Skip to content

chore(governance): auto-seed org templates from Quantum-L9/.github - #230

Closed
cryptoxdog wants to merge 1 commit into
mainfrom
chore/auto-seed-governance
Closed

chore(governance): auto-seed org templates from Quantum-L9/.github#230
cryptoxdog wants to merge 1 commit into
mainfrom
chore/auto-seed-governance

Conversation

@cryptoxdog

Copy link
Copy Markdown
Collaborator

Automatically seeds org template files from Quantum-L9/.github/templates/ plus the l9-ci-pack/ Core hub.

Files in this PR

  • .github/workflows/governance.yml
  • .github/labels.yml
  • CODE_OF_CONDUCT.md
  • CONTRIBUTING.md
  • SUPPORT.md
  • .github/FUNDING.yml
  • .github/ISSUE_TEMPLATE/1-bug.yml
  • .github/ISSUE_TEMPLATE/2-feature.yml
  • .github/ISSUE_TEMPLATE/3-task.yml
  • .github/ISSUE_TEMPLATE/4-incident.yml
  • .github/ISSUE_TEMPLATE/bug_report.yml
  • .github/ISSUE_TEMPLATE/ci-failure.yml
  • .github/ISSUE_TEMPLATE/config.yml
  • .github/ISSUE_TEMPLATE/feature_request.yml
  • .github/ISSUE_TEMPLATE/gov-violation.yml
  • .github/pull_request_template.md
  • .github/workflows/on-org-update.yml
  • .github/workflows/l9-lint-test-node.yml
  • biome.json
  • .biomeignore
  • .vscode/extensions.json

Existing files were left untouched (missing-only seed), except a stock ESLint l9-lint-test-node.yml which is replaced with the Biome SDK caller.
Governance caller is advisory (strict defaults false).
Core pack callers are distributed here; l9-ci-core executes CI.

Opened automatically by Quantum-L9/.github auto-seed.

@cryptoxdog
cryptoxdog force-pushed the chore/auto-seed-governance branch from bd3d2d4 to ee0bc9e Compare August 23, 2026 13:11
@github-actions

Copy link
Copy Markdown

PR Too Large
Reviewable additions: 1347
Limit: 1000 added lines
(deletions: 0; total churn 1347 is warn-only)
Action Required: Break into smaller, atomic PRs

📋 Best Practices for Large Changes

  1. Refactoring + Features: Separate into 2 PRs
  2. Multiple Features: One PR per feature
  3. Database + Code: Separate migration from logic
  4. Generated Code: Exclude it from reviewable-size accounting

🚫 This PR is blocked until reviewable size limits are met.

@github-actions

github-actions Bot commented Aug 23, 2026

Copy link
Copy Markdown

L9 Audit Harness Report

  • Generated: 2026-08-23T16:01:36.256333+00:00
  • Repo root: /home/runner/work/Cognitive.Engine.Graphs/Cognitive.Engine.Graphs
  • Overall result: ✅ PASSED
  • Exit code: 0

Step Results

Step Status Exit Code Notes
Architecture Audit ✅ Passed 0
Spec Coverage ✅ Passed 0
Contract Wiring ✅ Passed 0

Architecture Audit Findings

Severity Count
🔴 CRITICAL 0
🟠 HIGH 0
🟡 MEDIUM 25
🔵 LOW 0

See artifacts/audit_report.md for full details.

Spec Coverage

  • ✅ Implemented: 37
  • ⚠️ Partial: 9
  • ❌ Missing: 0
  • Total features: 46
Category Implemented Partial Missing Total
gates 10 0 0 10
scoring 7 0 0 7
v1.1_node 2 0 0 2
v1.1_edge 2 0 0 2
v1.1_action 0 2 0 2
v1.1_scoring 1 1 0 2
action_handler 0 6 0 6
gds_algorithm 5 0 0 5
research_pattern 10 0 0 10

See artifacts/coverage_report.md for full details.

Next Steps

All checks passed. Safe to merge.

@@ -0,0 +1,33 @@
# Managed by Quantum-L9/.github. Pinned to a tag so main can move safely.
workflow_dispatch:

permissions:
contents: write
run: |
set -euo pipefail
case "${PACKAGE_MANAGER}" in
npm) if [ -f package-lock.json ]; then npm ci; else npm install; fi ;;
run: |
set -euo pipefail
case "${PACKAGE_MANAGER}" in
npm) if [ -f package-lock.json ]; then npm ci; else npm install; fi ;;

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: ee0bc9e661

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

run: |
set -euo pipefail
case "${PACKAGE_MANAGER}" in
npm) if [ -f package-lock.json ]; then npm ci; else npm install; fi ;;

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Remove the Node-only workflow from this Python repo

Every pull request and push to main runs this job, but a repo-wide search finds no package.json or Node lockfile. The default npm branch therefore executes npm install in a directory without a package manifest, which exits with ENOENT; the duplicate install in the test job fails the same way, leaving otherwise valid Python changes with two consistently failing checks.

AGENTS.md reference: AGENTS.md:L16-L19

Useful? React with 👍 / 👎.

Comment on lines +29 to +33
if [ -f scripts/sync_ci_from_pack.py ]; then
python scripts/sync_ci_from_pack.py
else
echo "::notice::No sync_ci_from_pack.py found — skipping"
exit 0

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Include the sync implementation before enabling this receiver

For every org_template_updated dispatch in this repository, this condition is false because a repo-wide search finds no scripts/sync_ci_from_pack.py or equivalent implementation. The step consequently succeeds without changing anything, the following diff check reports changed=false, and the advertised organization-template update never creates a PR.

Useful? React with 👍 / 👎.

Comment on lines +39 to +42
if git diff --quiet; then
echo "changed=false" >> "$GITHUB_OUTPUT"
else
echo "changed=true" >> "$GITHUB_OUTPUT"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Detect newly generated template files

When a future sync adds a template that did not previously exist, it will be untracked, and git diff --quiet ignores untracked files. This sets changed=false and skips the PR step even though there is a new file to publish; use a status check that includes untracked paths before deciding whether to create the sync PR.

Useful? React with 👍 / 👎.

@claude

claude Bot commented Aug 23, 2026

Copy link
Copy Markdown
Contributor

PR remediation status — diagnosed, not remediated here

This is #229 recreated by the auto-seeder on the same chore/auto-seed-governance branch (same 21 files, same 1347 additions). All eight failures on ee0bc9e reproduce identically. I have pushed nothing, because none of the fixes belong on this branch.

Blocked on a human — PR size

Enforce PR Policies: Reviewable additions: 1347, limit 1000. This gates everything else; the seed has to land in smaller pieces or the policy has to exempt seeded content.

Blocked — the workflow this PR adds fails against this repo

Test Suite and Type Check (tsc --noEmit):

Dependencies lock file is not found in /home/runner/work/Cognitive.Engine.Graphs/Cognitive.Engine.Graphs.
Supported file patterns: package-lock.json,npm-shrinkwrap.json,yarn.lock

.github/workflows/l9-lint-test-node.yml runs Node jobs with cache: npm against a Python repo with no package.json. Scorecard is the same class: Token-Permissions wants a top-level permissions block on governance.yml, and on-org-update.yml sets top-level contents: write. All three are workflow edits, which PR remediation is not permitted to make — the seeder should not be sending the Node workflow to this repo at all.

Fix these upstream, not here

The two remaining failures are in files this branch copies verbatim from Quantum-L9/.github — I compared blob SHAs and they are identical:

file blob source
.github/labels.yml f828515 Quantum-L9/.github
CODE_OF_CONDUCT.md 3f22d01 Quantum-L9/.github
  • YAML Validation — yamllint commas at .github/labels.yml lines 7-25 col 29 and line 35 col 30. The template pads spaces to align color: into a column; yamllint rejects more than one space after a comma.
  • Pre-commit Hookstrailing-whitespace on CODE_OF_CONDUCT.md around line 44.

Patching them in this PR would be reverted by the next org update. The durable fix is in the template repo, after which the seed lands clean everywhere — not just here.

SonarCloud and CI Gate are downstream and should clear once the above do.

Tell me if you want the upstream template fixes raised in Quantum-L9/.github.


Generated by Claude Code

@cryptoxdog
cryptoxdog force-pushed the chore/auto-seed-governance branch 4 times, most recently from 0f76fdf to 17ee186 Compare August 23, 2026 15:46
@cryptoxdog
cryptoxdog force-pushed the chore/auto-seed-governance branch from 17ee186 to 341eaca Compare August 23, 2026 16:01
@sonarqubecloud

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
C Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants