Workflow Refine

[ZixuWang-810]

Bro will automatically commit and push the work to the repo. The workflow should ask for user's permission first before commit and push anything.

[ZaxShen]

Resolved by PR #64. The new doctrine:

• SWE never pushes. Hard rule in `templates/agents/swe.md`: "Never push. Never commit secrets. Never edit outside the worktree." SWE only commits inside its isolated git worktree at `.claude/worktrees/` — never touches the Human's main working tree, never pushes anywhere.

• Bro never pushes. Bro is the planner + task gate; pushing is exclusively Human-initiated.

• Push gate intercepts every `git push`. When the Human runs `git push`, the new `scripts/hooks/git-push-guard.sh` PreToolUse hook scans the trajectory DB. If any commit being pushed has a task with no passing `validation_attempts` row, the hook blocks with:

  BLOCKED: pushing N unsigned commit(s). Run `@bro review before push`

• Human triggers the review. When the Human types `@bro review before push`, bro spawns pr-reviewer for each unsigned task (in parallel where possible). On all-pass, the push proceeds. On fail, bro surfaces what needs fixing.

Net effect on the original concern: the Human is fully in control of when commits leave the local repo. Auto-commit happens only inside the worktree (which is the spec's contract for atomic close); auto-push never happens; the push-time review requires Human-initiated invocation of `@bro review before push`.

Closing as resolved by PR #64. If a different definition of "ask permission first" is wanted (e.g., bro should ask before SWE commits inside the worktree too), reopen with the specific wording you want.