After standards#223 merges: collapse hypatia#352 TRUSTED: comments to one-line .trusted-base-ignore entry

[hyperpolymath]

Background

standards#223 adds .trusted-base-ignore path-fragment exemption support to check-trusted-base.sh. Once it merges and downstream wrappers pick up a post-#223 SHA of governance-reusable.yml, this repo can simplify its scanner-fixture handling.

Current state (hypatia#352 — MERGEABLE, auto-merge armed)

PR #352 added 5 inline TRUSTED: comments — one above each marker line in:

• test/soundness/fixtures/code_safety/admitted.v
• test/soundness/fixtures/code_safety/sorry.lean
• test/soundness/fixtures/code_safety/agda_postulate.agda
• test/soundness/fixtures/code_safety/believe_me.idr
• test/soundness/fixtures/code_safety/unsafe_coerce.hs

These are scanner test fixtures — files that exist to be detected by the scanner. The inline-TRUSTED-per-site approach was the only available mechanism before standards#223.

After standards#223 merges

Replace the 5 inline TRUSTED: comments with a single .trusted-base-ignore entry in repo root:

# Scanner test fixtures: exist solely to verify the detector fires.
test/soundness/fixtures/

(plus arguably .claude/worktrees/ for the 10 stale worktree shadows that #343's §(d) refresh enumerated as TBD-DEBT — those would also be cleanly exempted.)

Order of operations

1. standards#223 merges → reusable file (governance-reusable.yml) starts picking up the new behaviour on standards/main.
2. Verify hypatia's governance.yml wrapper SHA pin (currently 5eb28d7 from hypatia#353) is post-chore(deps): bump taiki-e/install-action from 2.77.5 to 2.77.6 #223. If not, bump again.
3. File a hypatia PR that:
   • Adds .trusted-base-ignore with test/soundness/fixtures/ and .claude/worktrees/.
   • Removes the 5 inline TRUSTED: lines added by docs(soundness): TRUSTED: annotate 5 code_safety scanner fixtures #352 (the fixture files revert to their pre-docs(soundness): TRUSTED: annotate 5 code_safety scanner fixtures #352 form).
   • Removes the 5 fixture entries + 10 worktree-shadow entries from docs/proof-debt.md §(d) (added by docs: seed docs/proof-debt.md per trusted-base policy #343's refresh).
4. Verify bash scripts/check-trusted-base.sh . reports [OK] N marker(s) exempted via .trusted-base-ignore and passes.

Blocked-by

• standards#223 (MERGEABLE at filing time, auto-merge SQUASH armed)

Estate parallel

somethings-fishy#27 has the same shape — 2 inline TRUSTED: comments on scanner-detector string literals. Equivalent simplification candidate once standards#223 merges. Track separately or roll into a small estate-wide follow-up sweep.

🤖 Filed by Claude Code