From 9e5099b105b9cad5e08334d26cf12a9da5c09dfb Mon Sep 17 00:00:00 2001
From: Constantin Jais <74049135+constantin-jais@users.noreply.github.com>
Date: Fri, 9 Oct 2026 05:22:06 +0200
Subject: [PATCH 1/2] chore(pins): move governance pins to generation 1c8b37c8
 (P)

Move every project-governance pin surface (validate-composition uses:,
tooling_ref:, project card pinned:) from generation 7c2238d6 (M), which
sits at the two-generation grace limit, to the declared generation
1c8b37c80beb41f640982768ec27304a911e0b8e (P). P brings the
advisory-waiver discipline step (project-governance#56) and the Bun-floor
script rule (#47, #55).

Claude-Session: https://claude.ai/code/session_01YGo2fqxeSVRfXjQErze6hP
Signed-off-by: Constantin Jais <74049135+constantin-jais@users.noreply.github.com>
---
 .github/workflows/code-validation.yml | 4 ++--
 project.v1.yaml                       | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/code-validation.yml b/.github/workflows/code-validation.yml
index 7babb0a..e437feb 100644
--- a/.github/workflows/code-validation.yml
+++ b/.github/workflows/code-validation.yml
@@ -10,8 +10,8 @@ permissions:
   contents: read
 jobs:
   composition:
-    uses: libre-ai/project-governance/.github/workflows/validate-composition.yml@7c2238d6185e59d446586688ca7db32e6a17d3e0
+    uses: libre-ai/project-governance/.github/workflows/validate-composition.yml@1c8b37c80beb41f640982768ec27304a911e0b8e
     with:
       target: application-development-toolkit
       target_ref: ${{ github.sha }}
-      tooling_ref: 7c2238d6185e59d446586688ca7db32e6a17d3e0
+      tooling_ref: 1c8b37c80beb41f640982768ec27304a911e0b8e
diff --git a/project.v1.yaml b/project.v1.yaml
index 55de8e1..1530fb7 100644
--- a/project.v1.yaml
+++ b/project.v1.yaml
@@ -30,7 +30,7 @@ non_goals:
 dependencies:
   - on: libre-ai/project-governance
     why: "Current fleet doctrine and reusable verification workflows."
-    pinned: "github:libre-ai/project-governance#7c2238d6185e59d446586688ca7db32e6a17d3e0"
+    pinned: "github:libre-ai/project-governance#1c8b37c80beb41f640982768ec27304a911e0b8e"
 maturity: idea
 confidence: medium
 exposure: idea

From 029e056bc3eaca2fb0fc7096187fb1a5eb50f5fd Mon Sep 17 00:00:00 2001
From: Constantin Jais <74049135+constantin-jais@users.noreply.github.com>
Date: Fri, 9 Oct 2026 05:27:37 +0200
Subject: [PATCH 2/2] fix(quality): reach the package suites through bun run
 test so the Bun floor fires

Generation P's manifest gate refuses a script that reaches the suite with a
bare `bun test`, which never fires the pretest hook. The web-platform and
testing package checks ended that way; they now end with `bun run test`,
as packages/ui already does.

Claude-Session: https://claude.ai/code/session_01YGo2fqxeSVRfXjQErze6hP
Signed-off-by: Constantin Jais <74049135+constantin-jais@users.noreply.github.com>
---
 packages/testing/package.json      | 2 +-
 packages/web-platform/package.json | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/testing/package.json b/packages/testing/package.json
index c4f4bbc..3fd7506 100644
--- a/packages/testing/package.json
+++ b/packages/testing/package.json
@@ -23,7 +23,7 @@
     "typecheck": "bun run check:bun:runtime && tsc --noEmit -p tsconfig.json",
     "pretest": "bun run check:bun",
     "test": "bun test",
-    "check": "bun run check:bun && bun run check:toolchain && bun run check:secret-scan && bun run check:personal-data && bun run lint && bun run typecheck && bun test"
+    "check": "bun run check:bun && bun run check:toolchain && bun run check:secret-scan && bun run check:personal-data && bun run lint && bun run typecheck && bun run test"
   },
   "repository": {
     "type": "git",
diff --git a/packages/web-platform/package.json b/packages/web-platform/package.json
index ea4943a..0a5f22a 100644
--- a/packages/web-platform/package.json
+++ b/packages/web-platform/package.json
@@ -20,7 +20,7 @@
     "typecheck": "bun run check:bun:runtime && tsc --noEmit -p tsconfig.json",
     "pretest": "bun run check:bun",
     "test": "bun test",
-    "check": "bun run check:bun && bun run check:toolchain && bun run check:secret-scan && bun run check:personal-data && bun run lint && bun run typecheck && bun test"
+    "check": "bun run check:bun && bun run check:toolchain && bun run check:secret-scan && bun run check:personal-data && bun run lint && bun run typecheck && bun run test"
   },
   "description": "Bun-native web foundation for Libre AI applications: Bun.serve SSR/hydration/static, hardened responses (layer 4).",
   "homepage": "https://libre-ai.fr",