[aaronormerod]

What changed

Adds outputs.companions to the hookmap. A result-gate deny now withholds Bash stderr with stdout.

Which issue does this implement

Part of #375. A redaction still leaves stderr as produced. Evaluating stderr through the policy is the follow-up.

Base branch

• integration, because this touches the specification, schemas, a reference
  implementation, an adapter, tests, or CI
• main, because every changed path is on the documentation lane allowlist in
  CONTRIBUTING.md

Type of change

• Specification change (schema, hooks, events, AgBOM)
• Reference implementation or adapter
• Documentation
• Tooling or CI
• Governance (licensing, security policy, contributor docs)

I tested this

• I synced my branch with the base branch before opening this
• uv run pytest -v passes on my machine
• uv run mkdocs build --strict passes on my machine

bun test in reference-implementations/agt also passes: 1316 pass, 4 skip. 33 new tests, mutation-checked. Not run in a live Claude Code session.

Checklist

• Commits are signed off with git commit -s (required by the DCO)
• Prose follows STYLE.md
• No secrets, tokens, or internal URLs in the diff

Security

This closes a leak where a deny delivered stderr in clear.

[github-actions]

Thanks for this. It is queued rather than ignored. A lead has not reviewed this pull request yet. A lead will read it when they have time, and we can't promise a date. Nothing here is rejected. If a check below fails, please fix it. A pull request that waits a long time may be closed, and you can reopen it later.