overview / incident rules / no-publish-without-dry-run

`no-publish-without-dry-run`

Name: rabadon
Author: Damla Su Bilge

package.json is a publishable package (rabadon@0.2.0 plus four optional platform packages) and CLAUDE.md leaves Faz 5 — npm org, NPM_TOKEN, release — to Damla.

in the rabadon guard

the deny pattern

npm\s+publish(?![^\n]*--dry-run)

field	value
project	rabadon
kind	bash
census verdict	fires
probe	`npm publish`
probe tool	Bash
gate exit on the probe	2
refused by	`no-publish-without-dry-run`

in the field

No record in the published field dataset (field.jsonl, 778 records, 2026-07-27 to 2026-08-26) carries this id.

The dataset is on the field page.