Skip to content

ci: redistribute concurrency-cancel guard to read-only check workflows#58

Merged
hyperpolymath merged 5 commits into
mainfrom
sweep/standards-122-concurrency
May 18, 2026
Merged

ci: redistribute concurrency-cancel guard to read-only check workflows#58
hyperpolymath merged 5 commits into
mainfrom
sweep/standards-122-concurrency

Conversation

@hyperpolymath
Copy link
Copy Markdown
Owner

Redistributes the canonical read-only-check workflow templates that gained concurrency{cancel-in-progress:true} in hyperpolymath/standards#122, so this consumer stops holding account-wide concurrent-job slots on superseded runs. Files updated: codeql.yml governance.yml scorecard-enforcer.yml scorecard.yml secret-scanner.yml. Read-only checks only; no publish/mutation workflow touched.

Refs hyperpolymath/standards#122

Generated with Claude Code

@hyperpolymath hyperpolymath merged commit 783f912 into main May 18, 2026
@hyperpolymath hyperpolymath deleted the sweep/standards-122-concurrency branch May 18, 2026 10:46
hyperpolymath added a commit that referenced this pull request May 27, 2026
… + 16-commit catch-up) (#83)

## Summary

Re-syncs maa-framework's vendored `absolute-zero/` tree from its
previous snapshot (16+ commits behind) up to current upstream HEAD
(commit `ab35c07`).

## Primary motivation: pull in standards#203 trusted-base work

| Upstream PR | Phase | Contents |
|-------------|-------|----------|
| absolute-zero#52 | seed | `docs/proof-debt.md` per standards#203
schema |
| absolute-zero#58 | 1 | per-axiom triage of 72 Coq Axioms
(`docs/proof-debt-triage.md`) |
| absolute-zero#59 | 1 cleanup | post-#58 cross-refs + STATE/META
updates |
| absolute-zero#60 | 2a | Lambda cluster — Coq + Lean inline `AXIOM:`
annotations |
| absolute-zero#61 | 2b | `CNOCategory.v:323` `hom_functor` §(d) DEBT
entry |
| absolute-zero#62 | 2c | Filesystem cluster — 26 inline annotations + 8
§(d) DEBT entries |

**Cumulative trusted-base state**: 41 / 129 escape hatches documented
(35.7% covered). Remaining 88 belong to Quantum + Physics clusters
(future Phase 2d/2e PRs upstream).

## Side effects of the full re-vendor

Because the vendored tree was 16+ commits behind, the sync also pulls
in unrelated upstream work:

- Estate-policy / governance / hypatia / language-policy workflow
  updates (~15 `.github/workflows/*` files).
- MPL-2.0 SPDX header migration from PMPL-1.0-or-later (~20 files).
- `.machine_readable/` A2ML updates.
- ReScript interpreter removal (per estate language-policy ban —
  `interpreters/rescript/*` deleted).
- Verification scripts moved to `verification/` subdir.
- Old session debris pruned (`SONNET-HANDOFF.md`, `STACK_AUDIT.txt`,
  `ROADMAP-V1-TO-V12.adoc`, `ROADMAP-UPDATED.adoc`, etc.).

## Preserved (maa-framework-specific, NOT in upstream)

Three Agda extensions were added in maa-framework directly (commits
`0538283` + `e80c5fb`) and survive the re-vendor via rsync filters:

- `proofs/agda/EchoBridgeCNO.agda`
- `proofs/agda/EchoBridgeScaffold.agda`
- `proofs/agda/README.adoc`

## Verification

```
$ bash ~/developer/repos/standards/scripts/check-trusted-base.sh absolute-zero
[INFO] Found 129 soundness-relevant escape hatch(es).
[ERROR] 88/129 escape hatch(es) are undocumented.
```

Matches upstream exactly. The 41 documented entries are Lambda (5) +
CNOCategory (1) + already-passing (1) + Filesystem (34).

## Scope warning

This is a large PR (168 files changed) because of the catch-up. If
desired, I can re-do this as two PRs:
1. proofs/ + docs/proof-debt*.md only (the trusted-base subset)
2. Everything else (workflows + machine_readable + cleanups)

But that requires hand-curating the file list. The single-PR shape
matches the "full re-vendor" option from the planning question.

Refs absolute-zero#52, #58, #59, #60, #61, #62; standards#203.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant