fix: restore standards main to green: lock-gate pin bump, registry regen (closes #1092), uuid-v7 hardening by hyperpolymath · Pull Request #1088 · hyperpolymath/standards

hyperpolymath · 2026-09-30T15:04:53Z

Restores standards main to green. Three reds on main block each other, and all three cures are in this one PR because no single one can pass CI alone.

What each commit fixes

Lock-gate staging pin bump. The ref: under "Checkout standards for the lock gate" in governance-reusable.yml moves to 5f82b635. scripts/check-lock-gate-pin-freshness.sh returns rc=1 on main and rc=0 on this branch. Each tree's own copy of the script was run; running one tree's copy against another tree reads the wrong workflow and passes vacuously.
Registry source_hash regeneration. Closes main red: REGISTRY source_hash drift after #1072/#1075 reds Registry Verify and Repo self-tests (and skips the lock-gate pin guard) #1092. fix(scripts): replace hardcoded /tmp paths with mktemp (#936) #1072 and fix(scripts): remove eval from rsr-audit and fill-placeholders test (#939) #1075 changed files under the RSR spec home without regenerating .machine_readable/REGISTRY.a2ml, so build-registry.sh --check fails. That failure reds Self-tests, and the pin guard step never runs because it comes after the failing suite. The change is one regenerated hash line. Under D231 it is a regeneration only; migrating off the generated file is a later piece of work.
uuid-v7.yml hardening. It adds timeout-minutes: 10, a concurrency group, and a push trigger bounded to main. These are the three unfiltered Hypatia Baseline findings on main: missing_timeout_minutes, d_burn_double_trigger, and WH006.

Correction

My earlier comment on this PR attributed the Hypatia Baseline red to #1014. That was wrong. #1014 is the estate-wide HYPATIA_PIN rollout. The baseline red on main comes from the uuid-v7.yml findings that commit 3 fixes.

Local verification on `3d5ff2d`

check	result
`bash scripts/run-shell-test-suite.sh`	62 of 62 test files passed
`check-lock-gate-pin-freshness.sh origin/main`	PASS
`build-registry.sh --check`	clean

Lands under the fully-green rule only when every check is green.

🤖 Generated with Claude Code

https://claude.ai/code/session_01QYY8Gp4v4x2J7iSNn1vZ57

coderabbitai · 2026-09-30T15:05:03Z

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 11 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: e79e0156-c09e-4aa9-9cc7-790044d5d37c

📥 Commits

Reviewing files that changed from the base of the PR and between 5fb9ad1 and 3d5ff2d.

📒 Files selected for processing (3)

.github/workflows/governance-reusable.yml
.github/workflows/uuid-v7.yml
.machine_readable/REGISTRY.a2ml

Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

hyperpolymath · 2026-09-30T15:21:36Z

CI does not exercise this PR's purpose. On this PR and on main, the step "Lock-gate pin is not stale" is skipped, because the test step before it fails. That failure is pre-existing registry drift, now tracked in #1092.

So the pin guard was run locally against each tree's own copy of scripts/check-lock-gate-pin-freshness.sh:

tree	pin	guard result
`main` `5f82b635`	`9c256b67`	rc=1, `scripts/update-actions-lock.sh` stale in the pinned tree
this PR `aee1111f`	`5f82b635`	rc=0, PASS

The other two reds here also appear on main at the same SHA. They are "Registry + topology in sync" (#1092) and "Validate Hypatia Baseline", which reports 3 unfiltered findings (#1014). This PR is held under the fully-green rule until those are resolved or the owner rules otherwise.

🤖 Generated with Claude Code

https://claude.ai/code/session_01QYY8Gp4v4x2J7iSNn1vZ57

The "Lock-gate pin is not stale" step of Repo self-tests has been red on every main commit since #1064 changed scripts/update-actions-lock.sh (a stricter single-object check on the verifier's JSON). The staging pin in governance-reusable.yml still pointed at 9c256b6, one change behind. The guard is designed so the next PR owes this bump; this is that PR. Control: the guard on the old pin exits 1 against main 5f82b63. Cure: the guard on the new pin exits 0 against the same main. The guard's own mutant suite passes 10/10. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01QYY8Gp4v4x2J7iSNn1vZ57

…tale #1072 and #1075 changed files under rhodium-standard-repositories/ without regenerating the registry, so `build-registry.sh --check` exits 1 on main. That reds "Registry + topology in sync" and both build-registry-test.sh and build-scorecards-test.sh. And because the test step fails, the "Lock-gate pin is not stale" step is skipped on every PR. Output of `just registry`, one line. Owner ruling D231: regenerate now; moving the registry off .a2ml stays tracked in #1010/#479. Closes #1092. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01QYY8Gp4v4x2J7iSNn1vZ57

The three unfiltered findings that red "Validate Hypatia Baseline" on main are all in uuid-v7.yml (#1063): no `timeout-minutes` (flagged by workflow_audit and WH006), and an unscoped `push` beside `pull_request`, so every PR-branch push ran it twice (D-BURN). Scope push to main, add the repo's usual concurrency cancel block, and set `timeout-minutes: 10`. Job name and check name are unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01QYY8Gp4v4x2J7iSNn1vZ57

hyperpolymath · 2026-09-30T15:30:05Z

Correction to my earlier comment. I attributed the Hypatia Baseline red to #1014, and that was wrong. The three unfiltered findings on main are all in .github/workflows/uuid-v7.yml: missing_timeout_minutes, d_burn_double_trigger, and WH006. This branch now fixes them in its third commit, alongside the registry regen that closes #1092. The PR body is updated to match.

🤖 Generated with Claude Code

https://claude.ai/code/session_01QYY8Gp4v4x2J7iSNn1vZ57

hyperpolymath · 2026-09-30T15:41:50Z

CI status at 3d5ff2dd: UNSTABLE, and only on two non-required checks that are red on main itself.

The three reds this PR set out to cure (lock-gate pin freshness, registry --check / #1092, uuid-v7) are green. The two remaining reds are woken by this PR's paths but are not caused by it. Both reproduce on a clean checkout of main at 5fb9ad19:

Canon / spine lockstep: constitution hash drift since docs(canon): open CHANGE-PROCEDURE step 1 for "Always leave it working" (PROVISIONAL — merging opens the proposal, does not adopt it) #1041, plus the rsr spine dogfood red. Tracked in Canon / spine lockstep red on main: constitution hash drift since #1041 + rsr spine dogfood red #1094.
Standards map integrity: 5 unmapped top-level entries. Tracked in Standards map integrity red on main: 5 unmapped top-level entries (2 ULTRAPLANs, arena-session-787, patches, ziz-drop) #1095.

This PR is held, not merged. The owner's 2026-09-22 rule lands only fully-green PRs, and the D232 hold still needs re-asking after its premise erratum.

🤖 Generated with Claude Code

https://claude.ai/code/session_01QYY8Gp4v4x2J7iSNn1vZ57

coderabbitai · 2026-09-30T16:15:00Z

Autopilot could not be updated. Open Coding to check access and billing.

hyperpolymath mentioned this pull request Sep 30, 2026

Owner decision sheet D1–D72: one answerable place for #637 + #715 + #709 + #658 and this week's unfiled decisions #787

Open

hyperpolymath and others added 3 commits September 30, 2026 16:26

hyperpolymath force-pushed the chore/bump-lock-gate-pin branch from aee1111 to 3d5ff2d Compare September 30, 2026 15:29

hyperpolymath changed the title ~~chore(governance): bump the lock-gate staging pin to main~~ fix: restore standards main to green: lock-gate pin bump, registry regen (closes #1092), uuid-v7 hardening Sep 30, 2026

This was referenced Sep 30, 2026

Canon / spine lockstep red on main: constitution hash drift since #1041 + rsr spine dogfood red #1094

Open

Standards map integrity red on main: 5 unmapped top-level entries (2 ULTRAPLANs, arena-session-787, patches, ziz-drop) #1095

Open

hyperpolymath mentioned this pull request Sep 30, 2026

chore: delete the five unmapped root entries #1097

Open

Navigation Menu

Uh oh!

fix: restore standards main to green: lock-gate pin bump, registry regen (closes #1092), uuid-v7 hardening - #1088

fix: restore standards main to green: lock-gate pin bump, registry regen (closes #1092), uuid-v7 hardening#1088
hyperpolymath wants to merge 3 commits into
mainfrom
chore/bump-lock-gate-pin

hyperpolymath commented Sep 30, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Sep 30, 2026 •

edited by hyperpolymath

Loading

Review limit reached

Uh oh!

hyperpolymath commented Sep 30, 2026

Uh oh!

hyperpolymath commented Sep 30, 2026

Uh oh!

hyperpolymath commented Sep 30, 2026

Uh oh!

coderabbitai Bot commented Sep 30, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

hyperpolymath commented Sep 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What each commit fixes

Correction

Local verification on 3d5ff2d

Uh oh!

coderabbitai Bot commented Sep 30, 2026 • edited by hyperpolymath Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review limit reached

Uh oh!

hyperpolymath commented Sep 30, 2026

Uh oh!

hyperpolymath commented Sep 30, 2026

Uh oh!

hyperpolymath commented Sep 30, 2026

Uh oh!

coderabbitai Bot commented Sep 30, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

hyperpolymath commented Sep 30, 2026 •

edited

Loading

Local verification on `3d5ff2d`

coderabbitai Bot commented Sep 30, 2026 •

edited by hyperpolymath

Loading