From 1403dc3161fd407f280898e04c7fc30df3f6f614 Mon Sep 17 00:00:00 2001 From: Constantin Jais <74049135+constantin-jais@users.noreply.github.com> Date: Thu, 8 Oct 2026 02:14:22 +0200 Subject: [PATCH] chore(pins): pin the fleet authority at a declared generation This repository pinned libre-ai/project-governance at a commit that exists but that the authority's own ecosystem/fleet-pins.v1.yaml does not declare as a generation. The repaired fleet-pins gate named it; before the repair the gate read a hardcoded `main` on every surface and reported "2 assertion(s) hold" over a fleet carrying twenty-four drifts, this one among them. The pin moves to 2024a4884b, a declared generation and the first a consumer can actually install -- proved by the act: `bun install` in libre-ai/signalement against it resolves 32 packages, where the two generations before it failed on a workspace-local specifier. Measured before changing anything: the `workflow_call` signature of validate-composition.yml is BYTE-IDENTICAL between the sha pinned here and 2024a4884b, so the inputs this repository supplies are unchanged. The three other reusable workflows did not exist at the old sha at all -- it predates the doctrine transfer. Claude-Session: https://claude.ai/code/session_01BRoYJKEsRC2BUSDPQBoNnA Signed-off-by: Constantin Jais <74049135+constantin-jais@users.noreply.github.com> --- .github/workflows/code-validation.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/code-validation.yml b/.github/workflows/code-validation.yml index cfb4835..1cd0b51 100644 --- a/.github/workflows/code-validation.yml +++ b/.github/workflows/code-validation.yml @@ -10,8 +10,8 @@ permissions: contents: read jobs: composition: - uses: libre-ai/project-governance/.github/workflows/validate-composition.yml@ed87f3fa5b9285adc08e7a07a94853872cb1bb16 + uses: libre-ai/project-governance/.github/workflows/validate-composition.yml@2024a4884b314df99be457618be9c3b48a0287f7 with: target: collaborative-data-sync target_ref: ${{ github.sha }} - tooling_ref: ed87f3fa5b9285adc08e7a07a94853872cb1bb16 + tooling_ref: 2024a4884b314df99be457618be9c3b48a0287f7