docs: de-template RSR metadata, complete 6a2 + contractiles, add PROOF-NEEDS#23
Merged
Merged
Conversation
…F-NEEDS
git-reticulator was scaffolded from rsr-template-repo and left with unfilled
template cruft. This tidies it into proper form and records honest status
throughout (legend: IMPLEMENTED | SKELETON | ASPIRATIONAL).
Added:
- .machine_readable/6a2/{STATE,META,ECOSYSTEM,AGENTIC,NEUROSYM,PLAYBOOK}.a2ml
(was missing entirely). NEUROSYM + PLAYBOOK capture the neuro-symbolic
architecture (reticulator -> RAG -> verisim octad -> vcl-ut proofs) and five
playbooks incl. proof-carrying Graph-RAG retrieval.
- PROOF-NEEDS.md — the formal obligations the word "lattice" incurs (partial
order, SCC-condensation, meet/join laws, LOD soundness/completeness, drift
predicate), in the vcl-ut house style; recommends Idris2.
- READINESS.md — CRG-grade source the Justfile already expected (was missing).
De-templated (removed {{AUTHOR}}/{{CURRENT_DATE}}/[YOUR-REPO-NAME]):
- 0-AI-MANIFEST.a2ml (now describes the actual tree; points at 6a2/)
- agent_instructions/{methodology,debt,coverage,README}
- .machine_readable/INTENT.contractile; contractiles/intend/Intentfile.a2ml
Corrected to match reality:
- TOPOLOGY.md (had described non-existent .as files)
- README.adoc / EXPLAINME.adoc (wrong bin name + stale caveats; added
neuro-symbolic positioning and an honest status banner)
- TEST-NEEDS.md (notes the 27 tests are smoke-level over println stubs)
- Cargo.toml readme -> README.adoc (was README.md, which is absent)
Removed:
- .machine_readable/STATE.a2ml (superseded by 6a2/STATE.a2ml)
Open items recorded in debt.a2ml: core-language decision (META ADR-001),
contractile-system consolidation, CHANGELOG casket/Jekyll wart.
https://claude.ai/code/session_01JNCDaWMB8NV6nAPrvmTg4w
🔍 Hypatia Security ScanFindings: 35 issues detected
View findings[
{
"reason": "Issue in scorecard.yml",
"type": "missing_workflow",
"file": "scorecard.yml",
"action": "create",
"rule_module": "workflow_audit",
"severity": "high"
},
{
"reason": "Issue in mirror.yml",
"type": "missing_workflow",
"file": "mirror.yml",
"action": "create",
"rule_module": "workflow_audit",
"severity": "high"
},
{
"reason": "Issue in secret-scanner.yml",
"type": "missing_workflow",
"file": "secret-scanner.yml",
"action": "create",
"rule_module": "workflow_audit",
"severity": "high"
},
{
"reason": "Action perpolymath/standards/.github/workflows/governance-reusable.yml@main\n needs attention",
"type": "unpinned_action",
"file": "governance.yml",
"action": "pin_sha",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in casket-pages.yml",
"type": "missing_timeout_minutes",
"file": "casket-pages.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in casket-pages.yml",
"type": "missing_timeout_minutes",
"file": "casket-pages.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in governance.yml",
"type": "missing_timeout_minutes",
"file": "governance.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in hypatia-scan.yml",
"type": "missing_timeout_minutes",
"file": "hypatia-scan.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in rust-ci.yml",
"type": "missing_timeout_minutes",
"file": "rust-ci.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Required file missing (condition: public_repo)",
"type": "missing_requirement",
"file": ".github/workflows/scorecard.yml",
"action": "create",
"rule_module": "cicd_rules",
"severity": "high"
}
]Powered by Hypatia Neurosymbolic CI/CD Intelligence |
Addresses the Hypatia workflow-audit findings on PR #23 (all pre-existing; none introduced by the docs pass). (b) Add the three missing estate-standard workflows, copied from the canonical sibling form (SHA-pinned standards reusables): - mirror.yml (mirror-reusable @e6b2884) - secret-scanner.yml (secret-scanner-reusable @3e4bd4c) - scorecard.yml (scorecard-reusable @e036864; workflow-level contents:read + job-level security-events/id-token writes — the known-good form that avoids the estate-wide read-all startup_failure) (a) Add timeout-minutes: 10 to casket-pages.yml build + deploy jobs. The remaining missing_timeout_minutes findings (governance/hypatia-scan/ rust-ci) are NOT fixable here: those jobs call reusables via `uses:`, where timeout-minutes is not a legal job key — it must live in the standards reusables (out of scope). Recorded in agent_instructions/debt.a2ml, along with the intentionally-left unpinned governance@main. https://claude.ai/code/session_01JNCDaWMB8NV6nAPrvmTg4w
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| @@ -0,0 +1,26 @@ | |||
| # SPDX-License-Identifier: MPL-2.0 | |||
| @@ -0,0 +1,26 @@ | |||
| # SPDX-License-Identifier: MPL-2.0 | |||
hyperpolymath
marked this pull request as ready for review
June 3, 2026 23:12
🔍 Hypatia Security ScanFindings: 32 issues detected
View findings[
{
"reason": "Action perpolymath/standards/.github/workflows/governance-reusable.yml@main\n needs attention",
"type": "unpinned_action",
"file": "governance.yml",
"action": "pin_sha",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in governance.yml",
"type": "missing_timeout_minutes",
"file": "governance.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in hypatia-scan.yml",
"type": "missing_timeout_minutes",
"file": "hypatia-scan.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in mirror.yml",
"type": "missing_timeout_minutes",
"file": "mirror.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in rust-ci.yml",
"type": "missing_timeout_minutes",
"file": "rust-ci.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in scorecard.yml",
"type": "missing_timeout_minutes",
"file": "scorecard.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in secret-scanner.yml",
"type": "missing_timeout_minutes",
"file": "secret-scanner.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Nominal-only SAST in git-reticulator: codeql.yml language matrix contains no language present in the repo and lacks `actions`, so CodeQL records zero results on every commit. Remediation: set the CodeQL matrix to `language: actions`.",
"type": "StaticAnalysis",
"file": "/home/runner/work/git-reticulator/git-reticulator",
"action": "auto_fix",
"rule_module": "scorecard",
"severity": "medium",
"remediation": "Add CodeQL or equivalent SAST workflow.",
"scorecard_check": "SAST"
},
{
"reason": "Repository has 2 non-main remote branch(es). Policy: single main branch only.",
"type": "GS007",
"file": ".",
"action": "delete_remote_branches",
"rule_module": "git_state",
"severity": "medium"
},
{
"reason": "Code scanning (Hypatia): hypatia/workflow_audit/missing_timeout_minutes -- Hypatia workflow_audit: missing_timeout_minutes -- 3 day(s) old",
"type": "CSA001",
"file": "rust-ci.yml",
"action": "review",
"rule_module": "code_scanning_alerts",
"severity": "medium"
}
]Powered by Hypatia Neurosymbolic CI/CD Intelligence |
hyperpolymath
enabled auto-merge (squash)
June 3, 2026 23:12
hyperpolymath
disabled auto-merge
June 3, 2026 23:25
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What & why
git-reticulator was scaffolded from
rsr-template-repoand left on the backburner with a lot of unfilled template cruft. This PR tidies it into proper form and — crucially — records honest status throughout, using the legend IMPLEMENTED | SKELETON | ASPIRATIONAL so nobody mistakes the stub for a working product again.It also captures the project's real reason to exist: the symbolic half of a neuro-symbolic retrieval stack (reticulator → RAG → verisim octad → vcl-ut proofs), whose payoff is proof-carrying retrieval.
No code behaviour changes — this is metadata/docs/config only.
Added
.machine_readable/6a2/{STATE,META,ECOSYSTEM,AGENTIC,NEUROSYM,PLAYBOOK}.a2ml— the six canonical metadata files (were missing entirely; the manifest demanded them).NEUROSYM.a2ml— the four-layer neuro-symbolic architecture + the consistency/drift invariant.PLAYBOOK.a2ml— five playbooks (flagship: proof-carrying Graph-RAG code assistant) + an ops runbook.PROOF-NEEDS.md— the formal obligations the word "lattice" actually incurs (partial order, SCC-condensation of the cyclic dep graph, meet/join laws, LODzoom_to_nodesoundness+completeness, construction determinism, neuro-symbolic drift predicate). Written in thevcl-uthouse style; recommends Idris2.READINESS.md— the CRG-grade source theJustfilealready grepped for (just crg-grade) but which didn't exist.De-templated (removed
{{AUTHOR}}/{{CURRENT_DATE}}/[YOUR-REPO-NAME])0-AI-MANIFEST.a2ml— now describes the actual tree and points at.machine_readable/6a2/.agent_instructions/{methodology,debt,coverage,README}—methodology.a2mlpreviously contained{{…}}and so would match its ownreject-if-containsrule.debt.a2ml/coverage.a2mlnow hold this session's real content..machine_readable/INTENT.contractile;contractiles/intend/Intentfile.a2ml.Corrected to match reality
TOPOLOGY.md— had described non-existent.asfiles (src/main.as,src/git_parser.as); now shows the real Rust host +.affinecore.README.adoc/EXPLAINME.adoc— wrong binary name (git-reticulator scan→reticulate build), stale "README is empty" caveat; added neuro-symbolic positioning + an honest status banner.TEST-NEEDS.md— records that the 27 tests are smoke-level overprintln!stubs, not behavioural coverage.Cargo.toml—readme = "README.md"→README.adoc(the.mdis absent).Removed
.machine_readable/STATE.a2ml(superseded by6a2/STATE.a2ml).Open items recorded (not fixed here) — see
agent_instructions/debt.a2ml.affinecore can't compile and calls Rust crates AffineScript can't bind — needs a design call (Rust-native core vs wait-for-AffineScript). Deferred to maintainer..machine_readable/*.contractilevscontractiles/).casket-pages.ymlworkflow is estate-correct).Validation
cargo verify-project→{"success":"true"}.justisn't installed in this environment, so not run here).Draft, because the core-language decision above is a judgement call I'd want your sign-off on before this stops being purely documentation.
https://claude.ai/code/session_01JNCDaWMB8NV6nAPrvmTg4w
Generated by Claude Code