Skip to content

ci(governance): re-pin to post-#464 standards (baseline filter now actually runs)#172

Merged
hyperpolymath merged 1 commit into
mainfrom
claude/neurophone-repo-setup-envzix
Jul 3, 2026
Merged

ci(governance): re-pin to post-#464 standards (baseline filter now actually runs)#172
hyperpolymath merged 1 commit into
mainfrom
claude/neurophone-repo-setup-envzix

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

Summary

Follow-up to #171. That PR pinned standards 832b157 (which had #455's baseline-filter wire-in), but #455 had a bug — the scan's by-design exit-on-findings aborted the step under bash -e before the filter ran, so the gate was still mechanically broken. standards#464 fixed that (|| true + a JSON-array crash guard). This re-pins governance-reusable 832b157f81bb04 (current standards main, both #455 and #464 present).

Still surgical: the other five standards reusables stay at 7c9db0e.

What this PR is for (diagnostic)

This is the run where validate-hypatia-baseline finally reaches apply-baseline.sh. The newer hypatia HEAD now reports 18 findings vs the 14 neurophone's .hypatia-baseline.json was written against (#168), so the outcome will be one of:

  • Green — if the current baseline happens to cover all 18. Done.
  • Red on the delta — the filter kept some genuinely-new findings (there's a new critical, 2→3). That is the filter working correctly. Those get honest per-repo handling — fix-at-source, or baseline only verified false-positives — never blind-baselined, and the critical goes to the owner for a decision first.

I'll read this PR's filter output and report exactly which findings are kept.

Draft pending that diagnosis.

🤖 Generated with Claude Code

https://claude.ai/code/session_0172RBMz3qYjb1ttzD2i7RNh


Generated by Claude Code

…actually runs

Follow-up to #171. That PR bumped the governance-reusable pin to standards
832b157 (which had #455's baseline-filter wire-in), but #455 had a bug: the
scan's by-design exit-on-findings aborted the step under `bash -e` before the
filter ran, so the gate stayed mechanically broken (verified on #171's own CI:
"scan complete: 18 findings; exit 1" with zero apply-baseline.sh output).

standards#464 fixed that (`|| true` + a JSON-array crash guard). This re-pins
governance-reusable 832b157 -> f81bb04 (current standards main, both #455 and
#464 present) so neurophone's validate-hypatia-baseline actually reaches the
filter. Still surgical: the other five standards reusables stay at 7c9db0e.

Note: a newer hypatia HEAD now reports 18 findings vs the 14 neurophone's
.hypatia-baseline.json was written against (#168), so this may still surface
un-baselined findings (incl. a new critical) that need honest per-repo handling
— not blind baselining. This PR's CI is the diagnostic that surfaces exactly
which.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0172RBMz3qYjb1ttzD2i7RNh
@sonarqubecloud

sonarqubecloud Bot commented Jul 3, 2026

Copy link
Copy Markdown

@hyperpolymath
hyperpolymath marked this pull request as ready for review July 3, 2026 03:58
@hyperpolymath
hyperpolymath merged commit bef4378 into main Jul 3, 2026
31 of 32 checks passed
@hyperpolymath
hyperpolymath deleted the claude/neurophone-repo-setup-envzix branch July 3, 2026 03:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants