Task-aware tool gating: enforce tool permissions and evidence by task type

[codevibesmatter]

Problem

Agents skip tasks (especially REVIEW phases) and jump ahead. Current enforcement only blocks completing a blocked task, not starting it or doing the wrong work for it.

Gaps

1. No enforcement on task start — agent can mark any task in_progress regardless of dependency order
2. REVIEW tasks allow Write/Edit — agent writes code instead of reviewing
3. No evidence requirement for REVIEW completion — agent can mark review done without running reviewers
4. Agent-wait guidance too weak — agents wait ~60s then give up and do work themselves

Solution

Task-type tool gating (PreToolUse)

• Carry subphase pattern labels through to native task metadata
• When a review-labeled task is in_progress, deny Write/Edit/NotebookEdit
• Extensible: future task types can define their own tool permissions

Stricter task-deps enforcement

• Block TaskUpdate(status='in_progress') when blockers are incomplete (not just completed)

Review evidence gate

• Block completing review-labeled tasks without review evidence (review-agent output, kata review ran)

Stronger agent-wait

• Stop hook agent-wait message says 'Wait at least 5 minutes before checking again. Do NOT proceed with the work yourself.'

Labels

enhancement

[codevibesmatter]

Spec approved: planning/specs/34-task-aware-tool-gating.md

Ready for implementation: kata enter implementation --issue=34