Skip to content

fix: finish the template upgrade and make the owner-file gates pass - #22

Merged
hyperpolymath merged 2 commits into
mainfrom
fix/complete-upgrade
Nov 12, 2026
Merged

hyperpolymath merged 2 commits into
mainfrom
fix/complete-upgrade

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

Summary

Follow-up to #21. That PR merged before its last commit arrived. This PR carries that commit, plus the gate fixes in the owner's files that the owner approved (selector, 2026-11-12: "Fix in a follow-up PR").

Changes

  1. chore: move the template pin to rsr-template-repo 2f54c7b (the commit that missed chore: upgrade to the current RSR template (840ac25), then instantiate #21):
  2. fix: make the owner-file gates pass:
    • JCS for examples/session_ir/manifest.json and src/stackcert/lake-manifest.json.
    • docs/EXPLAINME.adoc: one level-0 title. The project title replaces the template title, and "RSR template claims" becomes a level-1 section.
    • docs/recon/ULTRA-PLAN-2026-10-04.adoc: remove a stray |=== that closed a table one row early.
    • PROOF-STATUS.adoc: name the README placeholder without the literal {{...}} token.

No content in these files changes meaning. The edits are layout and serialisation only.

RSR Quality Checklist

Required

  • No gate weakened or skipped.

As Applicable

  • Template pin and drift declaration updated.

Testing

All run locally on this branch:

  • scripts/check-ijson-jcs.sh --enforce: 18 of 18 canonical.
  • scripts/check-adoc-renders.sh (asciidoctor 2.0.26): all 177 tracked .adoc files render clean.
  • scripts/check-no-placeholders.sh: PASS.
  • scripts/check-mint-drift.sh against rsr-template-repo 2f54c7b: PASS, identical to a replay of the mint modulo declared variant paths.

The mise.toml Julia line still needs hyperpolymath/rsr-template-repo#345 (Julia detection below the root) before check-mise-language.sh passes here.

Screenshots

Not applicable.


Generated by Claude Code

rsr-template-repo#343 (2f54c7b) fixed or justified the 10 SonarCloud
findings every child inherits; this branch was minted from 840ac25, so
Sonar rated it D on new code. Apply the two template commits since the
pin, 6c845c9 (SessionStart hook for commit signing) and 2f54c7b (the
Sonar fixes), unchanged, and repoint (provenance) and :parent-pin to
2f54c7b (tree 1d693c6). mise.toml is declared diverged: it keeps the
repo's julia line (a2e0a8d).

check-mint-drift.sh against 2f54c7b: identical modulo declared paths.
Canon lockstep, root shape, lock sync, validate-claude-md,
validate-repo-map and template_instantiation_test pass.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0136P7ZohGxQnA5cbBZyi8Wp
- JCS: reserialise examples/session_ir/manifest.json and
  src/stackcert/lake-manifest.json (check-ijson-jcs --enforce).
- docs/EXPLAINME.adoc: one level-0 title only. The project title
  replaces the template title, and "RSR template claims" becomes a
  level-1 section (asciidoctor: level 0 needs doctype book).
- docs/recon/ULTRA-PLAN-2026-10-04.adoc: remove a stray |=== that
  closed the table one row early ("table missing leading separator").
- PROOF-STATUS.adoc: name the README placeholder without the literal
  token, so check-no-placeholders passes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0136P7ZohGxQnA5cbBZyi8Wp
@coderabbitai

coderabbitai Bot commented Nov 12, 2026 •

Copy link
Copy Markdown
Contributor

Explain Change →

Caution

Review failed

The pull request is closed.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@github-actions

github-actions Bot commented Nov 12, 2026 •

Copy link
Copy Markdown

Hypatia grid orange

🟠 indeterminate · commit e0864e0042eb · run 43263951440 · scope: this change (18 file(s))

Advisory: 11 row(s), worst 🔴 high (0 critical, 9 high in grid scope) — reported, never grading the change.

Unique graded findings across gating and advisory rows: 42 (42 reporter observations; 20 without sufficient identity to corroborate). Row counts remain per reporter; unique totals do not change gating.
Raw Hypatia alert-derived observations: 11 (code-scanning, Dependabot and secret-scanning; some may also be in SARIF; not an extra total).

Reporter Gate Status Critical High Medium Minor Since previous revision
Hypatia scan gating 🟠 indeterminate 0 0 0 0 — same commit (no revision comparison)
panic-attack assail advisory 🟡 medium 0 0 1 0 — same commit (no revision comparison)
pons asinorum advisory 🟢 clean 0 0 0 0 — same commit (no revision comparison)
echidnabot advisory ⚪ not applicable 0 0 0 0 — same commit (no revision comparison)
rhodibot (RSR compliance) advisory 🟢 clean 0 0 0 0 — same commit (no revision comparison)
panicbot advisory ⚪ not applicable 0 0 0 0 — same commit (no revision comparison)
sustainabot advisory ⚪ not applicable 0 0 0 0 — same commit (no revision comparison)
glambot (presentation quality) advisory 🔵 minor 0 0 0 9 — same commit (no revision comparison)
seambot advisory ⚪ not applicable 0 0 0 0 — same commit (no revision comparison)
finishingbot (release readiness) advisory 🔴 high 0 9 23 0 — same commit (no revision comparison)
cipherbot advisory ⚪ not applicable 0 0 0 0 — same commit (no revision comparison)
accessibilitybot advisory ⚪ not applicable 0 0 0 0 — same commit (no revision comparison)
Hypatia scan: error — the scanner produced no SARIF projection
  • 🟠 indeterminate: the scanner produced no SARIF projection
panic-attack assail: 17 finding(s)
  • medium InsecureProtocol — tests/workflows/container_kyaml_test.sh — 5 HTTP (non-HTTPS) URLs in tests/workflows/container_kyaml_test.sh
  • 16 further finding(s) in files this change does not touch: reported, not graded (0 critical, 0 high).
pons asinorum: 9 finding(s)
  • 9 further finding(s) in files this change does not touch: reported, not graded (0 critical, 0 high).
echidnabot: not_applicable — template default: enrol once the repository carries proofs and an ECHIDNA engine is configured
  • ⚪ not applicable: template default: enrol once the repository carries proofs and an ECHIDNA engine is configured
rhodibot (RSR compliance): 13 finding(s)
  • 13 further finding(s) in files this change does not touch: reported, not graded (0 critical, 12 high).
panicbot: not_applicable — panic-attack is already graded by the verdict grid's own panic-attack row, from static-analysis-gate.yml evidence; enrolling panicbot would report one scanner twice and give two rows that can disagree
  • ⚪ not applicable: panic-attack is already graded by the verdict grid's own panic-attack row, from static-analysis-gate.yml evidence; enrolling panicbot would report one scanner twice and give two rows that can disagree
sustainabot: not_applicable — reserved fleet slot; no adapter exists (gitbot-fleet bots/sustainabot/README.adoc)
  • ⚪ not applicable: reserved fleet slot; no adapter exists (gitbot-fleet bots/sustainabot/README.adoc)
glambot (presentation quality): 100 finding(s)
  • info GS-001 — Install git-seo for comprehensive SEO analysis: https://github.com/hyperpolymath/git-seo
  • info MACH-007 — ECOSYSTEM.scm not found in .machine_readable/ directory.
  • info MACH-007 — META.scm not found in .machine_readable/ directory.
  • info MACH-007 — STATE.scm not found in .machine_readable/ directory.
  • info MACH-005 — No robots.txt found. Consider adding one for crawler control.
  • info VIS-005 — PROOF-STATUS.adoc:5 — Line 83 characters exceeds max length of 80.
  • info VIS-005 — docs/recon/ULTRA-PLAN-2026-10-04.adoc:10 — Line 87 characters exceeds max length of 80.
  • info VIS-005 — docs/EXPLAINME.adoc:4 — Line 124 characters exceeds max length of 80.
  • info VIS-005 — docs/architecture/REPOSITORY-MAP.adoc:26 — Line 81 characters exceeds max length of 80.
  • 91 further finding(s) in files this change does not touch: reported, not graded (0 critical, 2 high).
seambot: not_applicable — template default: enrol once a seam register exists at spec/seams/seam-register.json
  • ⚪ not applicable: template default: enrol once a seam register exists at spec/seams/seam-register.json
finishingbot (release readiness): 189 finding(s)
  • high V1-DOC-ROADMAP.adoc — Required file ROADMAP.adoc not found (Project roadmap).
  • high TOOL-001 — .tool-versions file not found for asdf/mise version management.
  • high SCM-001-NEUROSYM.scm — Required SCM file NEUROSYM.scm not found (Neurosymbolic AI documentation).
  • high SCM-001-AGENTIC.scm — Required SCM file AGENTIC.scm not found (Agentic AI integration documentation).
  • high SCM-001-PLAYBOOK.scm — Required SCM file PLAYBOOK.scm not found (Operational playbooks and procedures).
  • high SCM-001-ECOSYSTEM.scm — Required SCM file ECOSYSTEM.scm not found (Project's place in the ecosystem).
  • high SCM-001-META.scm — Required SCM file META.scm not found (Meta-level information and architectural decisions).
  • high SCM-001-STATE.scm — Required SCM file STATE.scm not found (Project state and progress tracking).
  • high PH-100 — Found 131 placeholders, exceeds maximum allowed (0)
  • medium V1-COM-CONTRIBUTING.md — CONTRIBUTING.md file not found (Contribution guidelines).
  • medium V1-COM-CODE_OF_CONDUCT.md — CODE_OF_CONDUCT.md file not found (Code of conduct).
  • medium V1-SEC-001 — SECURITY.md not found for responsible disclosure.
  • medium TEST-001 — Could not determine if this is a Rust or Deno project.
  • medium REL-004 — No SECURITY.md file found
  • medium PH-004 — occupancy-types_chora.deed:941 — Found 'HACK' in: :marker-scan ("TODO" "FIXME" "XXX" "HACK" "STUB" "PARTIAL")
  • medium PH-003 — occupancy-types_chora.deed:941 — Found 'XXX' in: :marker-scan ("TODO" "FIXME" "XXX" "HACK" "STUB" "PARTIAL")
  • medium PH-002 — occupancy-types_chora.deed:941 — Found 'FIXME' in: :marker-scan ("TODO" "FIXME" "XXX" "HACK" "STUB" "PARTIAL")
  • medium PH-001 — occupancy-types_chora.deed:941 — Found 'TODO' in: :marker-scan ("TODO" "FIXME" "XXX" "HACK" "STUB" "PARTIAL")
  • medium PH-004 — occupancy-types_chora.deed:838 — Found 'HACK' in: :marker_scan_required ("TODO" "FIXME" "XXX" "HACK" "STUB" "PARTIAL")
  • medium PH-003 — occupancy-types_chora.deed:838 — Found 'XXX' in: :marker_scan_required ("TODO" "FIXME" "XXX" "HACK" "STUB" "PARTIAL")
  • 12 more graded finding(s); see the structured report in the artifact.
  • 157 further finding(s) in files this change does not touch: reported, not graded (0 critical, 4 high).
cipherbot: not_applicable — template default: enrol once the repository implements cryptography
  • ⚪ not applicable: template default: enrol once the repository implements cryptography
accessibilitybot: not_applicable — template default: enrol once the repository serves HTML
  • ⚪ not applicable: template default: enrol once the repository serves HTML

Scope: static findings reported by each row's tool at the named commit. The table grades only findings in files this change touches, so the colour answers "does this change introduce anything?", not "what does the whole repository still carry?". Standing findings are counted in each accordion and in report.json; the baseline filter remains the place where acknowledged debt is recorded. The lane state is the worst GATING row; advisory rows are listed and counted but never set it. Purple, red, yellow and blue grade the worst GRADED finding present; orange is evidence missing, malformed or a scanner that did not run; grey is an explicit scope exclusion with its reason. No row is a security certification. report.json, badge.json and the raw findings are in the verdict-grid artifact on the linked run.

@sonarqubecloud

Copy link
Copy Markdown

@hyperpolymath
hyperpolymath marked this pull request as ready for review November 12, 2026 16:57
@hyperpolymath
hyperpolymath merged commit 6f58ca0 into main Nov 12, 2026
46 checks passed
@chatgpt-codex-connector

Copy link
Copy Markdown
Codex Review Summary: ❌ Failed

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ❌ Failed 2026-11-12T16:57:17.766110Z
We couldn’t complete this review. Comment @codex review to try again.
e0864e0 Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

@hyperpolymath
hyperpolymath deleted the fix/complete-upgrade branch November 12, 2026 16:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants