fix: allow REUSE LICENSES/ dir in root-shape allowlist

[hyperpolymath]

Summary

• check-root-shape.sh was rejecting LICENSES/, the directory REUSE compliance mandates for licence texts.
• .machine_readable/root-allow.txt never listed it, so a correctly-REUSE-compliant repo was being flagged as root drift.
• Adds the canonical allowlist entry, copied verbatim from the already-fixed reference at this-ssg.

Test plan

• bash scripts/check-root-shape.sh . no longer flags LICENSES/
• Only .machine_readable/root-allow.txt touched (1 line added)

🤖 Generated with Claude Code

---

Summary by Gitar

• Configurations: - Added flake.nix to .machine_readable/root-allow.txt pending Nix-retirement decision

_{This will update automatically on new commits.}

[gitar-bot]

Gitar has auto-approved this PR (configure)

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[gitar-bot]

CI failed: CI failures in openssf-compliance due to unfilled placeholder tokens, docs check due to an unapproved markdown file, and K9 contract validation due to license files being scanned.

Overview

Multiple CI jobs failed across compliance, documentation format, and contract validation checks due to policy violations and files incorrectly included in validation scopes (total 4 logs analyzed across 3 unique failure patterns).

Failures

Openssf-Compliance Placeholder Check Failed (confidence: high)

• Type: test
• Affected jobs: 90106402319
• Related to change: unclear
• Root cause: File .machine_readable/6a2/STATE.a2ml contains 2 unfilled {{PLACEHOLDER}} tokens, violating the OpenSSF compliance rule.
• Suggested fix: Run just init or manually replace the placeholder tokens in .machine_readable/6a2/STATE.a2ml.

Documentation Format Policy Violation (confidence: high)

• Type: tooling
• Affected jobs: 90106402280, 90106845947
• Related to change: yes
• Root cause: A Markdown file (docs/tech-debt-2026-05-26.md) was added under docs/, violating the repository policy requiring AsciiDoc (.adoc) by default.
• Suggested fix: Convert docs/tech-debt-2026-05-26.md to AsciiDoc (.adoc) or add an entry to the ALLOWED list in scripts/check-no-md-in-docs.sh.

K9 Contract Validation Failed (confidence: high)

• Type: test
• Affected jobs: 90106403383
• Related to change: yes
• Root cause: The K9 validator scanned files under the REUSE LICENSES/ directory that lack required K9 magic numbers and pedigree blocks.
• Suggested fix: Exclude the license/REUSE directory from K9 contract validation in the workflow or ignore paths configuration.

Summary

• Change-related failures: 2 failures related to documentation format policy and K9 contract validation scope.
• Infrastructure/flaky failures: 0 failures.
• Recommended action: Convert the markdown doc to AsciiDoc (or whitelist it), update the K9 validation ignore paths to exclude REUSE LICENSES/, and fill in any required placeholder tokens in machine-readable files.

Code Review ✅ Approved

Adds the LICENSES/ directory and flake.nix to the root-shape allowlist to prevent REUSE compliance and Nix configuration from being flagged as root drift. No issues found.

Auto-approved: No blocking issues found.
Please see Auto-approve Docs for details on setting custom approval criteria.

Tip

Comment Gitar fix CI or enable auto-apply: gitar auto-apply:on

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing less information.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}