feat(demo): live consonance-loop demo + CI action pinning + honest KNOWN-ISSUES

[hyperpolymath]

Follow-up tranche to the merged #120, completing Week-1 item 5 of the July-1 plan plus two truth/hygiene items.

Demo (run for real this session): just demo-consonance / scripts/demo-consonance.sh — starts verisim-api, creates an entity whose document and graph disagree, measures drift from the entity's own modalities (graph_document_drift: 0.5, "0/1 targets mentioned"), triggers the normalizer (document regenerated from the graph; write-back versioned, WAL-logged, provenance-chained), re-measures (0.0, "1/1 mentioned"), and shows the audit trail (provenance_chain_length: 1 → 2). The README gains a "Consonance Loop, Live" section with the real transcript.

CI pinning: all four actions in elixir-ci.yml pinned to upstream-verified commit SHAs (tags resolved via git ls-remote, annotated tags dereferenced — codecov's floating v7 tag object differs from its commit; pinned to the commit fb8b3582…). Clears the recurring Hypatia unpinned_action findings.

KNOWN-ISSUES truth pass: issue 1 re-scoped (derivation landed 2026-02-12; write-back + endpoint landed 2026-06-11); new issue 26 records the drift-never-measured gap as resolved, with the remaining honest scope stated (semantic-vector drift unmeasurable pending a type-embedding registry; 1-second temporal resolution).

Workspace remains green: 620 tests passed / 0 failed, clippy clean under -D warnings.

https://claude.ai/code/session_01E8BpV19yxhf67UrCrvkfTr

---

Generated by Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 178 issues detected

Severity	Count
🔴 Critical	18
🟠 High	50
🟡 Medium	110

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Issue in build-validation.yml",
    "type": "missing_timeout_minutes",
    "file": "build-validation.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in build-validation.yml",
    "type": "missing_timeout_minutes",
    "file": "build-validation.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in cflite_batch.yml",
    "type": "missing_timeout_minutes",
    "file": "cflite_batch.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in cflite_pr.yml",
    "type": "missing_timeout_minutes",
    "file": "cflite_pr.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "missing_timeout_minutes",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in coq-build.yml",
    "type": "missing_timeout_minutes",
    "file": "coq-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in elixir-ci.yml",
    "type": "missing_timeout_minutes",
    "file": "elixir-ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in elixir-ci.yml",
    "type": "missing_timeout_minutes",
    "file": "elixir-ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in elixir-ci.yml",
    "type": "missing_timeout_minutes",
    "file": "elixir-ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence

[github-actions]

🔍 Hypatia Security Scan

Findings: 178 issues detected

Severity	Count
🔴 Critical	18
🟠 High	50
🟡 Medium	110

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Issue in build-validation.yml",
    "type": "missing_timeout_minutes",
    "file": "build-validation.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in build-validation.yml",
    "type": "missing_timeout_minutes",
    "file": "build-validation.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in cflite_batch.yml",
    "type": "missing_timeout_minutes",
    "file": "cflite_batch.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in cflite_pr.yml",
    "type": "missing_timeout_minutes",
    "file": "cflite_pr.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "missing_timeout_minutes",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in coq-build.yml",
    "type": "missing_timeout_minutes",
    "file": "coq-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in elixir-ci.yml",
    "type": "missing_timeout_minutes",
    "file": "elixir-ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in elixir-ci.yml",
    "type": "missing_timeout_minutes",
    "file": "elixir-ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in elixir-ci.yml",
    "type": "missing_timeout_minutes",
    "file": "elixir-ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence