R12.7: Temp file deterministic deletion

Short answer: Scratch files in /tmp register unlink in finalizer. Scratch files that are never deleted fill the disk.

Group: Memory and resource leaks. Status: stable. Generated from the rule definitions; do not edit by hand.

Playground: https://brevio.pro/tools/agent-guard-playground?rule=R12.7

What it catches

Temp file deterministic deletion: scratch files in /tmp register unlink in finalizer.

Why

Scratch files that are never deleted fill the disk.

A bad example

tmp = '/tmp/work.json'

A good example

with tempfile.TemporaryDirectory() as d:
    tmp = os.path.join(d, 'work.json')

How it is checked

Nothing yet. No scanner and no slice card checks it: it is a standing rule for authors and reviewers.

How to silence it

A person can silence one finding with brevio-core: ignore R12.7 -- reason on the line or the line above. Without the reason it does not count. An agent cannot silence it: the agent hook and the MCP tools never honour the comment, and a pull request that adds one is reported until a reviewer allows it. Fixing the code is still the better answer.

To change what the rule flags, edit its definition in dev_rules.py or code_rules/__init__.py. That is a code change and is reviewed like one.

R12.8 No unbounded collection growth
R12.1 Event listener teardown
R12.2 Timer lifecycle cleanup
R12.3 Stream disposal hygiene
Every rule