Skip to content

Commit ee0969c

Browse files
Merge pull request #19 from hyperpolymath/claude/safedom-res-stale-sweep
security: standardize secret scanning on TruffleHog
2 parents 10e937c + 1759efe commit ee0969c

93 files changed

Lines changed: 1032 additions & 123 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

.github/CODEOWNERS

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
# SPDX-License-Identifier: MPL-2.0
2+
# CODEOWNERS - Define code review assignments for GitHub
3+
# See: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
4+
5+
# Default: sole maintainer for all files
6+
* @hyperpolymath
7+
8+
# Security-sensitive files require explicit ownership
9+
SECURITY.md @hyperpolymath
10+
.github/workflows/ @hyperpolymath
11+
.machine_readable/ @hyperpolymath
12+
contractiles/ @hyperpolymath
13+
14+
# License files
15+
LICENSE @hyperpolymath
16+
LICENSES/ @hyperpolymath
17+
18+
# Configuration
19+
.gitignore @hyperpolymath
20+
.github/ @hyperpolymath
21+
22+
# Documentation
23+
README* @hyperpolymath
24+
CONTRIBUTING* @hyperpolymath
25+
CODE_OF_CONDUCT* @hyperpolymath
26+
GOVERNANCE* @hyperpolymath
27+
MAINTAINERS* @hyperpolymath
28+
CHANGELOG* @hyperpolymath
29+
ROADMAP* @hyperpolymath
30+
31+
# Build and CI
32+
Justfile @hyperpolymath
33+
Makefile @hyperpolymath
34+
*.sh @hyperpolymath

.github/ISSUE_TEMPLATE/bug_report.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,7 @@
1+
<!--
2+
SPDX-License-Identifier: MPL-2.0
3+
Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
4+
-->
15
---
26
name: Bug report
37
about: Create a report to help us improve

.github/ISSUE_TEMPLATE/custom.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,7 @@
1+
<!--
2+
SPDX-License-Identifier: MPL-2.0
3+
Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
4+
-->
15
---
26
name: Custom issue template
37
about: Describe this issue template's purpose here.

.github/ISSUE_TEMPLATE/feature_request.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,7 @@
1+
<!--
2+
SPDX-License-Identifier: MPL-2.0
3+
Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
4+
-->
15
---
26
name: Feature request
37
about: Suggest an idea for this project

.github/copilot/coding-agent.yml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
mcp_servers:
2+
boj-server:
3+
command: npx
4+
args: ["-y", "@hyperpolymath/boj-server@latest"]
5+
env:
6+
BOJ_URL: http://localhost:7700

.github/workflows/governance.yml

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -11,16 +11,14 @@
1111
# (rust-ci, codeql, dependabot, release, scan/mirror/pages plumbing).
1212

1313
name: Governance
14-
1514
on:
1615
push:
1716
branches: [main, master]
1817
pull_request:
1918
workflow_dispatch:
20-
2119
permissions:
2220
contents: read
23-
2421
jobs:
2522
governance:
26-
uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@main
23+
uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@861b5e911d9e5dcfb3c0ab3dd2a9a3c8fd0a1613
24+
timeout-minutes: 10
Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
# AI Manifest for 6a2 Directory
2+
3+
## Purpose
4+
5+
This manifest declares the AI-assistant context for the 6a2 machine-readable metadata directory.
6+
7+
## Canonical Locations
8+
9+
The 6 core A2ML files MUST exist in this directory:
10+
1. AGENTIC.a2ml
11+
2. ECOSYSTEM.a2ml
12+
3. META.a2ml
13+
4. NEUROSYM.a2ml
14+
5. PLAYBOOK.a2ml
15+
6. STATE.a2ml
16+
17+
## Invariants
18+
19+
- No duplicate files in root directory
20+
- Single source of truth: this directory is authoritative
21+
- No stale metadata
22+

.machine_readable/6a2/README.adoc

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
// SPDX-License-Identifier: MPL-2.0
2+
// Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
3+
# A2ML 6a2 Directory
4+
5+
This directory contains the 6 core A2ML machine-readable metadata files for this repository.
6+
7+
## Files
8+
9+
- `AGENTIC.a2ml` - AI agent operational gating, safety controls
10+
- `ECOSYSTEM.a2ml` - Project ecosystem position, relationships, explicit boundaries
11+
- `META.a2ml` - Architecture decisions (ADRs), development practices, design rationale
12+
- `NEUROSYM.a2ml` - Symbolic semantics, composition algebra
13+
- `PLAYBOOK.a2ml` - Executable plans, operational runbooks
14+
- `STATE.a2ml` - Project state, phase, milestones, session history
15+
16+
## Standards Compliance
17+
18+
These files follow the A2ML Format Family specification from:
19+
https://github.com/hyperpolymath/standards/tree/main/a2ml
20+
Lines changed: 72 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,72 @@
1+
# SPDX-License-Identifier: MPL-2.0
2+
# Adjustfile — Drift-tolerance contract for rsr-template-repo
3+
# Author: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
4+
#
5+
# Cumulative-drift catchment: tolerance bands + corrective actions.
6+
# Authority: advisory (Yard) — continue-with-warnings; auto_fix where deterministic.
7+
# Run with: adjust check
8+
# Fix with: adjust fix (applies deterministic patches; advisory otherwise)
9+
10+
@abstract:
11+
Drift tolerances and corrective actions for rsr-template-repo. Unlike
12+
MUST (hard gate), ADJUST tracks cumulative drift against tolerance bands
13+
and proposes corrective actions. Advisory — it warns and trends, it does
14+
not block.
15+
@end
16+
17+
## Template Drift
18+
19+
### placeholder-drift
20+
- description: Template placeholders should be replaced when copied
21+
- tolerance: 0 placeholder markers in copied repos
22+
- corrective: Search and replace all {{PLACEHOLDER}} markers
23+
- severity: advisory
24+
- notes: This check only applies to repos that copied from this template
25+
26+
### template-version-drift
27+
- description: Template version should match RSR spec version
28+
- tolerance: Template version matches current RSR spec
29+
- corrective: Update template to match latest RSR spec
30+
- severity: advisory
31+
32+
## Documentation Drift
33+
34+
### readme-completeness
35+
- description: README should document all template features
36+
- tolerance: README covers all contractiles and directory structure
37+
- corrective: Update README.adoc with missing sections
38+
- severity: advisory
39+
40+
### example-accuracy
41+
- description: Examples in documentation should match actual template content
42+
- tolerance: All code examples in docs are accurate
43+
- corrective: Audit and fix examples in documentation
44+
- severity: advisory
45+
46+
## Structural Drift
47+
48+
### contractile-sync
49+
- description: All contractiles should have matching a2ml and ncl implementations
50+
- tolerance: Every .a2ml has a corresponding .ncl
51+
- corrective: Generate missing .ncl files from .a2ml
52+
- severity: advisory
53+
54+
### no-broken-symlinks
55+
- description: No broken symbolic links in template structure
56+
- tolerance: 0 broken symlinks
57+
- corrective: Run symlink-check script
58+
- severity: advisory
59+
60+
## Accessibility Drift
61+
62+
### adoc-not-md
63+
- description: Template docs should prefer AsciiDoc
64+
- tolerance: New prose docs are *.adoc
65+
- corrective: Convert any new *.md to *.adoc
66+
- severity: advisory
67+
68+
### spdx-header-consistency
69+
- description: All template files have correct SPDX headers
70+
- tolerance: 0 files missing SPDX-License-Identifier
71+
- corrective: Add SPDX headers to files that need them
72+
- severity: advisory
Lines changed: 99 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,99 @@
1+
# SPDX-License-Identifier: MPL-2.0
2+
# Intentfile (A2ML Canonical) — north-star contractile for rsr-template-repo
3+
# Author: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
4+
#
5+
# Paired runner: intend.ncl
6+
# Verb: intend
7+
#
8+
# Semantics: North-star contractile. Declares BOTH concrete committed
9+
# next-actions AND horizon aspirations the project wishes to
10+
# become. Two sections share one file because they answer
11+
# the same question at different ranges:
12+
# [[intents]] — "we WILL do this; track progress"
13+
# status: declared → in_progress → done |
14+
# deferred | retired
15+
# [[wishes]] — "we WISH this were true; revisit later"
16+
# status: declared → in_progress → achieved |
17+
# abandoned
18+
# grouped by horizon: near / mid / far.
19+
# Non-gating — this is a report, not a gate. See the `must`
20+
# contractile for hard gates.
21+
22+
@abstract:
23+
North-star contractile for rsr-template-repo. This repository is the
24+
canonical template for Rhodium Standard Repository compliance. It provides
25+
the scaffold that all hyperpolymath repos should copy and customize.
26+
@end
27+
28+
## Purpose
29+
30+
The rsr-template-repo serves as the master template for all hyperpolymath
31+
repositories. It contains the complete set of contractile files, machine-readable
32+
specifications, and governance documentation that define the Rhodium Standard.
33+
34+
Every new repository in the hyperpolymath estate should be initialized by
35+
copying this template and substituting the placeholder values with
36+
repo-specific content.
37+
38+
## Anti-Purpose
39+
40+
This repository is NOT:
41+
- A general-purpose project scaffold for external use (hyperpolymath-only)
42+
- A replacement for per-repo customization (all files must be bespoke)
43+
- A static template that never changes (evolves with RSR spec)
44+
- A runtime library or framework (build-time only)
45+
46+
## If In Doubt
47+
48+
If you are unsure whether a change is in scope, ask. Sensitive areas:
49+
- .machine_readable/ contractile definitions
50+
- RSR specification files
51+
- Governance templates
52+
- License policy documents
53+
54+
## Committed Next-Actions
55+
56+
### repo-initialization
57+
- description: Provide just copy-and-substitute template for new repos
58+
- probe: test -f scripts/init-repo.sh
59+
- status: done
60+
- notes: Run with source scripts/init-repo.sh <new-repo-name>
61+
62+
### contractile-completeness
63+
- description: Every RSR contractile has an a2ml and ncl implementation
64+
- probe: ls .machine_readable/contractiles/*.a2ml | wc -l | grep -q "^6$"
65+
- status: in_progress
66+
- notes: Currently 6 contractile verbs: intend, must, trust, adjust, bust, dust
67+
68+
### automation-scripts
69+
- description: All repetitive tasks have just recipes
70+
- probe: grep -c "^# " Justfile | grep -q "^[6-9][0-9]*$"
71+
- status: in_progress
72+
73+
## Wishes
74+
75+
### Near Horizon
76+
77+
#### cross-repo-validation
78+
- description: Tooling to validate all repos against RSR spec
79+
- horizon: near
80+
- status: declared
81+
82+
#### automated-substitution
83+
- description: Script to automate repo-specific substitution in template
84+
- horizon: near
85+
- status: declared
86+
87+
### Mid Horizon
88+
89+
#### formal-verification
90+
- description: Idris2 proofs for all critical contractile invariants
91+
- horizon: mid
92+
- status: declared
93+
94+
### Far Horizon
95+
96+
#### ecosystem-visualization
97+
- description: Interactive graph of all hyperpolymath repos and dependencies
98+
- horizon: far
99+
- status: declared

0 commit comments

Comments
 (0)