Skip to content

fix(ci): start the Governance job again and re-sync the coaptation receipt - #90

Merged
hyperpolymath merged 3 commits into
mainfrom
claude/rename-everytype-anytime-repos-w4t306
Nov 11, 2026
Merged

hyperpolymath merged 3 commits into
mainfrom
claude/rename-everytype-anytime-repos-w4t306

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

What

Two reds on main, fixed together because both are small and both are about main drifting from what it declares.

Governance workflow

The workflow called the reusable governance-reusable.yml of the standards repository. That call fails with startup_failure and no job (main runs at 21:35, 21:45 and 22:13 UTC). systemet hit the same thing and replaced the call with a self-contained job, which is green there. This takes that file unchanged: the same TypeScript and package-manager policy, with the policy script checked out from metadatastician/standards at a pinned commit.

Checked locally that anytype has no unallowlisted .ts files, no npm/yarn/pnpm lockfiles and no root tsconfig.json or Makefile, so the job should pass here. The first CI run on this PR is the real test.

Coaptation receipt

#87 (6a2 to descriptiles) changed Mustfile.a2ml, so the must@… hash went stale and just validate-coapt reported drift. Regenerated with just coapt. The only change is that hash; the band stays green and no reading moved.

Verified

  • coapt.sh --report then verify.sh: in sync.
  • governance.yml parses as YAML; policy preconditions hold locally.

Generated by Claude Code

…ceipt

Two reds on main, fixed together because both are small and both are about
main drifting from what it declares.

Governance: the workflow called the reusable governance-reusable.yml of the
standards repository, and the call fails with startup_failure and no job (main
runs of 21:35, 21:45 and 22:13 UTC). systemet hit the same thing and replaced
the call with a self-contained job, which is green there. This takes that file
unchanged: the same TypeScript and package-manager policy, with the policy
script checked out from metadatastician/standards at a pinned commit. Checked
locally that anytype has no unallowlisted .ts files, no npm/yarn/pnpm lockfiles
and no root tsconfig.json or Makefile, so the job should pass here.

Coaptation receipt: #87 (6a2 to descriptiles) changed Mustfile.a2ml, so the
must hash in the receipt went stale and `just validate-coapt` reported drift.
Regenerated with `just coapt`. The only change is the must hash; the band stays
green and no reading moved.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J1XmMC49T8sZ3uUuvrgB7y
@coderabbitai

coderabbitai Bot commented Nov 10, 2026 •

Copy link
Copy Markdown
Contributor

Explain Change →

Caution

Review failed

The pull request is closed.

Summary

Summary by CodeRabbit

  • Chores
    • Updated repository checks to run across pull requests on all branches.
    • Added checks that flag tracked TypeScript files in restricted locations, package-manager lockfiles, and selected root-level configuration or build files.
    • Checks now run with read-only repository access and a 15-minute time limit.
    • No changes to end-user-facing features or behaviour.

The governance workflow now runs local estate policy checks instead of calling a reusable workflow. The coaptation receipt also updates its provenance must hash.

Changes: Governance policy workflow

Layer / File(s) Summary
Workflow setup and standards checkout
.github/workflows/governance.yml
The workflow defines an Ubuntu 24.04 job with a 15-minute timeout. It checks out the repository and pinned standards scripts with persisted credentials disabled.
Local policy enforcement
.github/workflows/governance.yml
The job runs the TypeScript allowlist script when present. It fails when tracked TypeScript files, package-manager lockfiles, or specified root-level build files violate the stated policy.

Receipt provenance

Layer / File(s) Summary
Provenance hash update
.machine_readable/coaptation/receipts/latest.a2ml
The receipt updates its must hash from 20748d123686 to fbbcf90bc87f.

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Bug fix

Possibly related PRs

  • hyperpolymath/anytype#87: This PR changes Mustfile.a2ml, and the receipt hash update follows that contract change.
  • hyperpolymath/anytype#79: This PR changes the reusable-workflow owner in governance.yml; this PR replaces that workflow call with a local job using standards scripts.
Merge Risk: Low · up to 5470b

The governance check now runs locally and its TypeScript rule disagrees with the pinned standards script. This only matters if TypeScript files are added later, so the current merge risk is low.

- [ ] Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

…flow

lint-workflows failed on this PR: the governance.yml taken from systemet uses
actions/checkout@v7.0.1, and anytype's Workflow Security Linter requires every
uses: to be pinned to a 40-character commit. Pinned both to the commit the
repository's other workflows already use for checkout v7.0.1.

Reproduced the linter's pinning check locally: it listed the two lines before
and lists none after. The SPDX-header and permissions checks pass on the file too.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J1XmMC49T8sZ3uUuvrgB7y
@hyperpolymath
hyperpolymath marked this pull request as ready for review November 11, 2026 00:06
@chatgpt-codex-connector

Copy link
Copy Markdown
Codex Review Summary: ❌ Failed

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ❌ Failed 2026-11-11T00:06:34.226500Z
We couldn’t complete this review. Comment @codex review to try again.
d6915dc Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

@sonarqubecloud

Copy link
Copy Markdown

@hyperpolymath
hyperpolymath merged commit 8ea4da6 into main Nov 11, 2026
29 of 30 checks passed
@hyperpolymath
hyperpolymath deleted the claude/rename-everytype-anytime-repos-w4t306 branch November 11, 2026 00:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants