Merge branch 'chore/cicd-optimizations'

Author: hyperpolymath

.machine_readable/contractiles/dust/Dustfile.a2ml

@@ -0,0 +1,22 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# Dustfile — Cleanup and Hygiene Contract
+
+[dustfile]
+version = "1.0.0"
+format = "a2ml"
+
+[cleanup]
+stale-branch-policy = "delete-after-merge"
+artifact-retention = "90-days"
+cache-policy = "clear-on-release"
+
+[hygiene]
+linting = "required"
+formatting = "required"
+dead-code-removal = "encouraged"
+todo-tracking = "tracked-in-issues"
+
+[reversibility]
+backup-before-destructive = true
+rollback-mechanism = "git-revert"
+data-retention-policy = "preserve-30-days"

.machine_readable/integrations/feedback-o-tron.a2ml

@@ -0,0 +1,13 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# Feedback-o-Tron Integration — Autonomous Bug Reporting
+
+[integration]
+name = "feedback-o-tron"
+type = "bug-reporter"
+repository = "https://github.com/hyperpolymath/feedback-o-tron"
+
+[reporting-config]
+platforms = ["github", "gitlab", "bugzilla"]
+deduplication = true
+audit-logging = true
+auto-file-upstream = "on-external-dependency-failure"

.machine_readable/integrations/proven.a2ml

@@ -0,0 +1,18 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# Proven Integration — Formally Verified Safety Library
+
+[integration]
+name = "proven"
+type = "safety-library"
+repository = "https://github.com/hyperpolymath/proven"
+version = "1.2.0"
+
+[binding-policy]
+approach = "thin-ffi-wrapper"
+unsafe-patterns = "replace-with-proven-equivalent"
+modules-available = ["SafeMath", "SafeString", "SafeJSON", "SafeURL", "SafeRegex", "SafeSQL", "SafeFile", "SafeTemplate", "SafeCrypto"]
+
+[adoption-guidance]
+priority = "high"
+scope = "all-string-json-url-crypto-operations"
+migration = "incremental — replace unsafe patterns as encountered"

.machine_readable/integrations/verisimdb.a2ml

@@ -0,0 +1,15 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# VeriSimDB Feed — Cross-Repo Analytics Data Store
+
+[integration]
+name = "verisimdb"
+type = "data-feed"
+repository = "https://github.com/hyperpolymath/nextgen-databases"
+data-store = "verisimdb-data"
+
+[feed-config]
+emit-scan-results = true
+emit-build-metrics = true
+emit-dependency-graph = true
+format = "hexad"
+destination = "verisimdb-data/feeds/"

.machine_readable/integrations/vexometer.a2ml

@@ -0,0 +1,18 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# Vexometer Integration — Irritation Surface Analysis
+
+[integration]
+name = "vexometer"
+type = "friction-measurement"
+repository = "https://github.com/hyperpolymath/vexometer"
+
+[measurement-config]
+dimensions = 10
+emit-isa-reports = true
+lazy-eliminator = true
+satellite-interventions = true
+
+[hooks]
+cli-tools = "measure-on-error"
+ui-panels = "measure-on-interaction"
+build-failures = "measure-on-failure"

EXPLAINME.adoc

@@ -0,0 +1,33 @@
+// SPDX-License-Identifier: PMPL-1.0-or-later
+= hesiod-dns-map — Show Me The Receipts
+:toc:
+:icons: font
+
+The README makes claims. This file backs them up.
+
+[quote, README]
+____
+HS-class DNS zone files, Hesiod naming, and resource mapping for the FlatRacoon Network Stack.
+____
+
+== Technology Choices
+
+[cols="1,2"]
+|===
+| Technology | Learn More
+
+| **Rust** | https://www.rust-lang.org
+|===
+
+== File Map
+
+[cols="1,2"]
+|===
+| Path | What's There
+
+| `test(s)/` | Test suite
+|===
+
+== Questions?
+
+Open an issue or reach out directly — happy to explain anything in more detail.

justfile Justfilejustfile renamed to Justfile

@@ -63,3 +63,7 @@ validate file:
 build-riscv:
 	@echo "Building for RISC-V..."
 	cross build --target riscv64gc-unknown-linux-gnu
+
+# Run panic-attacker pre-commit scan
+assail:
+    @command -v panic-attack >/dev/null 2>&1 && panic-attack assail . || echo "panic-attack not found — install from https://github.com/hyperpolymath/panic-attacker"

crates/hesinfo/src/main.rs

@@ -71,8 +71,7 @@ enum Commands {
 async fn main() -> Result<()> {
     tracing_subscriber::fmt()
         .with_env_filter(
-            tracing_subscriber::EnvFilter::try_from_default_env()
-                .unwrap_or_else(|_| "info".into()),
+            tracing_subscriber::EnvFilter::try_from_default_env().unwrap_or_else(|_| "info".into()),
         )
         .init();
 
@@ -129,12 +128,10 @@ async fn cmd_lookup(key: &str, map: &str, server: &str, port: u16) -> Result<()>
     sock.send_to(&wire, &addr).await?;
 
     let mut buf = vec![0u8; 4096];
-    let (len, _) = tokio::time::timeout(
-        std::time::Duration::from_secs(5),
-        sock.recv_from(&mut buf),
-    )
-    .await
-    .context("DNS query timed out")??;
+    let (len, _) =
+        tokio::time::timeout(std::time::Duration::from_secs(5), sock.recv_from(&mut buf))
+            .await
+            .context("DNS query timed out")??;
 
     let response = Message::from_vec(&buf[..len])?;
 
@@ -199,7 +196,11 @@ fn cmd_validate(file: &std::path::Path) -> Result<()> {
     for (line_no, line) in content.lines().enumerate() {
         let line = line.trim();
         // Skip comments and empty lines
-        if line.is_empty() || line.starts_with(';') || line.starts_with('$') || line.starts_with('@') {
+        if line.is_empty()
+            || line.starts_with(';')
+            || line.starts_with('$')
+            || line.starts_with('@')
+        {
             continue;
         }
         // Look for HS TXT lines

crates/hesiod-lib/src/health.rs

@@ -3,12 +3,12 @@
 
 use std::sync::Arc;
 
+use axum::Router;
 use axum::extract::State;
 use axum::http::StatusCode;
 use axum::response::Json;
 use axum::routing::{get, post};
-use axum::Router;
-use serde_json::{json, Value};
+use serde_json::{Value, json};
 use tracing::info;
 
 use crate::server::DnsServerState;
@@ -35,9 +35,7 @@ async fn health_check(State(state): State<Arc<DnsServerState>>) -> Json<Value> {
 
 /// `GET /dns/metrics` - Returns query count and performance metrics.
 async fn metrics(State(state): State<Arc<DnsServerState>>) -> Json<Value> {
-    let query_count = state
-        .query_count
-        .load(std::sync::atomic::Ordering::Relaxed);
+    let query_count = state.query_count.load(std::sync::atomic::Ordering::Relaxed);
     let uptime = state.start_time.elapsed().as_secs();
     let qps = if uptime > 0 {
         query_count as f64 / uptime as f64

crates/hesiod-lib/src/records.rs

@@ -4,7 +4,7 @@
 
 use std::fmt;
 
-use anyhow::{bail, Context, Result};
+use anyhow::{Context, Result, bail};
 use serde::{Deserialize, Serialize};
 
 /// Map types corresponding to Hesiod naming conventions.
@@ -75,7 +75,10 @@ impl PasswdRecord {
     pub fn from_txt(txt: &str) -> Result<Self> {
         let parts: Vec<&str> = txt.splitn(7, ':').collect();
         if parts.len() != 7 {
-            bail!("passwd record requires 7 colon-separated fields, got {}", parts.len());
+            bail!(
+                "passwd record requires 7 colon-separated fields, got {}",
+                parts.len()
+            );
         }
         Ok(Self {
             username: parts[0].to_string(),
@@ -115,7 +118,10 @@ impl GroupRecord {
     pub fn from_txt(txt: &str) -> Result<Self> {
         let parts: Vec<&str> = txt.splitn(4, ':').collect();
         if parts.len() != 4 {
-            bail!("group record requires 4 colon-separated fields, got {}", parts.len());
+            bail!(
+                "group record requires 4 colon-separated fields, got {}",
+                parts.len()
+            );
         }
         let members = if parts[3].is_empty() {
             Vec::new()
@@ -157,7 +163,10 @@ impl ServiceRecord {
     pub fn from_txt(txt: &str) -> Result<Self> {
         let parts: Vec<&str> = txt.splitn(3, ':').collect();
         if parts.len() != 3 {
-            bail!("service record requires 3 colon-separated fields, got {}", parts.len());
+            bail!(
+                "service record requires 3 colon-separated fields, got {}",
+                parts.len()
+            );
         }
         Ok(Self {
             host: parts[0].to_string(),
@@ -188,13 +197,19 @@ pub struct FilsysRecord {
 
 impl FilsysRecord {
     pub fn to_txt(&self) -> String {
-        format!("{} {} {} {}", self.fs_type, self.mount_path, self.source, self.mode)
+        format!(
+            "{} {} {} {}",
+            self.fs_type, self.mount_path, self.source, self.mode
+        )
     }
 
     pub fn from_txt(txt: &str) -> Result<Self> {
         let parts: Vec<&str> = txt.splitn(4, ' ').collect();
         if parts.len() != 4 {
-            bail!("filsys record requires 4 space-separated fields, got {}", parts.len());
+            bail!(
+                "filsys record requires 4 space-separated fields, got {}",
+                parts.len()
+            );
         }
         Ok(Self {
             fs_type: parts[0].to_string(),
@@ -289,7 +304,10 @@ mod tests {
             shell: "/bin/bash".into(),
         };
         let txt = record.to_txt();
-        assert_eq!(txt, "admin:*:1000:1000:FlatRacoon Admin:/home/admin:/bin/bash");
+        assert_eq!(
+            txt,
+            "admin:*:1000:1000:FlatRacoon Admin:/home/admin:/bin/bash"
+        );
         let parsed = PasswdRecord::from_txt(&txt).unwrap();
         assert_eq!(record, parsed);
     }