Output ''
   Write-Output ("latency: {0} ms" -f $ms)
-  Write-Output ""
+  Write-Output ''
 }
+
+# ── Restore env + cleanup scratch ───────────────────────────────
+$env:USERPROFILE = $origUserProfile
+$env:HOME        = $origHome
+Remove-Item -Recurse -Force $scratch -ErrorAction SilentlyContinue