From e994253e37f0aa4213caf0fdc93648b691f9302b Mon Sep 17 00:00:00 2001 From: Claude Date: Thu, 9 Jul 2026 21:44:53 +0000 Subject: [PATCH 1/2] docs(governance): reword sibling src/ path citations to module-name form MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit #178 merged with the Hypatia baseline red: the new SIBLING-INTEGRATIONS.adoc tripped two `structural_drift/SD022` findings ("doc references `src/Burble/`" and "`src/core/`") because hypatia's rename-drift heuristic has no cross-repo awareness and flags any `src//` it cannot resolve locally — even a citation the doc explicitly attributes to a sibling repo. Rather than grow the baseline with two more acknowledged false positives, cite those two sibling artefacts by module/file name instead of by `src//` path (`Burble.ABI.NearbyPresence` Idris2 module; panll's `EventChain.res` parser). The references stay accurate and the SD022 trigger disappears, so the gate stays maximally strict with no new suppressions. Greens the Hypatia baseline on main. Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_0172RBMz3qYjb1ttzD2i7RNh --- docs/governance/SIBLING-INTEGRATIONS.adoc | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/governance/SIBLING-INTEGRATIONS.adoc b/docs/governance/SIBLING-INTEGRATIONS.adoc index 8aa8a02..8a6e709 100644 --- a/docs/governance/SIBLING-INTEGRATIONS.adoc +++ b/docs/governance/SIBLING-INTEGRATIONS.adoc @@ -122,8 +122,8 @@ Phase 2 and depends on burble finishing Phases 0–1 first. |=== | Artifact NeuroPhone's plan names | Reality in `burble` @ `0926a15` | Status -| `src/Burble/ABI/NearbyPresence.idr` (Idris2 wire type) -| Absent from the ABI dir and from the `burble-abi.ipkg` module list; appears only as a "NEW" line in `docs/architecture/ANDROID-CLIENT.adoc` +| `Burble.ABI.NearbyPresence` Idris2 wire type (burble tree) +| Absent from the ABI dir and from the `burble-abi.ipkg` module list; appears only as a "NEW" line in burble's `docs/architecture/ANDROID-CLIENT.adoc` | PLANNED | `nearby-presence.a2ml` (wire format) @@ -168,7 +168,7 @@ in either repo's code or docs is a *migration precedent*: panll migrated the template for its own Kotlin→Rust Android migration (`docs/migrations/RFC-ANDROID-KOTLIN-TO-RUST.adoc`). No runtime data flow is claimed anywhere. panll's one *live* data-ingest path is panll↔`panic-attack` -event-chain JSON (`src/core/EventChain.res`), and in NeuroPhone `panic-attack` is +event-chain JSON (panll's `EventChain.res` parser), and in NeuroPhone `panic-attack` is only ever run as a scanner over NeuroPhone's own source — NeuroPhone emits no event chains. From 58fe535ae29d81e4db948fd715aff4ccbb4a7216 Mon Sep 17 00:00:00 2001 From: Claude Date: Thu, 9 Jul 2026 21:44:53 +0000 Subject: [PATCH 2/2] fix(deps): bump crossbeam-epoch 0.9.18 -> 0.9.20 (RUSTSEC-2026-0204) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit RUSTSEC-2026-0204 (published 2026-07-06) reports an invalid pointer dereference in crossbeam-epoch's `fmt::Pointer` impl for `Atomic`/`Shared` when the underlying pointer is invalid; fixed in 0.9.20. crossbeam-epoch is a transitive dependency, so this newly-landed advisory turned `rust-ci / Cargo audit` red on every neurophone branch (main included) without any local code change. Surgical `cargo update -p crossbeam-epoch --precise 0.9.20` — only the version and checksum move; the crate's own dependency subtree (crossbeam-utils) is unchanged. Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_0172RBMz3qYjb1ttzD2i7RNh --- Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 4bb5015..e26f422 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -366,9 +366,9 @@ dependencies = [ [[package]] name = "crossbeam-epoch" -version = "0.9.18" +version = "0.9.20" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5b82ac4a3c2ca9c3460964f020e1402edd5753411d7737aa39c3714ad1b5420e" +checksum = "2d6914041f254d6e9176c01941b21115dcfb7089e55135a35411081bd106ef3f" dependencies = [ "crossbeam-utils", ]