Skip to content

docs(status): CI/CD remediation plan (cleanup backlog)#74

Merged
hyperpolymath merged 2 commits into
mainfrom
docs/cicd-remediation-plan
Jul 17, 2026
Merged

docs(status): CI/CD remediation plan (cleanup backlog)#74
hyperpolymath merged 2 commits into
mainfrom
docs/cicd-remediation-plan

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

What

Adds docs/status/CICD-REMEDIATION.adoc — the durable working backlog for the foundational CI/CD cleanup, so the audit's empirical findings live in the repo rather than only in an agent session.

Why it matters

The findings came from actually running the tools (idris2 0.7.0, zig 0.16.0, the Justfile recipes), and several are serious and previously invisible:

  • Idris2 ABI (all 3 files) and the Zig FFI have never compiled — hyphens from a {{PROJECT_NAME}} template substitution landed in module-name/identifier position. The "formal proofs" are therefore unverified.
  • The stated licence contradicts the shipped one — README + AI-manifest say AGPL-3.0 (matching DD-003), but every LICENSE, all 85 SPDX headers, and LICENSES/ are MPL-2.0, with zero AGPL text anywhere. ⚠️ owner decision.
  • main has no required status checks — every workflow is advisory; nothing red blocks a merge.
  • Most of the Justfile (build/test/lint/ci) is vacuous # TODO stubs, and the repo's real checks aren't wired to CI at all.

Not a fix

This PR is documentation only — the tracking artifact. The fixes are bucketed inside it (pushable-now / needs-workflow-scope / needs-decision / needs-admin / needs-upstream stop-and-chat). Passes the repo's own docs-render + AsciiDoc-dialect gates.

🤖 Generated with Claude Code

Captures the empirical findings of the 2026-07-17 CI/CD audit + real-check
run so they survive independent of any chat context: the two structural
facts (no required status checks; CI reimplements checks inline instead of
calling the Justfile contractiles), the hidden defects the vacuous CI was
masking (Idris2 ABI + Zig FFI never compiled — hyphenated {{PROJECT_NAME}}
in identifier position; stated AGPL licence contradicts shipped MPL; STATE
path drift; template residue), and the remediation split
(pushable-now / needs-workflow-scope / needs-decision / needs-admin /
needs-upstream stop-and-chat).

This is the working backlog for the cleanup campaign, not a set of fixes.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@hyperpolymath
hyperpolymath marked this pull request as ready for review July 17, 2026 22:10
@sonarqubecloud

Copy link
Copy Markdown

@hyperpolymath
hyperpolymath enabled auto-merge (squash) July 17, 2026 22:12
@hyperpolymath
hyperpolymath disabled auto-merge July 17, 2026 22:26
@hyperpolymath
hyperpolymath merged commit 0dc8f8c into main Jul 17, 2026
31 of 34 checks passed
@hyperpolymath
hyperpolymath deleted the docs/cicd-remediation-plan branch July 17, 2026 22:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant