[hyperpolymath]

Summary

hyperpolymath/rsr-template-repo#345 (merged) fixed Julia detection at source, for this repository. This PR brings that fix here, so the julia = "1.10" line in mise.toml passes check-mise-language.sh.

Changes

• Applies template commits 9059284 (fix(canon): an instance's canon pin is provenance; a lagging pin passes with a notice rsr-template-repo#344) and 83c3cf4 (fix(detect): find a Julia Project.toml up to three levels deep rsr-template-repo#345) to the 5 template files they change.
• Moves :parent-pin and :template-commit to 83c3cf4, and :template-tree to its tree.
• The new comment in scripts/canon-pin-check.sh names this project, because the mint renders rsr-template-repo to the project name there. That keeps the file identical to a replay of the mint.

RSR Quality Checklist

Required

• No gate weakened or skipped.

As Applicable

• Template pin updated.

Testing

Run locally on this branch:

• scripts/check-mise-language.sh: PASS (declared languages idris2, julia, zig). It fails on main.
• scripts/check-mint-drift.sh against rsr-template-repo 83c3cf4: PASS.
• tests/workflows/canon_pin_check_test.sh: 19 passed.
• tests/workflows/mint_gates_test.sh: 1 of 43 controls fails (2 of 39 on main). The failure is "SPDX passes on the template tree": src/julia/bin/sessionir.jl has no SPDX header. That is an owner file, and licence headers are owner-only, so this PR does not add one.

Screenshots

Not applicable.

---

Generated by Claude Code

[coderabbitai]

Caution

Review failed

The pull request is closed.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[github-actions]

🟠 indeterminate · commit 0c3399968e10 · run 43265974122 · scope: this change (6 file(s))

Advisory: 11 row(s), worst 🔴 high (0 critical, 9 high in grid scope) — reported, never grading the change.

Unique graded findings across gating and advisory rows: 37 (37 reporter observations; 19 without sufficient identity to corroborate). Row counts remain per reporter; unique totals do not change gating.
Raw Hypatia alert-derived observations: 11 (code-scanning, Dependabot and secret-scanning; some may also be in SARIF; not an extra total).

Reporter	Gate	Status	Critical	High	Medium	Minor	Since previous revision
Hypatia scan	gating	🟠 indeterminate	0	0	0	0	— same commit (no revision comparison)
panic-attack assail	advisory	🟢 clean	0	0	0	0	— same commit (no revision comparison)
pons asinorum	advisory	🟢 clean	0	0	0	0	— same commit (no revision comparison)
echidnabot	advisory	⚪ not applicable	0	0	0	0	— same commit (no revision comparison)
rhodibot (RSR compliance)	advisory	🟢 clean	0	0	0	0	— same commit (no revision comparison)
panicbot	advisory	⚪ not applicable	0	0	0	0	— same commit (no revision comparison)
sustainabot	advisory	⚪ not applicable	0	0	0	0	— same commit (no revision comparison)
glambot (presentation quality)	advisory	🔵 minor	0	0	0	5	— same commit (no revision comparison)
seambot	advisory	⚪ not applicable	0	0	0	0	— same commit (no revision comparison)
finishingbot (release readiness)	advisory	🔴 high	0	9	23	0	— same commit (no revision comparison)
cipherbot	advisory	⚪ not applicable	0	0	0	0	— same commit (no revision comparison)
accessibilitybot	advisory	⚪ not applicable	0	0	0	0	— same commit (no revision comparison)

Hypatia scan: error — the scanner produced no SARIF projection

• 🟠 indeterminate: the scanner produced no SARIF projection

panic-attack assail: 17 finding(s)

• 17 further finding(s) in files this change does not touch: reported, not graded (0 critical, 0 high).

pons asinorum: 9 finding(s)

• 9 further finding(s) in files this change does not touch: reported, not graded (0 critical, 0 high).

echidnabot: not_applicable — template default: enrol once the repository carries proofs and an ECHIDNA engine is configured

• ⚪ not applicable: template default: enrol once the repository carries proofs and an ECHIDNA engine is configured

rhodibot (RSR compliance): 13 finding(s)

• 13 further finding(s) in files this change does not touch: reported, not graded (0 critical, 12 high).

panicbot: not_applicable — panic-attack is already graded by the verdict grid's own panic-attack row, from static-analysis-gate.yml evidence; enrolling panicbot would report one scanner twice and give two rows that can disagree

• ⚪ not applicable: panic-attack is already graded by the verdict grid's own panic-attack row, from static-analysis-gate.yml evidence; enrolling panicbot would report one scanner twice and give two rows that can disagree

sustainabot: not_applicable — reserved fleet slot; no adapter exists (gitbot-fleet bots/sustainabot/README.adoc)

• ⚪ not applicable: reserved fleet slot; no adapter exists (gitbot-fleet bots/sustainabot/README.adoc)

glambot (presentation quality): 100 finding(s)

• info GS-001 — Install git-seo for comprehensive SEO analysis: https://github.com/hyperpolymath/git-seo
• info MACH-007 — ECOSYSTEM.scm not found in .machine_readable/ directory.
• info MACH-007 — META.scm not found in .machine_readable/ directory.
• info MACH-007 — STATE.scm not found in .machine_readable/ directory.
• info MACH-005 — No robots.txt found. Consider adding one for crawler control.
• 95 further finding(s) in files this change does not touch: reported, not graded (0 critical, 2 high).

seambot: not_applicable — template default: enrol once a seam register exists at spec/seams/seam-register.json

• ⚪ not applicable: template default: enrol once a seam register exists at spec/seams/seam-register.json

finishingbot (release readiness): 189 finding(s)

• high V1-DOC-ROADMAP.adoc — Required file ROADMAP.adoc not found (Project roadmap).
• high TOOL-001 — .tool-versions file not found for asdf/mise version management.
• high SCM-001-NEUROSYM.scm — Required SCM file NEUROSYM.scm not found (Neurosymbolic AI documentation).
• high SCM-001-AGENTIC.scm — Required SCM file AGENTIC.scm not found (Agentic AI integration documentation).
• high SCM-001-PLAYBOOK.scm — Required SCM file PLAYBOOK.scm not found (Operational playbooks and procedures).
• high SCM-001-ECOSYSTEM.scm — Required SCM file ECOSYSTEM.scm not found (Project's place in the ecosystem).
• high SCM-001-META.scm — Required SCM file META.scm not found (Meta-level information and architectural decisions).
• high SCM-001-STATE.scm — Required SCM file STATE.scm not found (Project state and progress tracking).
• high PH-100 — Found 131 placeholders, exceeds maximum allowed (0)
• medium V1-COM-CONTRIBUTING.md — CONTRIBUTING.md file not found (Contribution guidelines).
• medium V1-COM-CODE_OF_CONDUCT.md — CODE_OF_CONDUCT.md file not found (Code of conduct).
• medium V1-SEC-001 — SECURITY.md not found for responsible disclosure.
• medium TEST-001 — Could not determine if this is a Rust or Deno project.
• medium REL-004 — No SECURITY.md file found
• medium PH-004 — occupancy-types_chora.deed:941 — Found 'HACK' in: :marker-scan ("TODO" "FIXME" "XXX" "HACK" "STUB" "PARTIAL")
• medium PH-003 — occupancy-types_chora.deed:941 — Found 'XXX' in: :marker-scan ("TODO" "FIXME" "XXX" "HACK" "STUB" "PARTIAL")
• medium PH-002 — occupancy-types_chora.deed:941 — Found 'FIXME' in: :marker-scan ("TODO" "FIXME" "XXX" "HACK" "STUB" "PARTIAL")
• medium PH-001 — occupancy-types_chora.deed:941 — Found 'TODO' in: :marker-scan ("TODO" "FIXME" "XXX" "HACK" "STUB" "PARTIAL")
• medium PH-004 — occupancy-types_chora.deed:838 — Found 'HACK' in: :marker_scan_required ("TODO" "FIXME" "XXX" "HACK" "STUB" "PARTIAL")
• medium PH-003 — occupancy-types_chora.deed:838 — Found 'XXX' in: :marker_scan_required ("TODO" "FIXME" "XXX" "HACK" "STUB" "PARTIAL")
• 12 more graded finding(s); see the structured report in the artifact.
• 157 further finding(s) in files this change does not touch: reported, not graded (0 critical, 4 high).

cipherbot: not_applicable — template default: enrol once the repository implements cryptography

• ⚪ not applicable: template default: enrol once the repository implements cryptography

accessibilitybot: not_applicable — template default: enrol once the repository serves HTML

• ⚪ not applicable: template default: enrol once the repository serves HTML

Scope: static findings reported by each row's tool at the named commit. The table grades only findings in files this change touches, so the colour answers "does this change introduce anything?", not "what does the whole repository still carry?". Standing findings are counted in each accordion and in report.json; the baseline filter remains the place where acknowledged debt is recorded. The lane state is the worst GATING row; advisory rows are listed and counted but never set it. Purple, red, yellow and blue grade the worst GRADED finding present; orange is evidence missing, malformed or a scanner that did not run; grey is an explicit scope exclusion with its reason. No row is a security certification. report.json, badge.json and the raw findings are in the verdict-grid artifact on the linked run.

[sonarqubecloud]

Quality Gate passed

Issues
10 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[chatgpt-codex-connector]

Codex Review Summary: ❌ Failed

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	❌ Failed 2026-11-12T17:18:13.592835Z We couldn’t complete this review. Comment @codex review to try again.	0c33999	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.