From d2f5edaacabebde791e59bf702156e43ba2833e0 Mon Sep 17 00:00:00 2001
From: "Peter Z." <10436770+pzverkov@users.noreply.github.com>
Date: Wed, 3 Jun 2026 09:02:25 +0200
Subject: [PATCH] note the 80% statement-coverage target in the roadmap

CI measures ~67% and gates at 65%; the gap is the action hooks, only smoke-tested today. Deferred behind the structural Silver blockers.
---
 docs/roadmap.md | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/docs/roadmap.md b/docs/roadmap.md
index 56b1b44..3c8078d 100644
--- a/docs/roadmap.md
+++ b/docs/roadmap.md
@@ -54,6 +54,18 @@ The bar to add an item here is: someone asked, the maintainer thought about it,
 
 **Why deferred**: niche use case (only repo maintainers + plugin authors). Not worth the install.sh complexity until someone other than the maintainer asks for it.
 
+## Raise statement coverage to 80% (OpenSSF Silver target)
+
+**Tracking**: #39
+
+**Status**: CI gates coverage at 65% as of v0.6.2; 80% waits on hook tests.
+
+**Today**: the `coverage` job measures ~67%. It captures the hooks and daemon (which run as subprocesses) via `COVERAGE_PROCESS_START` + `coverage combine`; a plain in-process `--cov` reads 59% because it misses them. Most of the gap to 80% sits in the action hooks (`lib/hook_stop.py`, `lib/hook_post_tool_bash.py`, `lib/hook_pre_tool_bash.py`, `lib/hook_post_tool_edit.py`): `tests/test_hooks_smoke.py` checks only that they run on trivial input, not their branches.
+
+**Proposal**: test each hook with real payloads (transcript parsing, revert detection, redaction, the confidence gate), then step the CI `--fail-under` up to 80.
+
+**Why deferred**: 80% is the Silver `test_statement_coverage80` criterion, and Silver already blocks on the single-maintainer rules (2+ contributors, bus factor >= 2, two-person review). Worth doing regardless, but no rush to hit the exact number while those block the badge.
+
 ## Agent Client Protocol (ACP) for Zed and other ACP-aware tools
 
 **Status**: distinct from MCP; tracked separately for a future minor once a real Zed-side use case shows up.