Skip to content

chore(context): conform agent context, Dependabot and status section - #3

Merged
constantin-jais merged 1 commit into
migrate/recover-codefrom
work/documents-75-g3
Oct 8, 2026
Merged

constantin-jais merged 1 commit into
migrate/recover-codefrom
work/documents-75-g3

Conversation

@constantin-jais

Copy link
Copy Markdown
Contributor

Summary

Fleet conformance for capability-authorization, one PR for the four gates of libre-ai/project-governance that report this repository red (measured 2026-10-08):

Gate Finding before Change
check-context-conformance AGENTS.md is missing on the default branch AGENTS.md on the couche-3 template (33 lines, cap 45), pointer https://raw.githubusercontent.com/libre-ai/project-governance/HEAD/AGENTS.md (HTTP 200); CLAUDE.md = @AGENTS.md\n
check-dependabot-conformance .github/dependabot.yml is missing (cargo variant expected) byte-exact copy of distribution/templates/dependabot/cargo.yml
check-fleet-advisories GHSA-hrr3-gc8f-f4qj, GHSA-jvvf-x445-j334 (fast-uri override 4.1.4) override 4.1.5 (published 2026-09-15, beyond the 3-day minimumReleaseAge), bun.lock regenerated: 2 lines change
check-fleet-presentation generated project-status section missing (sentinels not found) new ## Project status heading, section written by bun run heal:card-status <root> --under "## Project status"; --check reports no-op

project.v1.yaml is unchanged. The vendored biscuit-auth patch (I-28, third_party/) and its provenance gate are untouched.

Verification

  • Local composition from .github/composition at the pinned tooling generation 2024a488: base revision 376db900 green, then bun run check green with this change (cargo fmt, clippy -D warnings, tests).
  • bun install --frozen-lockfile succeeds on the regenerated lockfile; fast-uri@4.1.5 integrity matches the npm registry.
  • reuse lint (6.2.0): 145/145 files compliant.

Owner-arbitration: 2026-10-08

https://claude.ai/code/session_01Qw4AExV42cXJ67Sj9dqLVf

Bring this repository in line with the fleet gates of
libre-ai/project-governance, measured on 2026-10-08:

- AGENTS.md on the couche-3 template (Authority, Boundaries, Quality
  gates, Agents; 33 lines under the 45-line cap), with a fetchable
  authority pointer to project-governance; CLAUDE.md is the byte-exact
  `@AGENTS.md` adapter (check-context-conformance).
- .github/dependabot.yml, byte-exact copy of the cargo template
  variant (check-dependabot-conformance).
- fast-uri override 4.1.4 -> 4.1.5 (published 2026-09-15, beyond the
  3-day release-age floor), lockfile regenerated; clears
  GHSA-hrr3-gc8f-f4qj and GHSA-jvvf-x445-j334 (check-fleet-advisories).
- README: generated project-status section inserted under a new
  "## Project status" heading by `heal:card-status`; `--check` is a
  no-op afterwards (check-fleet-presentation).

The vendored biscuit-auth patch (I-28) and its provenance gate are
untouched.

Claude-Session: https://claude.ai/code/session_01Qw4AExV42cXJ67Sj9dqLVf
Signed-off-by: Constantin <74049135+constantin-jais@users.noreply.github.com>
@constantin-jais
constantin-jais merged commit 33e61b5 into migrate/recover-code Oct 8, 2026
1 check passed
@constantin-jais
constantin-jais deleted the work/documents-75-g3 branch October 8, 2026 15:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant