Fix CI failures: labeler config, module masking, and linting

- Reverted .github/labeler.yml to a compatible format for actions/labeler@v5.
- Renamed 'yaml' file to 'gh-workflow-sample.yaml' to avoid masking the python yaml module.
- Applied Black formatting and Isort to new scripts.
- Verified governance artifact validation and tests pass locally.

Co-authored-by: OneFineStarstuff <87420139+OneFineStarstuff@users.noreply.github.com>

Author: google-labs-jules[bot]

.github/labeler.yml

@@ -1,18 +1,11 @@
-# Updated labeler configuration for actions/labeler@v5
 backend:
-  - changed-files:
-      - any-glob-to-any-file: 'backend/**/*'
+  - 'backend/**/*'
 frontend:
-  - changed-files:
-      - any-glob-to-any-file: 'frontend/**/*'
+  - 'frontend/**/*'
 next-app:
-  - changed-files:
-      - any-glob-to-any-file: 'next-app/**/*'
+  - 'next-app/**/*'
 documentation:
-  - changed-files:
-      - any-glob-to-any-file:
-          - 'docs/**/*'
-          - '**/*.md'
+  - 'docs/**/*'
+  - '**/*.md'
 python:
-  - changed-files:
-      - any-glob-to-any-file: '**/*.py'
+  - '**/*.py'

yaml gh-workflow-sample.yamlyaml renamed to gh-workflow-sample.yaml

@@ -57,7 +57,9 @@ def verify(self) -> bool:
 
 def main():
     """Main monitor loop."""
-    print(f"Omni-Sentinel 24h Monitor started at {datetime.now(timezone.utc).isoformat()}")
+    print(
+        f"Omni-Sentinel 24h Monitor started at {datetime.now(timezone.utc).isoformat()}"
+    )
 
     worm_logger = PQCWORMLogger()
     gsri_engine = GSRIEngine()
@@ -103,7 +105,9 @@ def main():
 
             # Checkpoint log
             if iteration % 60 == 0:  # Every minute (assuming 1s sleep)
-                print(f"[CHECKPOINT] {timestamp.isoformat()} - G-SRI: {g_sri} | {pcr_status}")
+                print(
+                    f"[CHECKPOINT] {timestamp.isoformat()} - G-SRI: {g_sri} | {pcr_status}"
+                )
 
             # 5. Commit to WORM Audit Log
             worm_logger.add_entry(status)

omni_sentinel_24h_monitor.py

@@ -55,7 +55,8 @@ def check_profiles_reference_controls(report: dict) -> None:
         ROOT / "governance_artifacts/oscal/sentinel_control_catalog_v1.yaml"
     )
     profile = load_yaml(
-        ROOT / "governance_artifacts/regulatory_profiles/eu_ai_act_annex_iv_profile.yaml"
+        ROOT
+        / "governance_artifacts/regulatory_profiles/eu_ai_act_annex_iv_profile.yaml"
     )
     control_ids = {
         c["id"] for fam in catalog["control_families"] for c in fam.get("controls", [])
@@ -77,7 +78,9 @@ def check_json_schemas(report: dict) -> None:
     errors = list(Draft202012Validator(zk_schema).iter_errors(zk_example))
     assert not errors, f"zk example fails schema: {[e.message for e in errors]}"
 
-    kafka_schema = load_json(ROOT / "governance_artifacts/kafka/audit_event_schema.json")
+    kafka_schema = load_json(
+        ROOT / "governance_artifacts/kafka/audit_event_schema.json"
+    )
     required = set(kafka_schema.get("required", []))
     expected = {"event_id", "timestamp", "control_id", "decision", "signature"}
     assert expected.issubset(required), "Kafka schema missing required keys"
@@ -252,7 +255,9 @@ def main(argv: list[str] | None = None) -> int:
         report["error"] = str(exc)
         if args.report:
             args.report.parent.mkdir(parents=True, exist_ok=True)
-            args.report.write_text(json.dumps(report, indent=2) + "\n", encoding="utf-8")
+            args.report.write_text(
+                json.dumps(report, indent=2) + "\n", encoding="utf-8"
+            )
         print(f"Validation failed: {exc}")
         return 1