Issues

• Reusable workflows called through hyperpolymath/standards never dispatch (0 jobs) — the rename is not resolved for jobs.<id>.uses

  metadatastician/standards#1390 · Filter by author hyperpolymath opened on Nov 1, 2026

• PROOF-POLICY reconciliation: seven places where the estate proof documents disagree, with the strict reading proposed for each

  documentationgovernance
  metadatastician/standards#1389 · Filter by author hyperpolymath opened on Nov 1, 2026

• refactor(actions): replace embedded Python allowlist preflight with Rust checker, preserving fail-closed contract

  refactor
  metadatastician/standards#1385 · Filter by author hyperpolymath opened on Nov 1, 2026
  1

• Implement evidence-backed, non-disruptive estate hardening (SELinux, firewall, ASVS, capability gates, crypto)

  enhancement
  metadatastician/standards#1384 · Filter by author hyperpolymath opened on Nov 1, 2026

• proof policy: signed rollout of canonical Agda safety flags and cross-prover witness receipts

  metadatastician/standards#1383 · Filter by author hyperpolymath opened on Nov 1, 2026
  1

• fix(allowlist): tree canon lacks narrow ClusterFuzzLite subpath patterns the live list grants (Allowlist Preflight gaps)

  bug
  metadatastician/standards#1380 · Filter by author hyperpolymath opened on Oct 31, 2026
  2

• Policy: evidence-based PR merge readiness, proof conformity, app review completion, and shared-tool feedback

  choregovernance
  metadatastician/standards#1379 · Filter by author hyperpolymath opened on Oct 30, 2026
  2

• Allowlist preflight rejects SLSA reusable after the path-aware transfer fix

  metadatastician/standards#1369 · Filter by author hyperpolymath opened on Oct 29, 2026

• RSR 3.0.0: retire 5.2.1 spark-ready, add creusot-ready

  refactorscaffolding
  metadatastician/standards#1347 · Filter by author hyperpolymath opened on Oct 26, 2026

• Apply signed four-format routing correction across canonical bot guidance

  metadatastician/standards#1341 · Filter by author hyperpolymath opened on Oct 25, 2026

• Post-transfer: 390 files still name hyperpolymath/standards, and two coverage measurement paths

  testing
  metadatastician/standards#1340 · Filter by author hyperpolymath opened on Oct 25, 2026
  1

• 1-formats/deed/tools/migrate_a2ml_to_deed.sh is a stub that reads as a working translator

  refactor
  metadatastician/standards#1339 · Filter by author hyperpolymath opened on Oct 24, 2026

• Let advisory Hypatia callers skip pull-request SARIF upload

  metadatastician/standards#1327 · Filter by author hyperpolymath opened on Oct 23, 2026

• panic-attack (advisory): 10 critical + 1 high on standards — 8 come from an outdated pin, 3 are already tracked

  bugsecurity
  metadatastician/standards#1306 · Filter by author hyperpolymath opened on Oct 19, 2026

• actions.lock: four leaf entries still carry ref: <their own SHA> (#1271 follow-up) — every caller of the hypatia-scan / scorecard / codeql reusables dies at "Set up job"

  automationbugcicdpriority:p1scope:estatestatus:readytech-debt
  metadatastician/standards#1290 · Filter by author hyperpolymath opened on Oct 18, 2026

• tools/js-runtimes: zero-dependency package.json cannot satisfy both lock-presence and frozen-install checks

  metadatastician/standards#1286 · Filter by author hyperpolymath opened on Oct 18, 2026

• startup_failure with zero jobs is also actor-level: a CodeRabbit-created PR head starts no workflow runs while the workflow tree is unchanged

  cicdenhancement
  metadatastician/standards#1266 · Filter by author hyperpolymath opened on Oct 14, 2026

• cargo-audit.yml template: vulnerability issues carry no findings, no acceptance criteria and never close (rpa-elysium #113/#143 are the same issue twice)

  metadatastician/standards#1265 · Filter by author hyperpolymath opened on Oct 14, 2026

• mirror-reusable: a missing GITEA_HOST reddens the default branch instead of printing a skip notice (exit 1 in ssh-keyscan)

  metadatastician/standards#1264 · Filter by author hyperpolymath opened on Oct 14, 2026

• RSR applicability: workspace and named ABI layouts need a canonical decision

  bindingsdecisionscaffolding
  metadatastician/standards#1262 · Filter by author hyperpolymath opened on Oct 14, 2026

• Estate rollout: CI foundations from rpa-elysium #145 (432-repository audit)

  metadatastician/standards#1261 · Filter by author hyperpolymath opened on Oct 14, 2026

• sweep-classifiers: four scripts default INPUT/BLOBS_DIR to a fixed /tmp/drift-survey path (hardcoded_tmp)

  priority:p3scope:repotech-debt
  metadatastician/standards#1243 · Filter by author hyperpolymath opened on Oct 14, 2026

• Rule estate-chora UUIDv8 profile-C preimage/alias before launcher emission cutover

  metadatastician/standards#1230 · Filter by author hyperpolymath opened on Oct 11, 2026

• TEMPLATE-APPLICABILITY-POLICY baseline still requires 0-AI-MANIFEST.a2ml while the template retires .a2ml (rsr-template-repo#209)

  governancerefactorscaffolding
  metadatastician/standards#1229 · Filter by author hyperpolymath opened on Oct 11, 2026

• [gates] src/**/*.rs is root-anchored; cargo workspaces can never satisfy it

  metadatastician/standards#1228 · Filter by author hyperpolymath opened on Oct 11, 2026