docs+fix: restore README.adoc, repoint licence badge → MPL-2.0, SHA-pin trufflehog#41
Merged
Merged
Conversation
…c policy) Commit fb92b30 converted README.adoc → Markdown "renders on Glama/profile/ community-health" — but that .md rendering rationale is the estate exception for ONLY boj-server + the profile repo (hyperpolymath/hyperpolymath). feedback-o-tron is neither, so the conversion misapplied the policy across the repo. README.md was never edited after fb92b30, so no content diverged. Fix at source: recover the pristine original README.adoc from fb92b30^ (791 lines, verbatim) and delete the mangled README.md — reversing exactly the wrong conversion rather than hand-re-converting 882 mangled lines. Render-validated with asciidoctor (--failure-level=WARN → 0 warnings). No V-lang token. FLAGGED (not touched — licence-adjacent, owner-gated): the recovered README's License badge text is correct ("MPL-2.0") but its link still points to hyperpolymath/palimpsest-license — a leftover from before the repo's PMPL→MPL-2.0 migration (commit bf93f4f). Restored verbatim (the link pre-existed in both the old .adoc and the .md); left for owner approval to repoint at the MPL-2.0 licence.
…ner-approved) Both changes made with explicit owner approval (2026-07-01). - .github/workflows/secret-scanner.yml: pin trufflesecurity/trufflehog@main → @f446421baf832d6356c42c1743d99abff52ff334 (v3.95.7). This was the sole unpinned action the governance "Workflow security linter" flagged, so this turns that pre-existing red check green. (SHA resolved from the trufflehog v3.95.7 release tag via the GitHub API.) - README.adoc: the License badge text was already correct (MPL-2.0) but its link still pointed at hyperpolymath/palimpsest-license — a leftover from before the repo's PMPL→MPL-2.0 migration. Repointed to the MPL-2.0 licence and cleaned the mangled badge image (MPL_2.0--1.0 → MPL-2.0). feedback-o-tron is not a PMPL carve-out repo. Verified: linter grep finds no unpinned actions; README renders clean under asciidoctor; no palimpsest reference remains.
hyperpolymath
marked this pull request as ready for review
July 1, 2026 20:40
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Three feedback-o-tron corrections (all owner-approved 2026-07-01):
.md→.adoc— commitfb92b30had convertedREADME.adoc → Markdown("renders on Glama/profile"), but that.mdrationale is the estate exception for onlyboj-server+ the profile repo. Recovered the pristine originalREADME.adocfromfb92b30^(791 lines, verbatim) and deleted the mangled.md— reversing the exact wrong conversion.hyperpolymath/palimpsest-license(a leftover from before this repo's PMPL→MPL-2.0 migrationbf93f4f). Repointed to the MPL-2.0 licence and cleaned the mangled badge image. feedback-o-tron is not a PMPL carve-out.secret-scanner.ymlusedtrufflesecurity/trufflehog@main, the sole unpinned action thegovernance / Workflow security linterflagged. Pinned to@f446421baf832d6356c42c1743d99abff52ff334(v3.95.7, resolved via the GitHub API). This turns that pre-existing red check green.Verification
asciidoctor --failure-level=WARN README.adoc→ 0 warnings; no palimpsest reference remains.README.mddeleted (no duplicate); no V-lang token.Note: the CodeQL
analyze (javascript-typescript)red is separate and pre-existing (unaffected by these changes).🤖 Generated with Claude Code