docs(standards): README is .adoc by default + agent-commit signing note#430
Merged
Merged
Conversation
…j-server use .md Corrects the short-lived 2026-06 "README must be .md, not .adoc" reversal, which contradicted the rest of the estate tooling (rhodibot deletes stub README.md to keep .adoc; contractiles accept README.adoc). Owner directive 2026-06-26: READMEs are .adoc everywhere EXCEPT: - hyperpolymath/hyperpolymath (GitHub profile repo — profile READMEs render only README.md) - hyperpolymath/boj-server (listed in external MCP directories / Glama, which show AsciiDoc as raw markup) Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018Auxpj3daisp3kTcurBZ8t
…naged, not an action item Ground-truthed the Claude-Code execution environment's commit signing: it is platform-mediated (git's gpg.ssh.program points at Anthropic's environment- manager shim, wired once globally), non-blocking, and not fixable by per-repo or per-container key edits. Documents this so future agents (and the advisory stop-hook) don't chase Unverified commits or attempt key surgery. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018Auxpj3daisp3kTcurBZ8t
…insertion The prior commit (887a8ee) inserted the "Commit Signing" section after the second-to-last table row, orphaning the final `**/vscode/**` row below the prose section and breaking the JavaScript Exemptions table. Move that row back to complete the table, place the signing section after it, and restore the missing end-of-file newline. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018Auxpj3daisp3kTcurBZ8t
|
hyperpolymath
added a commit
that referenced
this pull request
Jun 27, 2026
…meline check (#440) Two related licence-/RSR-housekeeping changes, both owner-requested. ## 1. `docs/migrations/pmpl-to-mpl-sweep-runbook.adoc` (new) A durable home for the estate-wide **PMPL → MPL-2.0 sweep runbook** — the delegation brief produced during this licence-cleanup pass, so a future (desktop / scope-expanded) agent can execute the actual flips correctly. Contents: - **Complete classified inventory** of stray `SPDX-License-Identifier: PMPL-1.0[-or-later]` headers across the org (248+ matches, 9 repos, deduplicated), mapped onto the estate's 5-way licence policy. - **Net actionable surface = 22 files / 4 repos:** `developer-ecosystem`, `email-octad-experiment`, `nextgen-databases` → MPL-2.0 (code) / CC-BY-SA-4.0 (prose); **`idaptik` → AGPL-3.0-or-later** (son-shared — explicitly *not* MPL). - **Bulk is legitimate or must-not-touch:** 200 files in the `palimpsest-*` carve-outs, 5 in `007` (ARR), ~60 in vendored `rescript/` forks, plus licence-exhibit text. - **`nextgen-databases` resolved** (its `rescript/` dirs are estate-authored VeriSimDB/Lithoglyph *clients*, not the vendored compiler → in scope). - **Phase-2 inventory:** 236 template-propagated body-text `License: PMPL` declarations (fix at the scaffold source, not 236× by hand) + 25 banned `MPL-2.0-or-later`. - **Flags `panll`'s governance conflict** (body-text PMPL + a `CLAUDE.md` that still mandates PMPL) for owner decision. - **Per-file discipline + capabilities/access spec** for the delegated agent. This doc is **FLAG-AND-PLAN only** — it performs no licence change. CC-BY-SA-4.0 from birth (prose), per the estate code/prose split. ## 2. `rsr-audit.sh` — de-brittle the SECURITY response-timeline check Category-2's check required the exact literal substring **"24 hours"** in `SECURITY.md`, failing repos that document the same SLA differently (a "Response Timeline" heading, "48 hours", "business day", …). Broadened to a basic-grep alternation covering the common phrasings, mirroring the format/case de-brittling #390 already did elsewhere. **Licence-content checks untouched.** `standards`' own `SECURITY.md` (Response Timeline / 48 hours) now passes where it previously failed — one of the 3 residual fails #390 flagged. Registry regenerated (`rhodium-standard-repositories/` is a registered spec home, so editing `rsr-audit.sh` changes its content-addressed `source_hash`). --- Note: as on #430–#433, the pre-existing `governance / Validate Hypatia Baseline` red is repo-wide and token-degraded — not introduced by this diff. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_019awZjBD1qx61tvmEuEKNpn --- _Generated by [Claude Code](https://claude.ai/code/session_019awZjBD1qx61tvmEuEKNpn)_ --------- Co-authored-by: Claude <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Two owner-directed canon corrections to
.claude/CLAUDE.md(2026-06-26).1. README is
.adocby default (843812c)Corrects the short-lived
da1ee5e"README must be Markdown (not AsciiDoc) (#427)" reversal, which contradicted the rest of the estate tooling (rhodibotdeletes stubREADME.mdto keep.adoc; contractiles acceptREADME.adoc). New rule, per owner directive:.adocby default everywhere, with exactly two.mdexceptions:hyperpolymath/hyperpolymath— the GitHub profile repo (profile READMEs render onlyREADME.md).hyperpolymath/boj-server— listed in external MCP directories (Glama), which show AsciiDoc as raw markup.2. Commit-signing note (
887a8ee)Documents (ground-truthed) that "Unverified" on agent commits is platform-managed and non-blocking — git's
gpg.ssh.programpoints at Anthropic'senvironment-managershim, wired once globally; there is no per-repo/per-container key chore. Prevents future agents (and the advisory stop-hook) from chasing it or attempting key surgery.Notes
🤖 Generated with Claude Code
https://claude.ai/code/session_018Auxpj3daisp3kTcurBZ8t
Generated by Claude Code