Skip to content

chore: upgrade to the current RSR template (840ac25), then instantiate - #21

Merged
hyperpolymath merged 2 commits into
mainfrom
chore/upgrade-and-instantiate
Nov 12, 2026
Merged

hyperpolymath merged 2 commits into
mainfrom
chore/upgrade-and-instantiate

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

Summary

occupancy-types was cut on 2026-09-27 from template commit 05bf1b97 and never minted. That template era used .a2ml metadata and a deed with no (canon) or (provenance). The owner chose "upgrade, then instantiate" (selector, 2026-11-12). This is the same three-way upgrade as hyperpolymath/czech-file-knife#15:

  • Base: 05bf1b97.
  • Theirs: a fresh mint of the current template 840ac25.
  • Ours: main.

Changes

  • Project work is byte-identical to main (86 files the repo added):
    • src/OccupancyTypes, src/julia, src/occ and src/stackcert
    • examples/session_ir, tests/reject, and the repo's own scripts and tests
    • ULTRAPLAN.md, PROOF-STATUS.adoc, the agda-lib file and CostStateSeparation.lean
    • the docs under docs/recon, docs/status and docs/reports
    • the lean4-manifest, proofs and session-ir workflows
  • Merged by hand (31 files):
    • The workflows take the current template, with the repo's Dependabot bumps applied again (smtp-notify-action v0.5.1, action-gh-release v3.0.4, sonarqube-scan-action v8.4.1).
    • actions.lock gains records for the repo's own workflows and setup-julia.
    • README.adoc keeps the repo's sections.
    • Justfile keeps the repo's test, check and check-ir recipes.
    • CITATION.cff keeps the ORCID.
    • root-allow.txt keeps the repo's entries.
    • The proof MANIFESTs keep the repo's notes.
  • Template layer:
    • 448 unchanged template files take the current template, and 136 new template files are added.
    • All 41 old-era template .a2ml files are removed, including the repo's edited CLADE, rsr-profile and CLADE template. No .a2ml file is created.
  • mise.toml (commit a2e0a8d): keeps the repo's julia = "1.10". The template detects Julia only from a root Project.toml, and this repo's is in src/julia/. The owner chose to fix detection in rsr-template-repo. Until that lands, scripts/check-mise-language.sh reports julia as declared for no detected language.
  • Deed: occupancy-types_chora.deed.
    • (canon) is 2.1.5.
    • (provenance) and :parent-pin name 840ac25 (tree a7e2cb8).
    • (variant (paths)) declares the repo's additions and divergences.
    • Identity and clade stay UNASSIGNED.
  • Licence: LICENSE and LICENSES/ are unchanged. LICENSE.adoc is added byte-identical to the template's copy (MPL-2.0). The owner approved this file for this repo in the selector.

RSR Quality Checklist

Required

  • No project file removed or rewritten.
  • No licence change. One licence file is added with the owner's approval.

As Applicable

  • CLAUDE.md and the repository map are regenerated by the current recipes.

Testing

Run locally after git add -A. These pass:

  • check-lock-sync.sh
  • Canon lockstep: "implements the canon at HEAD"
  • check-root-shape.sh
  • just validate-claude-md
  • just verify
  • check-mint-drift.sh against 840ac25: "identical to a replay of the mint"
  • KYAML on the 3 converted container files, with yq 4.53.3
  • use_template_mint_test.sh, chain_mint_test.sh and the other estate-rules bash steps
  • tests/scan_postulates_test.sh

These still fail on the repo's own files, and main fails them too. The owner chose to fix them in a follow-up PR after this one:

  • check-no-placeholders.sh: a literal {{PROJECT_NAME}} in PROOF-STATUS.adoc.
  • check-adoc-renders.sh: docs/EXPLAINME.adoc and docs/recon/ULTRA-PLAN-2026-10-04.adoc.
  • check-ijson-jcs.sh: examples/session_ir/manifest.json and src/stackcert/lake-manifest.json.
  • check-mise-language.sh: the julia line, until the template fix lands.

Not run, because julia, lean, idris2 and agda are not installed here: the Julia, Idris, Lean and Agda checks.

Screenshots

Not applicable.


Generated by Claude Code

occupancy-types was cut from template 05bf1b9 (tree a6fcc53, the repo's
first commit tree; two blobs of that commit are absent from the read-only
template clone, so the base was exported from the repo's own first commit)
and never minted. Three-way upgrade: base = that tree, theirs = a fresh
mint of template main 840ac25 (slug occupancy-types, identity and clade
UNASSIGNED), ours = main.

- Repo-authored work (Agda OccupancyTypes modules, src/julia, src/occ,
  src/stackcert, examples/session_ir, tests/reject, ULTRAPLAN.md,
  PROOF-STATUS.adoc, docs it wrote, its three workflows, scripts) is
  byte-identical to main.
- Files the repo never changed take the current minted template,
  including its deletions: every old-era template .a2ml file is gone and
  none is created (the repo carried no .a2ml of its own).
  occupancy-types_chora.deed carries (canon) 2.1.5 and (provenance)
  main@840ac25 / tree a7e2cb8, :parent-pin = 840ac25.
- Merged by hand: CITATION.cff (ORCID kept), root-allow.txt (ULTRAPLAN,
  PROOF-STATUS, agda-lib entries re-added), README.adoc (own text plus the
  template's K9 badge), Justfile (own test recipe and check/check-ir kept),
  CHANGELOG.adoc, .gitignore, docs/EXPLAINME.adoc, check-no-md-in-docs.sh,
  both proof MANIFESTs (CostStateSeparation entry kept), and the Dependabot
  bumps re-applied on the current workflows and actions.lock
  (smtp-notify 0.5.1, action-gh-release 3.0.4, sonarqube-scan 8.4.1;
  entries added for the repo's three workflows).
- Not carried: the repo's codeql 4.38.3 bump (the template already pins
  4.39.1), its standards-reusable pin bumps (the current workflows no
  longer call them), and julia = "1.10" in mise.toml (mise.toml is now
  rendered from detected languages; Julia is not detected).
- LICENSE and LICENSES/ unchanged; LICENSE.adoc added byte-identical to
  the template's.
- (variant (paths)) declares the repo's additions and divergences.
- CLAUDE.md and the repository map regenerated with the current recipes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0136P7ZohGxQnA5cbBZyi8Wp
The template upgrade rendered mise.toml from detected languages, and
detection only finds a Project.toml at depth 1; this repo's is at
src/julia/. That dropped the repo's own `julia = "1.10"`. The owner chose
to keep it here and fix detection in rsr-template-repo; until that lands
scripts/check-mise-language.sh reports julia as declared for no detected
language.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0136P7ZohGxQnA5cbBZyi8Wp
@coderabbitai

coderabbitai Bot commented Nov 12, 2026 •

Copy link
Copy Markdown
Contributor

Important

Review skipped

Too many files!

This PR contains 418 files, which is 318 over the limit of 100.

To get a review, reduce the PR to 100 files or fewer by splitting it into smaller PRs or changing its base branch.

Upgrade to a paid plan to raise the limit.

Usage-priced reviews support at most 300 files.

Run configuration

Commits

Reviewing files that changed from the base of the PR and between 0c845e4 and a2e0a8d.

Files ignored due to path filters: 3

  • .github/workflows/actions.lock is excluded by !**/*.lock
  • archetypes/julia-library/overlay/.github/workflows/actions.lock is excluded by !**/*.lock
  • mise.lock is excluded by !**/*.lock
Files selected for processing: 418

  • .clinerules
  • .coderabbit.yaml
  • .cursorrules
  • .devcontainer/Containerfile
  • .devcontainer/README.adoc
  • .devcontainer/devcontainer.json
  • .devcontainer/docker/devcontainer.json
  • .editorconfig
  • .envrc
  • .gitattributes
  • .gitbot-fleet/enrolment.json
  • .gitbot-fleet/report-backs/README.md
  • .github/CODEOWNERS
  • .github/CODE_OF_CONDUCT.md
  • .github/CONTRIBUTING.md
  • .github/GOVERNANCE.adoc
  • .github/ISSUE_TEMPLATE/config.yml
  • .github/SECURITY.md
  • .github/SUPPORT.md
  • .github/actions/squabble/README.adoc
  • .github/actions/squabble/action.yml
  • .github/actions/squabble/install.sh
  • .github/actions/squabble/run.sh
  • .github/copilot-instructions.md
  • .github/dependabot.yml
  • .github/hooks/pre-push
  • .github/hooks/scan-secrets.sh
  • .github/hooks/validate-deed.sh
  • .github/hooks/validate-k9.sh
  • .github/label-classifier.json
  • .github/labels.json
  • .github/pull_request_template.md
  • .github/rulesets/Immutable-Tags.json
  • .github/rulesets/README.adoc
  • .github/rulesets/base.json
  • .github/rulesets/branch-floor.json
  • .github/rulesets/require-linear-history.json
  • .github/rulesets/require-signed-commits.json
  • .github/settings.yml
  • .github/workflows/README.adoc
  • .github/workflows/build-notification.yml
  • .github/workflows/codeql.yml
  • .github/workflows/deed-validate.yml
  • .github/workflows/dependabot-automerge.yml
  • .github/workflows/docker-build.yml
  • .github/workflows/dogfood-gate.yml
  • .github/workflows/dogfood-summary.yml
  • .github/workflows/dot-wellknown-enforcement.yml
  • .github/workflows/e2e.yml.template
  • .github/workflows/eclexiaiser-validate.yml
  • .github/workflows/empty-linter.yml
  • .github/workflows/estate-rules.yml
  • .github/workflows/fork-governance.yml
  • .github/workflows/governance.yml
  • .github/workflows/groove-check.yml
  • .github/workflows/guix-policy.yml
  • .github/workflows/hypatia-scan.yml
  • .github/workflows/k9-validate.yml
  • .github/workflows/label-triage.yml
  • .github/workflows/labels.yml
  • .github/workflows/lock-sync-gate.yml
  • .github/workflows/main-estate-audit.yml
  • .github/workflows/mirror.yml
  • .github/workflows/ossf-best-practices.yml
  • .github/workflows/pages.yml
  • .github/workflows/proven-tests.yml
  • .github/workflows/push-email-notify.yml
  • .github/workflows/quality.yml
  • .github/workflows/release.yml
  • .github/workflows/rsr-compliance-canary.yml
  • .github/workflows/runtime-policy.yml
  • .github/workflows/rust-ci.yml
  • .github/workflows/scorecard.yml
  • .github/workflows/secret-scanner.yml
  • .github/workflows/security-policy.yml
  • .github/workflows/sonarqube.yml
  • .github/workflows/squabble.yml
  • .github/workflows/static-analysis-gate.yml
  • .github/workflows/verdict-grid-publish.yml
  • .github/workflows/workflow-linter.yml
  • .gitignore
  • .hypatia-ignore
  • .machine_readable/ENSAID_CONFIG.a2ml
  • .machine_readable/README.adoc
  • .machine_readable/ai/AI.a2ml
  • .machine_readable/ai/PLACEHOLDERS.adoc
  • .machine_readable/ai/README.adoc
  • .machine_readable/arrival-pack/README.adoc
  • .machine_readable/arrival-pack/arrival-pack.ncl
  • .machine_readable/arrival-pack/claude-md.k9.ncl
  • .machine_readable/arrival-pack/extract.sh
  • .machine_readable/arrival-pack/generate.sh
  • .machine_readable/arrival-pack/verify.sh
  • .machine_readable/bot_directives/README.adoc
  • .machine_readable/bot_directives/coverage.a2ml
  • .machine_readable/bot_directives/debt.a2ml
  • .machine_readable/bot_directives/methodology.a2ml
  • .machine_readable/bot_directives/rra.a2ml
  • .machine_readable/coaptation/README.adoc
  • .machine_readable/coaptation/coapt.k9.ncl
  • .machine_readable/coaptation/coapt.ncl
  • .machine_readable/coaptation/coapt.sh
  • .machine_readable/coaptation/core/Coaptation.idr
  • .machine_readable/coaptation/extract-clauses.sh
  • .machine_readable/coaptation/extract-facts.sh
  • .machine_readable/coaptation/receipts/latest.a2ml
  • .machine_readable/coaptation/receipts/latest.toml
  • .machine_readable/coaptation/verify.sh
  • .machine_readable/coaptation/witness-map.ncl
  • .machine_readable/compliance/reuse/dep5
  • .machine_readable/configs/eclexiaiser.toml
  • .machine_readable/configs/git-cliff/cliff.toml
  • .machine_readable/configs/stapeln.toml
  • .machine_readable/contractiles/INDEX.a2ml
  • .machine_readable/contractiles/Justfile
  • .machine_readable/contractiles/README.adoc
  • .machine_readable/contractiles/_base.ncl
  • .machine_readable/contractiles/adjust/Adjustfile.a2ml
  • .machine_readable/contractiles/adjust/adjust.k9.ncl
  • .machine_readable/contractiles/adjust/adjust.manifest.a2ml
  • .machine_readable/contractiles/adjust/adjust.ncl
  • .machine_readable/contractiles/bust/Bustfile.a2ml
  • .machine_readable/contractiles/bust/bust.k9.ncl
  • .machine_readable/contractiles/bust/bust.manifest.a2ml
  • .machine_readable/contractiles/bust/bust.ncl
  • .machine_readable/contractiles/dust/Dustfile.a2ml
  • .machine_readable/contractiles/dust/dust.k9.ncl
  • .machine_readable/contractiles/dust/dust.manifest.a2ml
  • .machine_readable/contractiles/dust/dust.ncl
  • .machine_readable/contractiles/intend/Intentfile.a2ml
  • .machine_readable/contractiles/intend/intend.k9.ncl
  • .machine_readable/contractiles/intend/intend.manifest.a2ml
  • .machine_readable/contractiles/intend/intend.ncl
  • .machine_readable/contractiles/must/Mustfile.a2ml
  • .machine_readable/contractiles/must/must.k9.ncl
  • .machine_readable/contractiles/must/must.manifest.a2ml
  • .machine_readable/contractiles/must/must.ncl
  • .machine_readable/contractiles/trust/Trustfile.a2ml
  • .machine_readable/contractiles/trust/trust.k9.ncl
  • .machine_readable/contractiles/trust/trust.manifest.a2ml
  • .machine_readable/contractiles/trust/trust.ncl
  • .machine_readable/descriptiles/AGENTIC.a2ml
  • .machine_readable/descriptiles/CLADE.a2ml
  • .machine_readable/descriptiles/ECOSYSTEM.a2ml
  • .machine_readable/descriptiles/META.a2ml
  • .machine_readable/descriptiles/NEUROSYM.a2ml
  • .machine_readable/descriptiles/PLAYBOOK.a2ml
  • .machine_readable/descriptiles/README.adoc
  • .machine_readable/descriptiles/STATE.a2ml
  • .machine_readable/descriptiles/anchors/ANCHOR.a2ml
  • .machine_readable/descriptiles/anchors/README.adoc
  • .machine_readable/descriptiles/provisioning_praxis.deed
  • .machine_readable/integrations/feedback-o-tron.a2ml
  • .machine_readable/integrations/groove.a2ml
  • .machine_readable/integrations/proven.a2ml
  • .machine_readable/integrations/verisimdb.a2ml
  • .machine_readable/integrations/vexometer.a2ml
  • .machine_readable/mint-verbatim.txt
  • .machine_readable/policies/MAINTENANCE-AXES.a2ml
  • .machine_readable/policies/MAINTENANCE-CHECKLIST.a2ml
  • .machine_readable/policies/README.adoc
  • .machine_readable/policies/SOFTWARE-DEVELOPMENT-APPROACH.a2ml
  • .machine_readable/policies/hypatia-rule-order.json
  • .machine_readable/required-contexts-allow.txt
  • .machine_readable/root-allow.txt
  • .machine_readable/rsr-profile.a2ml
  • .machine_readable/scripts/maintenance/maint-assault.sh
  • .machine_readable/self-validating/README.adoc
  • .machine_readable/self-validating/examples/ci-config.k9.ncl
  • .machine_readable/self-validating/examples/project-metadata.k9.ncl
  • .machine_readable/self-validating/examples/setup-repo.k9.ncl.in
  • .machine_readable/self-validating/methodology-guard.k9.ncl
  • .machine_readable/self-validating/template-hunt.k9.ncl.in
  • .machine_readable/self-validating/template-kennel.k9.ncl.in
  • .machine_readable/self-validating/template-yard.k9.ncl.in
  • .machine_readable/testing/adversarial-content.k9.ncl
  • .mailmap
  • .tool-versions
  • .windsurfrules
  • CHANGELOG.adoc
  • CITATION.cff
  • CLAUDE.md
  • CODE_OF_CONDUCT.adoc
  • CONTRIBUTING.adoc
  • GEMINI.md
  • Justfile
  • LICENSE.adoc
  • README.adoc
  • SUPPORT.adoc
  • archetypes/README.adoc
  • archetypes/julia-library/ARCHETYPE.a2ml
  • archetypes/julia-library/overlay/.github/workflows/julia-ci.yml.in
  • archetypes/julia-library/overlay/.github/workflows/julia-docs.yml.in
  • archetypes/julia-library/overlay/Project.toml.in
  • archetypes/julia-library/overlay/src/PACKAGE.jl.in
  • archetypes/julia-library/overlay/test/cases/smoke.jl
  • archetypes/julia-library/overlay/test/runtests.jl
  • benches/baseline.json
  • benches/template_bench.sh
  • build/channels.scm
  • build/container/Containerfile
  • build/container/README.adoc
  • build/container/compose.example.yaml
  • build/container/compose.yaml
  • build/container/entrypoint.sh
  • build/container/stapeln/.gatekeeper.yaml
  • build/container/stapeln/compose.toml
  • build/container/stapeln/ct-build.sh
  • build/container/stapeln/deploy.k9.ncl
  • build/container/stapeln/deploy.k9.ncl.in
  • build/container/stapeln/manifest.toml
  • build/container/stapeln/rokur.toml
  • build/container/stapeln/vordr.toml
  • build/docs-seed/README.adoc
  • build/guix.scm
  • build/just/assess.just
  • build/just/container.just
  • build/just/groove.just
  • build/just/provision-check.sh
  • build/just/provision-lib.sh
  • build/just/provision-modes.sh
  • build/just/provision.just
  • build/just/repo-init.just
  • build/just/validate.just
  • build/manifest.scm
  • build/templates/CLADE.a2ml.in
  • ci/.pre-commit-config.yaml
  • coordination.k9.ncl
  • docs/AFFIRMATION.adoc
  • docs/AI-INSTALL-README-SECTION.adoc
  • docs/AI_INSTALLATION_GUIDE.adoc
  • docs/HYPATIA-RULE-ORDER.adoc
  • docs/MAINTAINERS.adoc
  • docs/QUICKSTART.adoc
  • docs/RSR-PHILOSOPHY.adoc
  • docs/RSR_OUTLINE.adoc
  • docs/SETUP.adoc
  • docs/architecture.adoc
  • docs/architecture/REPOSITORY-MAP.adoc
  • docs/architecture/THREAT-MODEL.adoc
  • docs/attribution/CITATIONS.adoc
  • docs/contributing.adoc
  • docs/decisions/0000-template.adoc
  • docs/decisions/0001-adopt-rsr-standard.adoc
  • docs/decisions/0001-template.adoc
  • docs/decisions/0002-variant-contract.adoc
  • docs/decisions/0003-forge-and-sustain-lifecycle.adoc
  • docs/developer/ABI-FFI-README.adoc
  • docs/governance/CRG-AUDIT-TEMPLATE.adoc
  • docs/governance/CRG-CRITERIA.a2ml
  • docs/governance/MAINTENANCE-CHECKLIST.adoc
  • docs/governance/TEMPLATE-LINEAGE-AUDIT.adoc
  • docs/governance/TEMPLATE-STANDARDS-AUDIT.adoc
  • docs/governance/TSDM.a2ml
  • docs/governance/TSDM.adoc
  • docs/onboarding/QUICKSTART-DEV.adoc
  • docs/onboarding/QUICKSTART-MAINTAINER.adoc
  • docs/onboarding/QUICKSTART-USER.adoc
  • docs/onboarding/llm-warmup-dev.adoc
  • docs/onboarding/llm-warmup-maintainer.adoc
  • docs/onboarding/llm-warmup-user.adoc
  • docs/practice/AI-CONVENTIONS.adoc
  • docs/practice/STATE-VISUALIZER-GUIDE.adoc
  • docs/practice/ci-cost-reduction.adoc
  • docs/proposals/root-cleanup.adoc
  • docs/reports/audit/pillar-audit-2026-04-15.adoc
  • docs/reports/compliance/RSR-TEMPLATE-DAMAGE-2026-10-30.adoc
  • docs/status/PROOF-NEEDS.adoc
  • docs/status/PROOF-STATUS.adoc
  • docs/status/READINESS.adoc
  • docs/status/ROADMAP.adoc
  • docs/status/TEST-NEEDS.adoc
  • docs/troubleshooting.adoc
  • docs/usage.adoc
  • launcher.sh
  • mise.toml
  • occupancy-types_chora.deed
  • rsr-template-repo_chora.deed
  • scripts/bench-stats.jq
  • scripts/campaigns/repo-map-trim.campaign
  • scripts/campaigns/www-bundle.campaign
  • scripts/canon-pin-check.sh
  • scripts/chain-mint.sh
  • scripts/check-bench-regression.sh
  • scripts/check-container-pins.sh
  • scripts/check-escape-hatches.sh
  • scripts/check-hypatia-ignore.sh
  • scripts/check-hypatia-rule-order.sh
  • scripts/check-ijson-jcs.sh
  • scripts/check-invisible-characters.sh
  • scripts/check-lock-sync.sh
  • scripts/check-mint-drift.sh
  • scripts/check-mint-tokens.sh
  • scripts/check-mise-language.sh
  • scripts/check-no-a2ml.sh
  • scripts/check-no-placeholders.sh
  • scripts/check-no-vlang.sh
  • scripts/check-proofs.sh
  • scripts/check-required-contexts.sh
  • scripts/check-spdx-headers.sh
  • scripts/check-template-conformance.sh
  • scripts/check-variant-drift.sh
  • scripts/check-workflow-edges.sh
  • scripts/compute-bench-baseline.sh
  • scripts/deed-clause.sh
  • scripts/deed-field.sh
  • scripts/emit-aggregate-inputs.sh
  • scripts/format-container-kyaml.sh
  • scripts/gen-repo-map.sh
  • scripts/governance-badge.js
  • scripts/ijson-jcs-cli.js
  • scripts/kyaml-format.sh
  • scripts/lock-sync-fix.sh
  • scripts/merge-actions-lock.rs
  • scripts/migrate-wellknown-to-www.sh
  • scripts/pin-container-digests.sh
  • scripts/prune-archetype-modules.sh
  • scripts/prune-dependabot-ecosystems.rs
  • scripts/render-mise.sh
  • scripts/replay-mint.sh
  • scripts/resolve-template-pin.sh
  • scripts/rsr-campaign.sh
  • scripts/run-proven-suite.sh
  • scripts/rust-tool.sh
  • scripts/scan-dangerous.sh
  • scripts/strip-instruction-blocks.rs
  • scripts/survey-template-damage.sh
  • scripts/sweep-wellknown.sh
  • scripts/uuid5-url.sh
  • scripts/validate-template.sh
  • scripts/verdict-grid-lane.sh
  • session/custom-checks.k9.ncl
  • sonar-project.properties
  • src/interface/Abi/Foreign.idr
  • src/interface/Abi/Types.idr
  • src/interface/ffi/build.zig
  • src/interface/ffi/src/main.zig
  • tests/aspect_tests.sh
  • tests/e2e.sh
  • tests/e2e/chain_mint_test.sh
  • tests/e2e/julia_fmt_test.sh
  • tests/e2e/julia_mint_test.sh
  • tests/e2e/language_profiles_mint_test.sh
  • tests/e2e/template_instantiation_test.sh
  • tests/e2e/use_template_mint_test.sh
  • tests/ffi_strings_test.sh
  • tests/invisible-characters-test.sh
  • tests/proven_suite_test.sh
  • tests/run_proven_suite_test.sh
  • tests/workflows/archetype_lock_merge_test.sh
  • tests/workflows/canon_pin_check_test.sh
  • tests/workflows/chain_tree_of_test.sh
  • tests/workflows/check_ijson_jcs_test.sh
  • tests/workflows/check_lock_sync_test.sh
  • tests/workflows/check_no_a2ml_test.sh
  • tests/workflows/coaptation_families_test.sh
  • tests/workflows/container_kyaml_test.sh
  • tests/workflows/deed_clause_test.sh
  • tests/workflows/dependabot_automerge_test.sh
  • tests/workflows/devcontainer_test.sh
  • tests/workflows/governance_badge_test.js
  • tests/workflows/governance_badge_test.sh
  • tests/workflows/governance_policy_test.sh
  • tests/workflows/hypatia_ignore_test.sh
  • tests/workflows/hypatia_rule_order_test.sh
  • tests/workflows/julia_library_test.sh
  • tests/workflows/kyaml_format_test.sh
  • tests/workflows/kyaml_ratchet_test.sh
  • tests/workflows/lock_sync_fix_test.sh
  • tests/workflows/migrate_wellknown_date_test.sh
  • tests/workflows/mint_cleanup_test.sh
  • tests/workflows/mint_gates_test.sh
  • tests/workflows/non_interactive_mint_test.sh
  • tests/workflows/replay_mint_env_test.sh
  • tests/workflows/repo_map_newline_test.sh
  • tests/workflows/repo_map_quotes_test.sh
  • tests/workflows/resolve_template_pin_test.sh
  • tests/workflows/rhodibot_canary_test.sh
  • tests/workflows/rsr_campaign_tokenless_test.sh
  • tests/workflows/runtime_policy_fold_test.sh
  • tests/workflows/secret_scanner_contract_test.sh
  • tests/workflows/self_name_pass_test.sh
  • tests/workflows/squabble_gate_test.sh
  • tests/workflows/template_conformance_test.sh
  • tests/workflows/uuid5_url_test.sh
  • tests/workflows/validate_workflows_test.sh
  • tests/workflows/verdict_grid_test.sh
  • tests/workflows/workflow_edges_test.sh
  • tests/workflows/workflow_evidence_test.sh
  • tests/workflows/workflow_gap_fixes_test.sh
  • verification/proofs/README.adoc
  • verification/proofs/agda/MANIFEST
  • verification/proofs/idris2/ABI/Compliance.idr
  • verification/proofs/idris2/ABI/Foreign.idr
  • verification/proofs/idris2/ABI/Layout.idr
  • verification/proofs/idris2/ABI/Platform.idr
  • verification/proofs/idris2/ABI/Pointers.idr
  • verification/proofs/idris2/MANIFEST
  • verification/proofs/idris2/Types.idr
  • verification/proofs/lean4/MANIFEST
  • verification/proofs/tlaplus/MC.cfg
  • verification/proofs/tlaplus/MC.tla
  • verification/proofs/tlaplus/StateMachine.tla
  • www/.well-known/ai.txt
  • www/.well-known/aibdp.json
  • www/.well-known/humans.txt
  • www/.well-known/security.txt
  • www/README.adoc
  • www/dns/records/example.invalid.zone
  • www/errors/430.html
  • www/policies/acceptable-use.adoc
  • www/policies/ai-use.adoc
  • www/policies/privacy.adoc
  • www/public/index.html
  • www/schemas/aibdp-schema-v0.2.json
  • www/tests/check-bind-safety.sh
  • www/tests/controls/aibdp-bad-status.control.json
  • www/tests/controls/aibdp-enforce-430.control.json

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

Copy link
Copy Markdown
Owner Author

Expected red checks on this PR. Each one comes from a file the repo wrote, and main fails it too. The owner chose to fix them in a follow-up PR (selector, 2026-11-12):

  • openssf-compliance / placeholder gate: PROOF-STATUS.adoc contains the literal text {{PROJECT_NAME}}. On main the same gate flags 95 files, this one among them.
  • Estate Rules, AsciiDoc render: docs/EXPLAINME.adoc has a level-0 heading, and docs/recon/ULTRA-PLAN-2026-10-04.adoc has a table separator error.
  • Estate Rules, I-JSON/JCS: examples/session_ir/manifest.json and src/stackcert/lake-manifest.json are not canonical.
  • check-mise-language.sh: the kept julia = "1.10" line, until rsr-template-repo also detects a Project.toml below the root (in progress).

Any other red check is new, and I will investigate it.


Generated by Claude Code

@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

Comment thread LICENSE.adoc

This Source Code Form is subject to the terms of the Mozilla Public
License, v. 2.0. If a copy of the MPL was not distributed with this
file, You can obtain one at http://mozilla.org/MPL/2.0/.

Copy link
Copy Markdown
Owner Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is not fixed here, on purpose. LICENSE.adoc line 360 is the MPL-2.0 Exhibit A text ("You can obtain one at http://mozilla.org/MPL/2.0/"), copied byte for byte from the template. Licence text is owner-only (doctrine 6), and an inline pragma would also change the licence file. The same alert appears in every repo that carries the template's LICENSE.adoc (for example czech-file-knife#15). The fix at source is for Hypatia's http_in_docs rule to skip licence files. This thread is left open for the owner's decision.


Generated by Claude Code

@sonarqubecloud

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
D Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

@hyperpolymath
hyperpolymath marked this pull request as ready for review November 12, 2026 16:41
@chatgpt-codex-connector

Copy link
Copy Markdown
Codex Review Summary: ❌ Failed

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ❌ Failed 2026-11-12T16:41:25.975871Z
We couldn’t complete this review. Comment @codex review to try again.
a2e0a8d Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

@hyperpolymath
hyperpolymath merged commit c7f252d into main Nov 12, 2026
41 of 46 checks passed
@hyperpolymath
hyperpolymath deleted the chore/upgrade-and-instantiate branch November 12, 2026 16:41
hyperpolymath added a commit that referenced this pull request Nov 12, 2026
)

## Summary

Follow-up to #21. That PR merged before its
last commit arrived. This PR carries that commit, plus the gate fixes in
the owner's files that the owner approved (selector, 2026-11-12: "Fix in
a follow-up PR").

## Changes

1. `chore: move the template pin to rsr-template-repo 2f54c7b` (the
commit that missed #21):
- Applies template commits 6c845c9 (the session-start hook) and 2f54c7b
(the Sonar fixes from hyperpolymath/rsr-template-repo#343). This removes
the template Sonar findings on main.
- Moves `:parent-pin` and `:template-commit` to 2f54c7b, and
`:template-tree` to match.
   - Declares `mise.toml` as diverged (it carries `julia = "1.10"`).
2. `fix: make the owner-file gates pass`:
- JCS for `examples/session_ir/manifest.json` and
`src/stackcert/lake-manifest.json`.
- `docs/EXPLAINME.adoc`: one level-0 title. The project title replaces
the template title, and "RSR template claims" becomes a level-1 section.
- `docs/recon/ULTRA-PLAN-2026-10-04.adoc`: remove a stray `|===` that
closed a table one row early.
- `PROOF-STATUS.adoc`: name the README placeholder without the literal
`{{...}}` token.

No content in these files changes meaning. The edits are layout and
serialisation only.

## RSR Quality Checklist

### Required

- [x] No gate weakened or skipped.

### As Applicable

- [x] Template pin and drift declaration updated.

## Testing

All run locally on this branch:

- `scripts/check-ijson-jcs.sh --enforce`: 18 of 18 canonical.
- `scripts/check-adoc-renders.sh` (asciidoctor 2.0.26): all 177 tracked
.adoc files render clean.
- `scripts/check-no-placeholders.sh`: PASS.
- `scripts/check-mint-drift.sh` against rsr-template-repo 2f54c7b: PASS,
identical to a replay of the mint modulo declared variant paths.

The `mise.toml` Julia line still needs
hyperpolymath/rsr-template-repo#345 (Julia detection below the root)
before `check-mise-language.sh` passes here.

## Screenshots

Not applicable.

---
_Generated by [Claude
Code](https://claude.ai/code/session_0136P7ZohGxQnA5cbBZyi8Wp)_

---------

Co-authored-by: Claude <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants