fix: remove banned V-language v-adapter (route via zig-unified-api-adapter)#65
Merged
Conversation
…apter) V-language is banned estate-wide; the sanctioned connector layer is zig-unified-api-adapter. Removed src/interfaces/v-adapter/ (9 V source files: boj.v, graphql.v, grpc.v, overlay.v, overlay_graphql.v, overlay_grpc.v, rest.v, tentacles.v, typell.v - all "module main" V code). No wiring removal was needed: the directory was never a Cargo workspace member (Cargo.toml lists only graphql/grpc/rest under src/interfaces/), had no mod declaration, and was unreferenced by any tracked build file, Justfile, or CI workflow. git grep for v-adapter/v_adapter in tracked non-data files returns no remaining references. No dangling paths left behind. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
🔍 Hypatia Security ScanFindings: 187 issues detected
View findings[
{
"reason": "Action haskell-actions/setup@v2 needs attention",
"type": "unpinned_action",
"file": "agda-meta-checker.yml",
"action": "pin_sha",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Action actions/cache@v4 needs attention",
"type": "unpinned_action",
"file": "agda-meta-checker.yml",
"action": "pin_sha",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Action hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml@main needs attention",
"type": "unpinned_action",
"file": "security-scan.yml",
"action": "pin_sha",
"rule_module": "workflow_audit",
"severity": "high"
},
{
"reason": "Workflow executes remote script directly (curl/wget piped to shell). Download, verify checksum/signature, then execute.",
"type": "download_then_run",
"file": "mirror.yml",
"action": "verify_download_integrity",
"rule_module": "workflow_audit",
"severity": "high"
},
{
"reason": "believe_me undermines formal verification (1 occurrences, CWE-704)",
"type": "believe_me",
"file": "/home/runner/work/echidna/echidna/src/abi/TypeLLForeign.idr",
"action": "flag",
"rule_module": "code_safety",
"severity": "critical"
},
{
"reason": "believe_me undermines formal verification (2 occurrences, CWE-704)",
"type": "believe_me",
"file": "/home/runner/work/echidna/echidna/src/abi/CoprocessorForeign.idr",
"action": "flag",
"rule_module": "code_safety",
"severity": "critical"
},
{
"reason": "believe_me undermines formal verification (1 occurrences, CWE-704)",
"type": "believe_me",
"file": "/home/runner/work/echidna/echidna/src/abi/Overlay.idr",
"action": "flag",
"rule_module": "code_safety",
"severity": "critical"
},
{
"reason": "believe_me undermines formal verification (1 occurrences, CWE-704)",
"type": "believe_me",
"file": "/home/runner/work/echidna/echidna/src/abi/TentaclesForeign.idr",
"action": "flag",
"rule_module": "code_safety",
"severity": "critical"
},
{
"reason": "believe_me undermines formal verification (1 occurrences, CWE-704)",
"type": "believe_me",
"file": "/home/runner/work/echidna/echidna/src/abi/OverlayForeign.idr",
"action": "flag",
"rule_module": "code_safety",
"severity": "critical"
},
{
"reason": "believe_me undermines formal verification (1 occurrences, CWE-704)",
"type": "believe_me",
"file": "/home/runner/work/echidna/echidna/src/abi/BojForeign.idr",
"action": "flag",
"rule_module": "code_safety",
"severity": "critical"
}
]Powered by Hypatia Neurosymbolic CI/CD Intelligence |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
V-language is banned estate-wide; the sanctioned connector layer is
zig-unified-api-adapter. This PR removes the V-language adapter from echidna — the worst single V-lang footprint in the estate (9 live source files).Changes
Removed
src/interfaces/v-adapter/(9 V source files, allmodule main):boj.v,graphql.v,grpc.v,overlay.v,overlay_graphql.v,overlay_grpc.v,rest.v,tentacles.v,typell.v.Why no wiring changes were needed
The directory was completely unwired:
Cargo.tomllists onlysrc/interfaces/{graphql,grpc,rest}(plus thecrates/*), neverv-adapter.moddeclaration referencing it anywhere.Justfile,build.rs, or CI workflow referencesv-adapter/v_adapter.src/interfaces/README.mddocuments only graphql/grpc/rest and contains no v-adapter reference.git grepforv-adapter/v_adapteracross tracked non-data files returns no remaining references after removal. No dangling paths, no// TODOstubs required.Validation
module main, V syntax), not Coq.cargo build --offlinefails on a pre-existingschemarsdependency-resolution issue in the unrelatedechidna-mcpcrate (offline cache miss, not a regression —v-adapterwas never a Cargo member so its removal cannot affect the build graph).🤖 Generated with Claude Code