Skip to content

Governance is red on main: Allowlist Preflight, Workflow security linter (SPDX + permissions), Code quality + docs (no CONTRIBUTING) #163

Closed

Description

@hyperpolymath

Measured (2026-09-22, main = 74202cb)

  • Run 35597408905, three failing jobs/steps: governance / Allowlist Preflight → Run allowlist preflight check; governance / Workflow security linter → Check SPDX headers + permissions; governance / Code quality + docs → Check documentation.
  • Check documentation fails identically on echo-types (35598951870) and epistemic-types (35599078223); no CONTRIBUTING* at the root of this tree either (0 matches).
  • Hypatia, CodeQL, Rust CI, Language Policy Enforcement, Secret Scanner are green on the same head, so this and Deno CI (Deno CI is red on main and Deno is banned estate-wide — delete the workflow and examples/web-project-deno.json (post-#139) #160) are the only reds.

Acceptance criteria

  1. For each of the three steps, the step's own output is read and its named predicate satisfied (CONTRIBUTING for documentation; SPDX header plus a permissions: block on the named workflow files; the allow-list preflight's diff against the canon).
  2. Governance on the fix commit is green; the three step names show conclusion: success in gh api repos/hyperpolymath/absolute-zero/actions/runs/<id>/jobs.

🤖 Generated with Claude Code

Activity

  1. added
    cicdCI/CD: workflows, actions, lockfiles, pins, runners, release gates
    documentationDocs, prose, diagrams, READMEs, ADRs
    governancePolicy, rulesets, standards, compliance, and their enforcement
    licensingLicences, SPDX headers, REUSE compliance, attribution
    on Sep 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    cicdCI/CD: workflows, actions, lockfiles, pins, runners, release gatesdocumentationDocs, prose, diagrams, READMEs, ADRsgovernancePolicy, rulesets, standards, compliance, and their enforcementlicensingLicences, SPDX headers, REUSE compliance, attribution

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions