Skip to content

chore(governance): land missing docs/packaging before the standards#505 gates bite - #22

Merged
hyperpolymath merged 1 commit into
mainfrom
chore/governance-505-remediation
Jul 21, 2026
Merged

hyperpolymath merged 1 commit into
mainfrom
chore/governance-505-remediation

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

Remediates this repo against the two governance gates promoted from advisory to blocking in hyperpolymath/standards#513 (closing standards#505).

Those gates previously could not fail: the docs check only emitted ::warning::, and the package-policy job ended in an unconditional ✅ Package policy check passed. They are now real, with a grace window — they begin blocking on 2026-08-21. This repo was measured as non-compliant, so this PR lands the missing files ahead of that date.

Added here: packaging

flake.nix

A dev shell, not a package build. Estate policy is Guix primary / Nix fallback; this is the fallback tier, and a guix.scm is welcome later to move to the primary.

  • Packages mirror the tooling actually present in this repo (just), not a generic default.
  • nixpkgs is pinned to an exact revision per the estate SHA-pinning rule.
  • Verified: nix flake check passes (nix 2.35.1). Every package name was confirmed to exist in the pinned revision before generation — nothing here is guessed.

Part of an estate-wide sweep; 63 repos were identified as non-compliant. Third-party/forked repos (HOL, awesome-*, lua-filters) were excluded per the licence policy's do-not-touch rule.

🤖 Generated with Claude Code

@sonarqubecloud

Copy link
Copy Markdown

@hyperpolymath
hyperpolymath merged commit 3cb223e into main Jul 21, 2026
21 of 34 checks passed
@hyperpolymath
hyperpolymath deleted the chore/governance-505-remediation branch July 21, 2026 06:14
hyperpolymath added a commit that referenced this pull request Jul 27, 2026
## Problem

Three workflows on `main` fail with `startup_failure` — rejected by
Actions at
parse time, so **zero steps run**. They are identifiable because GitHub
names the
run after the *file path* rather than the workflow's `name:`:

```
failure   .github/workflows/rsr-antipattern.yml
failure   .github/workflows/boj-build.yml
failure   .github/workflows/e2e.yml
```

Note `gh pr checks` does **not** surface these — a parse-rejected
workflow
produces no check run at all. Measure with `gh run list --json
name,conclusion`.

## Three independent causes

| Workflow | Root cause |
|---|---|
| `e2e.yml` | `jobs:` present but **every job is commented out** → zero
live jobs → invalid |
| `rsr-antipattern.yml` | calls
`hyperpolymath/standards/.github/workflows/rsr-antipattern-reusable.yml@main`
— the reusable **does not exist** (HTTP 404) |
| `boj-build.yml` | job-level `if:` reads `secrets.BOJ_SERVER_URL`; the
**`secrets` context is unavailable in a job-level `if:`** |

## Why deletion is safe

- `e2e.yml` had **no live jobs**, so no coverage is lost.
- `boj-build.yml` and `rsr-antipattern.yml` **never ran a step**.

No currently-passing gate is affected. All `🔴 Gate:` checks stay green.

## Provenance

Extracted from `fix/consolidate-dogfood-gate` (which also deletes these
three)
so it can land on its own — that branch additionally consolidates the
dogfood
gate and rewrites the Zig/Idris FFI validation, and currently conflicts
with
#22–#24 on six files.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
hyperpolymath added a commit that referenced this pull request Jul 27, 2026
## What this is

Previously-unpushed work that existed **only** in a local worktree whose
`.git`
pointer was broken (it referenced a stale duplicate clone at
`hyper-repos/haec` that has since been deleted). Repaired with
`git worktree repair` and pushed here so it is no longer a single local
copy.

36 files, ~610 insertions / ~1265 deletions, in two commits:

- **`5c25f99`** — consolidates `dogfood-gate.yml` (453 lines → net −310)
and
  repairs the K9 contract envelopes (`coordination.k9`,
  `session/custom-checks.k9`, `methodology-guard.k9.ncl`, six
  `template-*`/example `.k9.ncl` files).
- **`e5c86e8`** — consolidates gate workflows into `ci.yml`; removes
`dependabot-automerge.yml`, `quality.yml`, `pages.yml`,
`security-policy.yml`,
`npm-bun-blocker.yml`, `hypatia-scan.yml`, `push-email-notify.yml`;
trims
  `dependabot.yml`; and reworks the **Zig/Idris FFI validation**
  (`src/interface/Abi/Foreign.idr`, `ffi/build.zig`, `ffi/src/main.zig`,
`ffi/test/integration_test.zig`), plus `Justfile` and test-script
updates.

## ⚠️ Not mergeable as-is

Conflicts with #22–#24 on six files, because those PRs added SPDX
headers to
workflows this branch deletes:

```
CONFLICT (content)        .github/workflows/governance.yml
CONFLICT (modify/delete)  .github/workflows/hypatia-scan.yml
CONFLICT (modify/delete)  .github/workflows/pages.yml
CONFLICT (content)        .github/workflows/release.yml
CONFLICT (modify/delete)  .github/workflows/rsr-antipattern.yml
CONFLICT (content)        .github/workflows/trope-check.yml
```

The modify/delete cases resolve trivially (keep the delete); the three
content
conflicts need review.

## Relationship to #26

The three `startup_failure` deletions have been **split out into #26**,
which
merges cleanly and fixes the red CI on its own. Rebase this branch on
top of #26
once that lands; the deletions will then already be in the base.

Left as **draft** pending conflict resolution and review of the FFI
rewrite.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant