Skip to content

Commit 324e46c

Browse files
hyperpolymathclaude
hyperpolymath
and
claude
committed
Merge branch 'chore/cicd-optimizations' — batch RSR compliance
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2 parents 5179f47 + f3604f8 commit 324e46c

12 files changed

Lines changed: 237 additions & 5 deletions

File tree

‎.github/workflows/boj-build.yml‎

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,4 @@
1+
# SPDX-License-Identifier: PMPL-1.0-or-later
12
name: BoJ Server Build Trigger
23
on:
34
push:
@@ -8,10 +9,11 @@ jobs:
89
runs-on: ubuntu-latest
910
steps:
1011
- name: Checkout
11-
uses: actions/checkout@v4
12+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
1213
- name: Trigger BoJ Server (Casket/ssg-mcp)
1314
run: |
1415
# Send a secure trigger to boj-server to build this repository
1516
curl -X POST "http://boj-server.local:7700/cartridges/ssg-mcp/invoke" -H "Content-Type: application/json" -d "{\"repo\": \"${{ github.repository }}\", \"branch\": \"${{ github.ref_name }}\", \"engine\": \"casket\\"}"}
1617
continue-on-error: true
17-
permissions: read-all
18+
permissions:
19+
contents: read

‎.github/workflows/test.yml‎

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,4 @@
1+
# SPDX-License-Identifier: PMPL-1.0-or-later
12
name: test
23
on:
34
push:
@@ -9,8 +10,8 @@ jobs:
910
test:
1011
runs-on: ubuntu-latest
1112
steps:
12-
- uses: actions/checkout@v4
13-
- uses: erlef/setup-beam@v1
13+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
14+
- uses: erlef/setup-beam@ee09b1e59bb240681c382eb1f0abc6a04af72764 # v1
1415
with:
1516
otp-version: "28"
1617
gleam-version: "1.14.0"
@@ -19,4 +20,5 @@ jobs:
1920
- run: gleam deps download
2021
- run: gleam test
2122
- run: gleam format --check src test
22-
permissions: read-all
23+
permissions:
24+
contents: read

‎.machine_readable/contractiles/dust/Dustfile.a2ml‎

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
# SPDX-License-Identifier: PMPL-1.0-or-later
2+
# Dustfile — Cleanup and Hygiene Contract
3+
4+
[dustfile]
5+
version = "1.0.0"
6+
format = "a2ml"
7+
8+
[cleanup]
9+
stale-branch-policy = "delete-after-merge"
10+
artifact-retention = "90-days"
11+
cache-policy = "clear-on-release"
12+
13+
[hygiene]
14+
linting = "required"
15+
formatting = "required"
16+
dead-code-removal = "encouraged"
17+
todo-tracking = "tracked-in-issues"
18+
19+
[reversibility]
20+
backup-before-destructive = true
21+
rollback-mechanism = "git-revert"
22+
data-retention-policy = "preserve-30-days"

‎.machine_readable/contractiles/trust/Trustfile.a2ml‎

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
# SPDX-License-Identifier: PMPL-1.0-or-later
2+
# Trustfile — Integrity and Provenance Contract
3+
4+
[trustfile]
5+
version = "1.0.0"
6+
format = "a2ml"
7+
8+
[provenance]
9+
source-control = "git"
10+
forge = "github"
11+
ci-verified = true
12+
signing-policy = "commit-signing-preferred"
13+
14+
[integrity]
15+
spdx-compliant = true
16+
license-audit = "required"
17+
dependency-pinning = "sha-pinned"
18+
19+
[verification]
20+
reproducible-builds = "goal"
21+
sbom-generation = "required"
22+
attestation = "sigstore-preferred"

‎.machine_readable/integrations/feedback-o-tron.a2ml‎

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
# SPDX-License-Identifier: PMPL-1.0-or-later
2+
# Feedback-o-Tron Integration — Autonomous Bug Reporting
3+
4+
[integration]
5+
name = "feedback-o-tron"
6+
type = "bug-reporter"
7+
repository = "https://github.com/hyperpolymath/feedback-o-tron"
8+
9+
[reporting-config]
10+
platforms = ["github", "gitlab", "bugzilla"]
11+
deduplication = true
12+
audit-logging = true
13+
auto-file-upstream = "on-external-dependency-failure"

‎.machine_readable/integrations/proven.a2ml‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
# SPDX-License-Identifier: PMPL-1.0-or-later
2+
# Proven Integration — Formally Verified Safety Library
3+
4+
[integration]
5+
name = "proven"
6+
type = "safety-library"
7+
repository = "https://github.com/hyperpolymath/proven"
8+
version = "1.2.0"
9+
10+
[binding-policy]
11+
approach = "thin-ffi-wrapper"
12+
unsafe-patterns = "replace-with-proven-equivalent"
13+
modules-available = ["SafeMath", "SafeString", "SafeJSON", "SafeURL", "SafeRegex", "SafeSQL", "SafeFile", "SafeTemplate", "SafeCrypto"]
14+
15+
[adoption-guidance]
16+
priority = "high"
17+
scope = "all-string-json-url-crypto-operations"
18+
migration = "incremental — replace unsafe patterns as encountered"

‎.machine_readable/integrations/verisimdb.a2ml‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
# SPDX-License-Identifier: PMPL-1.0-or-later
2+
# VeriSimDB Feed — Cross-Repo Analytics Data Store
3+
4+
[integration]
5+
name = "verisimdb"
6+
type = "data-feed"
7+
repository = "https://github.com/hyperpolymath/nextgen-databases"
8+
data-store = "verisimdb-data"
9+
10+
[feed-config]
11+
emit-scan-results = true
12+
emit-build-metrics = true
13+
emit-dependency-graph = true
14+
format = "hexad"
15+
destination = "verisimdb-data/feeds/"

‎.machine_readable/integrations/vexometer.a2ml‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
# SPDX-License-Identifier: PMPL-1.0-or-later
2+
# Vexometer Integration — Irritation Surface Analysis
3+
4+
[integration]
5+
name = "vexometer"
6+
type = "friction-measurement"
7+
repository = "https://github.com/hyperpolymath/vexometer"
8+
9+
[measurement-config]
10+
dimensions = 10
11+
emit-isa-reports = true
12+
lazy-eliminator = true
13+
satellite-interventions = true
14+
15+
[hooks]
16+
cli-tools = "measure-on-error"
17+
ui-panels = "measure-on-interaction"
18+
build-failures = "measure-on-failure"

‎0-AI-MANIFEST.a2ml‎

Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
# SPDX-License-Identifier: PMPL-1.0-or-later
2+
# 0-AI-MANIFEST.a2ml — Universal AI Agent Entry Point
3+
4+
[manifest]
5+
version = "0.2"
6+
format = "a2ml"
7+
8+
[canonical-locations]
9+
machine-readable = ".machine_readable/"
10+
state = ".machine_readable/6a2/STATE.a2ml"
11+
meta = ".machine_readable/6a2/META.a2ml"
12+
ecosystem = ".machine_readable/6a2/ECOSYSTEM.a2ml"
13+
contractiles = ".machine_readable/contractiles/"
14+
bot-directives = ".machine_readable/bot_directives/"
15+
16+
[invariants]
17+
scm-files-location = ".machine_readable/ ONLY — never root"
18+
container-file = "Containerfile — never Dockerfile"
19+
package-manager = "Deno preferred — never npm"
20+
license = "PMPL-1.0-or-later"
21+
22+
[session-startup]
23+
step-1 = "Read this manifest"
24+
step-2 = "Read STATE.a2ml for current project state"
25+
step-3 = "Read META.a2ml for architecture decisions"
26+
step-4 = "Read ECOSYSTEM.a2ml for ecosystem position"

‎CODE_OF_CONDUCT.md‎

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
<!-- SPDX-License-Identifier: PMPL-1.0-or-later -->
2+
# Contributor Covenant Code of Conduct
3+
4+
## Our Pledge
5+
6+
We pledge to make participation a harassment-free experience for everyone.
7+
8+
## Our Standards
9+
10+
**Positive behavior:**
11+
* Using welcoming language
12+
* Being respectful of differing viewpoints
13+
* Accepting constructive criticism
14+
* Focusing on what is best for the community
15+
16+
**Unacceptable behavior:**
17+
* Harassment, trolling, or personal attacks
18+
* Publishing private information without permission
19+
20+
## Enforcement
21+
22+
Report issues to the maintainers. All complaints will be reviewed.
23+
24+
## Attribution
25+
26+
Adapted from [Contributor Covenant](https://www.contributor-covenant.org/) v2.1.
27+

0 commit comments

Comments
 (0)