From fc284b3d069109df62de04afdf29a55fd94d2a35 Mon Sep 17 00:00:00 2001 From: "J.D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Fri, 18 Sep 2026 16:17:14 +0000 Subject: [PATCH 1/2] chore(root): converge the root allowlist with the AsciiDoc migration and the www/ bundle MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit scripts/check-root-shape.sh — run as a required step by estate-rules.yml — was failing on this repository. Two distinct causes: 1. The estate-wide .well-known migration moved the site bundle to www/.well-known/, creating a tracked www/ directory at the root. The allowlist was not updated. Entry copied verbatim from rsr-template-repo, which allowlists www/ for exactly this reason (issue #53). 2. The allowlist names AsciiDoc files that the repository no longer (or never did) contain — CHANGELOG.md and friends — while the real .adoc files sit unlisted at the root. Added the entries naming the files that exist, using the wording the estate already uses for this (lithoglyph). No files moved and no existing entry removed: only additions. --- {.githooks => .github/hooks}/validate-a2ml.sh | 0 {.githooks => .github/hooks}/validate-k9.sh | 0 .machine_readable/root-allow.txt | 4 ++++ 3 files changed, 4 insertions(+) rename {.githooks => .github/hooks}/validate-a2ml.sh (100%) rename {.githooks => .github/hooks}/validate-k9.sh (100%) diff --git a/.githooks/validate-a2ml.sh b/.github/hooks/validate-a2ml.sh similarity index 100% rename from .githooks/validate-a2ml.sh rename to .github/hooks/validate-a2ml.sh diff --git a/.githooks/validate-k9.sh b/.github/hooks/validate-k9.sh similarity index 100% rename from .githooks/validate-k9.sh rename to .github/hooks/validate-k9.sh diff --git a/.machine_readable/root-allow.txt b/.machine_readable/root-allow.txt index 5b20f02..47950a9 100644 --- a/.machine_readable/root-allow.txt +++ b/.machine_readable/root-allow.txt @@ -20,9 +20,12 @@ AFFIRMATION.adoc # dated/signed honesty snapshot (README/EXPLAINME/AFF GOVERNANCE.adoc # governance model (validator accepts root or docs/governance/) MAINTAINERS.adoc # maintainer roster CONTRIBUTING.md # REQUIRED AT ROOT by scorecard-enforcer/openssf-compliance/quality CI (test -f, no .github fallback). The fuller copy in .github/ is GitHub's auto-discovery convention; dedupe is an owner decision (would need those CI checks updated to accept .github/). +CONTRIBUTING.adoc # Current contributor guide after the AsciiDoc migration. SECURITY.md # REQUIRED AT ROOT by scorecard-enforcer CI + the security-policy contractile (test -f SECURITY.md). See CONTRIBUTING.md note re: the .github/ copy. +SECURITY.adoc # Current security policy after the AsciiDoc migration. LICENSE CHANGELOG.md +CHANGELOG.adoc # Current changelog after the AsciiDoc migration. # ─── Build entry points (must live at root for their tooling) ──────────────── Justfile # delegates phases to build/just/*.just @@ -41,6 +44,7 @@ abi.ipkg # Idris2 package for the ABI seam; sourcedir=src/inte .devcontainer/ # VS Code dev container spec; tool-required at root .git/ .github/ # CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, workflows/ +www/ # site-operations bundle; canonical .well-known/ lives at www/.well-known/ (issue #53) LICENSES/ # REUSE/SPDX licence texts (LICENSES/MPL-2.0.txt) .machine_readable/ # AI manifests, contractiles, custom-format configs .well-known/ From f38c8df04dc9b1cbbfc6b9aa7daf02d96416938b Mon Sep 17 00:00:00 2001 From: "J.D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Fri, 18 Sep 2026 16:17:14 +0000 Subject: [PATCH 2/2] refactor(root): relocate versioned git hooks from .githooks/ to .github/hooks/ MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit scripts/check-root-shape.sh flags .githooks/ as root drift — it is not on the allowlist. The directory holds only the two A2ML/K9 validators invoked by dogfood-gate.yml, and the estate canon keeps versioned hooks under .github/ (rsr-template-repo made the same move), so the directory is not added to the allowlist; the hooks move instead. Updated the two dogfood-gate invocations that call them. --- .github/workflows/dogfood-gate.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/dogfood-gate.yml b/.github/workflows/dogfood-gate.yml index 45bf1cc..ad0e68a 100644 --- a/.github/workflows/dogfood-gate.yml +++ b/.github/workflows/dogfood-gate.yml @@ -41,7 +41,7 @@ jobs: - name: Validate A2ML manifests if: steps.detect.outputs.count > 0 - run: bash .githooks/validate-a2ml.sh + run: bash .github/hooks/validate-a2ml.sh - name: Write summary run: | A2ML_COUNT="${{ steps.detect.outputs.count }}" @@ -87,7 +87,7 @@ jobs: - name: Validate K9 contracts if: steps.detect.outputs.k9_count > 0 - run: bash .githooks/validate-k9.sh + run: bash .github/hooks/validate-k9.sh - name: Write summary run: | K9_COUNT="${{ steps.detect.outputs.k9_count }}"