Skip to content

fix(fork-governance): allow .gitbot-fleet/ at the root; canonicalise the enrolment manifest - #264

Merged
hyperpolymath merged 3 commits into
mainfrom
claude/gitbot-fleet-feedback-0vdo64
Oct 27, 2026
Merged

hyperpolymath merged 3 commits into
mainfrom
claude/gitbot-fleet-feedback-0vdo64

Conversation

@hyperpolymath

@hyperpolymath hyperpolymath commented Oct 27, 2026 •

Copy link
Copy Markdown
Owner

Summary

Follow-up to #263, which merged before its first CI run finished. Two checks were failing on it and are now red on main:

  • estate-rules: scripts/check-root-shape.sh rejects .gitbot-fleet/ because it was not on .machine_readable/root-allow.txt.
  • Proven 3-outcome test & bench suite: the root_shape and ijson_jcs bench workloads report "checksum is false" for the same two facts (the new root entry, and an enrolment manifest that was pretty-printed rather than I-JSON/JCS).

Changes

  • .machine_readable/root-allow.txt: .gitbot-fleet/ is a required root entry, with the reason (manifest + report-backs directory the Hypatia verdict grid reads at this path and no other).
  • .gitbot-fleet/enrolment.json: key-sorted compact JSON with one final LF, per 3-practice/JSON-POLICY.adoc.

RSR Quality Checklist

Required

  • Tests pass: scripts/check-root-shape.sh . (45 entries), scripts/check-ijson-jcs.sh --enforce . (13/13 canonical), scripts/check-lock-sync.sh
  • Code is formatted
  • Linter is clean
  • No banned language patterns
  • No unsafe blocks without // SAFETY: comments
  • No banned functions
  • SPDX license headers present on all new/modified source files (no source files changed)
  • No secrets, credentials, or .env files included

As Applicable

  • Repo deed updated — not needed
  • docs/status/ROADMAP.adoc — not changed
  • Documentation — not changed
  • CHANGELOG — regenerated from commits

Generated by Claude Code

Summary by CodeRabbit

  • Documentation
    • Updated the repository map to identify the fleet enrolment manifest and describe its role in supporting per-run report-backs and the verdict grid.
    • The manifest’s enrolment statuses, titles, and reasons are unchanged; its entries were reordered without changing their meaning.

…the enrolment manifest

#263 merged before its first CI run finished, and two checks were failing on
it: estate-rules (root shape: .gitbot-fleet/ was not on
.machine_readable/root-allow.txt) and the proven bench suite, whose
root_shape and ijson_jcs workloads broke on the same two facts (the
manifest was pretty-printed, not I-JSON/JCS). Both are fixed here:
.gitbot-fleet/ is a required root entry with its reason, and
enrolment.json is key-sorted compact JSON with one final LF.

Verified: scripts/check-root-shape.sh . passes (45 entries),
scripts/check-ijson-jcs.sh --enforce . reports 13/13 canonical,
scripts/check-lock-sync.sh unchanged.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J4QvDjqj5DHRRCrDiGeTmq
@coderabbitai

coderabbitai Bot commented Oct 27, 2026 •

Copy link
Copy Markdown
Contributor

Review in Change Stack →

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 53 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

Run configuration
Commits

Reviewing files that changed from the base of the PR and between 74458ed and f632d2e.

Files selected for processing: 1
  • .github/workflows/fork-governance.yml

No actionable comments were generated in the recent review.

Recent review info
Run configuration
Commits

Reviewing files that changed from the base of the PR and between e7877fc and 74458ed.

Files selected for processing: 3
  • .gitbot-fleet/enrolment.json
  • .machine_readable/root-allow.txt
  • docs/architecture/REPOSITORY-MAP.adoc

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

Walkthrough

The enrolment manifest is compacted and its reporter entries are reordered. The root allowlist and repository map now include .gitbot-fleet/, described as containing the manifest and per-run report-backs.

Changes: Fleet enrolment manifest

Layer / File(s) Summary
Manifest and repository registration
.gitbot-fleet/enrolment.json, .machine_readable/root-allow.txt, docs/architecture/REPOSITORY-MAP.adoc
The enrolment JSON is compacted and its reporter entries are reordered; its schema and reporter values remain unchanged. The allowlist permits .gitbot-fleet/, and the repository map describes its manifest, report-backs, and Hypatia verdict-grid reader.

Priority: Normal

Estimated code review effort: 2 (Simple) | ~8 minutes

Change: Bug fix

Possibly related issues

  • hyperpolymath/ijson-jcs#7: This change applies the canonical file profile to the enrolment manifest, but does not implement the issue’s standards-alignment pipeline.

Possibly related PRs

  • hyperpolymath/rsr-template-repo#253: That PR adds canonical JSON enforcement and updates root-shape and repository-map rules; this change applies related formatting and registration updates to .gitbot-fleet/.
  • hyperpolymath/rsr-template-repo#252: That PR defines I-JSON/JCS routing; this change formats the enrolment manifest under the related canonical JSON policy.

Suggested reviewers: {{owner}}

Merge Risk: Minimal · previous review 74458

The manifest and repository registration changes are ready to merge based on the supplied evidence.

Pre-merge checks: Passed 4
Check name Status Explanation
Title check Passed The title clearly identifies both main changes: allowing the .gitbot-fleet/ root directory and canonicalising its enrolment manifest.
Description check Passed The description covers the purpose, key changes, validation commands, and checklist. It omits dedicated Testing and Screenshots sections, and it incorrectly states that documentation was not changed e…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Description check

Explanation

The description covers the purpose, key changes, validation commands, and checklist. It omits dedicated Testing and Screenshots sections, and it incorrectly states that documentation was not changed even though REPOSITORY-MAP.adoc was updated.

Finishing Touches
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

…rectory

estate-rules' repo_map_determinism_test fails when the committed map lags the
tree; .gitbot-fleet/ (added in #263) was not yet in it. Regenerated with
scripts/gen-repo-map.sh, as 'just repo-map' does.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J4QvDjqj5DHRRCrDiGeTmq
@coderabbitai

coderabbitai Bot commented Oct 27, 2026

Copy link
Copy Markdown
Contributor

Add Carrot credits or activate Agent usage billing to use Autofix

@hyperpolymath
hyperpolymath marked this pull request as ready for review October 27, 2026 05:20
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 27, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-27T05:30:47.984495Z f632d2e New commits
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

…; repin gitbot-fleet

Walk-based adapters (glambot, finishing-bot) were scanning the gitbot-fleet
checkout under .fleet-src as if it were this repository. The checkout is
moved to RUNNER_TEMP before any adapter runs and the cache key hashes the
fleet lockfiles before the move. FLEET_REF moves to e85b71bf, which carries
the same fix in the reusable plus rhodibot's found-path reporting.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J4QvDjqj5DHRRCrDiGeTmq
@sonarqubecloud

Copy link
Copy Markdown

@hyperpolymath
hyperpolymath merged commit 2d28560 into main Oct 27, 2026
50 checks passed
@hyperpolymath
hyperpolymath deleted the claude/gitbot-fleet-feedback-0vdo64 branch October 27, 2026 05:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants