From 3cf9bb765280baa649bd4bfed688dba67f686834 Mon Sep 17 00:00:00 2001
From: Adam Moussa <adam@seahavenind.com>
Date: Mon, 29 Jun 2026 11:43:54 -0400
Subject: [PATCH] fix(hooks): point default review.sh path at the standalone
 security-review repo

The pre-push/pre-commit hooks defaulted SH_REVIEW_SH to the orchestrator checkout
(orchestrator/security-review/review.sh). With the gate re-homed here, default to
$HOME/Documents/repositories/security-review/review.sh so push-time gating does
not lapse when orchestrator is deprecated. Live global hook re-pointed to match.
---
 hooks/pre-commit | 2 +-
 hooks/pre-push   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/hooks/pre-commit b/hooks/pre-commit
index 268973d..25a1a71 100755
--- a/hooks/pre-commit
+++ b/hooks/pre-commit
@@ -6,7 +6,7 @@
 set -uo pipefail
 REPO_ROOT="$(git rev-parse --show-toplevel 2>/dev/null)" || exit 0
 [ -f "$REPO_ROOT/.security-review-skip" ] && exit 0
-REVIEW_SH="${SH_REVIEW_SH:-$HOME/Documents/repositories/orchestrator/security-review/review.sh}"
+REVIEW_SH="${SH_REVIEW_SH:-$HOME/Documents/repositories/security-review/review.sh}"
 if [ ! -f "$REVIEW_SH" ]; then
   echo "security-review: review.sh not found at $REVIEW_SH (set SH_REVIEW_SH to override) — skipping" >&2
   exit 0
diff --git a/hooks/pre-push b/hooks/pre-push
index 7ca47df..e2b2873 100755
--- a/hooks/pre-push
+++ b/hooks/pre-push
@@ -7,7 +7,7 @@
 set -uo pipefail
 REPO_ROOT="$(git rev-parse --show-toplevel 2>/dev/null)" || exit 0
 [ -f "$REPO_ROOT/.security-review-skip" ] && exit 0
-REVIEW_SH="${SH_REVIEW_SH:-$HOME/Documents/repositories/orchestrator/security-review/review.sh}"
+REVIEW_SH="${SH_REVIEW_SH:-$HOME/Documents/repositories/security-review/review.sh}"
 if [ -f "$REVIEW_SH" ]; then
   SUP=()
   # Suppressions: prefer a MACHINE-LEVEL file kept out of repo history