From a0104186a8b7bcf629838162ff082a4c577f0929 Mon Sep 17 00:00:00 2001 From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com> Date: Mon, 1 Jun 2026 21:17:15 +0100 Subject: [PATCH] docs+manifest: record 2026-06-01 cleanup + tidy stale identity drift MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit CHANGELOG.md gets an Unreleased § for PRs #93/#94/#96/#97 (dependabot bumps, baseline-red corrective maintenance, rsr-template gap fills, rust-ci-reusable SHA bump). A2ML manifests reconciled against current state: - .machine_readable/6a2/STATE.a2ml: bump last-updated 2026-04-12 → 2026-06-01; add [session-2026-06-01] block; refresh [next-priorities] with current ROADMAP.adoc items. - META.a2ml, ECOSYSTEM.a2ml, STATE.a2ml, CLADE.a2ml, ANCHOR.a2ml: identity field still said "panic-attacker" — pre-rename name. Renamed to "panic-attack" everywhere identity is asserted as a current claim. Historical references (CHANGELOG rename note, campaign records, audit reports) intentionally left untouched. - 0-AI-MANIFEST.a2ml: canonical-locations was claiming README.md and ROADMAP.md; actual files are README.adoc and ROADMAP.adoc. Added EXPLAINME.adoc entry. No behavioural change. All changes are metadata reconciliation. --- .machine_readable/6a2/ECOSYSTEM.a2ml | 2 +- .machine_readable/6a2/META.a2ml | 2 +- .machine_readable/6a2/STATE.a2ml | 22 ++++++++++++----- .machine_readable/CLADE.a2ml | 10 ++++---- .machine_readable/anchors/ANCHOR.a2ml | 6 ++--- 0-AI-MANIFEST.a2ml | 7 +++--- CHANGELOG.md | 34 +++++++++++++++++++++++++++ 7 files changed, 64 insertions(+), 19 deletions(-) diff --git a/.machine_readable/6a2/ECOSYSTEM.a2ml b/.machine_readable/6a2/ECOSYSTEM.a2ml index 7d70278..bab5fc1 100644 --- a/.machine_readable/6a2/ECOSYSTEM.a2ml +++ b/.machine_readable/6a2/ECOSYSTEM.a2ml @@ -3,7 +3,7 @@ # Converted from ECOSYSTEM.scm on 2026-03-15 [metadata] -project = "panic-attacker" +project = "panic-attack" ecosystem = "hyperpolymath" [position] diff --git a/.machine_readable/6a2/META.a2ml b/.machine_readable/6a2/META.a2ml index fec189a..c08d1fc 100644 --- a/.machine_readable/6a2/META.a2ml +++ b/.machine_readable/6a2/META.a2ml @@ -3,7 +3,7 @@ # Converted from META.scm on 2026-03-15 [metadata] -project = "panic-attacker" +project = "panic-attack" author = "Jonathan D.A. Jewell " license = "MPL-2.0" standard = "RSR 2026" diff --git a/.machine_readable/6a2/STATE.a2ml b/.machine_readable/6a2/STATE.a2ml index 55b4483..f417053 100644 --- a/.machine_readable/6a2/STATE.a2ml +++ b/.machine_readable/6a2/STATE.a2ml @@ -3,13 +3,13 @@ # Converted from STATE.scm on 2026-03-15 [metadata] -project = "panic-attacker" +project = "panic-attack" version = "2.5.0" -last-updated = "2026-04-12" +last-updated = "2026-06-01" status = "active" [project-context] -name = "panic-attacker" +name = "panic-attack" completion-percentage = 99 phase = "CRG C (Beta) — v2.5.0 complete: 25 detection categories + shell completions (bash/zsh/fish/nushell/powershell) + delta reporting" @@ -65,7 +65,17 @@ clade-registry = "3 canonical pattern files contributed to panic-free-tests-and- commits = "39b4353 (3 remaining test files); 9fe8507, 2053fd9 (prior test files); 5ea9b74 (production fixes)" tests-passing = "200 pass / 0 fail / 3 ignored across all test binaries" +[session-2026-06-01] +description = "Baseline-red corrective maintenance + rsr-template gap fills + dependency bumps" +prs-merged = "#93 (rust-minor dependabot: log 0.4.29→0.4.30 + eframe), #94 (3 baseline-red fixes), #96 (rsr-template scaffolding gaps), #97 (rust-ci-reusable SHA bump past standards#334)" +baseline-red-resolved = "Dogfood Gate A2ML (file relocated to .machine_readable/campaigns/ + validator SHA bumped to 6bff6ec); Governance Trusted-base (analyzer.rs whole-file exemption — file IS the scanner); Secret Scanner rust-secrets (concat! split of password keyword)" +upstream-fixes-landed = "standards#334 (rust-ci-reusable.yml bare-if wrap), standards#336 (elixir-ci-reusable.yml same pattern), a2ml-validate-action#26 (s-expression form support, SHA 6bff6ec)" +estate-sweep-spawned = "a2ml-validate-action SHA bump fanout across 215 estate repos (excluding panic-attack, no forks); throttled 7min/PR; logs at /tmp/a2ml-sha-sweep/progress.tsv" +commits = "b323f6f (baseline-red fixes), 5e02b82 (a2ml relocation), 11e54a9 (action SHA bump on #94)" +blocker = "none" + [next-priorities] -verisimdb-http = "Push hexads via REST (awaiting API stabilization)" -interactive-tui = "Review findings in terminal (v2.3.0)" -chapel-metalayer = "Distributed coforall scanning across compute clusters (future)" +hexad-patch-bridge = "Migrate Patch Bridge mitigation registry from JSON to hexad persistence (ROADMAP v2.2.0 / v2.4.0)" +multi-lockfile = "Extend Patch Bridge beyond Cargo.lock to package-lock.json, mix.lock, etc. (ROADMAP v2.4.0)" +trend-queries-vcl = "Historical trend queries via VCL (ROADMAP v2.2.0)" +chapel-wave-2 = "Real multi-locale cluster validation on non-trivial corpus (issue #87 — owner-gated on toolchain choice)" diff --git a/.machine_readable/CLADE.a2ml b/.machine_readable/CLADE.a2ml index fe23105..4c6d11e 100644 --- a/.machine_readable/CLADE.a2ml +++ b/.machine_readable/CLADE.a2ml @@ -6,8 +6,8 @@ uuid = "7f831e69-87a5-50b5-a814-a652c38b4df2" primary-forge = "github" primary-owner = "hyperpolymath" -canonical-name = "panic-attacker" -prefixed-name = "sc-panic-attacker" +canonical-name = "panic-attack" +prefixed-name = "sc-panic-attack" [clade] primary = "sc" @@ -16,9 +16,9 @@ assigned = "2026-03-16" rationale = "" [forges] -github = "hyperpolymath/panic-attacker" -gitlab = "hyperpolymath/panic-attacker" -bitbucket = "hyperpolymath/panic-attacker" +github = "hyperpolymath/panic-attack" +gitlab = "hyperpolymath/panic-attack" +bitbucket = "hyperpolymath/panic-attack" [lineage] type = "standalone" diff --git a/.machine_readable/anchors/ANCHOR.a2ml b/.machine_readable/anchors/ANCHOR.a2ml index 4add66b..70dcf3c 100644 --- a/.machine_readable/anchors/ANCHOR.a2ml +++ b/.machine_readable/anchors/ANCHOR.a2ml @@ -1,7 +1,7 @@ -# ⚓ ANCHOR: panic-attacker -# This is the canonical authority for the panic-attacker repository. +# ⚓ ANCHOR: panic-attack +# This is the canonical authority for the panic-attack repository. -id: "org.hyperpolymath.panic-attacker" +id: "org.hyperpolymath.panic-attack" version: "1.0.0" clade: "unknown" status: "active" diff --git a/0-AI-MANIFEST.a2ml b/0-AI-MANIFEST.a2ml index bc9284d..ab7f4be 100644 --- a/0-AI-MANIFEST.a2ml +++ b/0-AI-MANIFEST.a2ml @@ -12,14 +12,15 @@ (scm-files ".machine_readable/") (workflows ".github/workflows/") (docs "." - (readme "README.md") + (readme "README.adoc") (security "SECURITY.md") (contributing "CONTRIBUTING.md") (license "LICENSE") (changelog "CHANGELOG.md") - (roadmap "ROADMAP.md") + (roadmap "ROADMAP.adoc") (design "DESIGN.md") - (vision "VISION.md")) + (vision "VISION.md") + (explainme "EXPLAINME.adoc")) (source "src/") (tests "tests/") (examples "examples/")) diff --git a/CHANGELOG.md b/CHANGELOG.md index 4d3ee7b..e369464 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,40 @@ ## [Unreleased] +### Fixed (2026-06-01) — baseline-red corrective maintenance +- **Dogfood Gate A2ML validation** restored (#94, #97): bumped + `hyperpolymath/a2ml-validate-action` from `59145c7d` to `6bff6ec` to + pick up s-expression-form identity/version recognition (upstream + PR #26); relocated `docs/campaigns/2026-05-26.a2ml` to + `.machine_readable/campaigns/` so it inherits the structural-identity + exemption (the file's own header describes it as + "machine-readable A2ML form"). +- **Governance Trusted-base reduction policy** restored (#94): added + `.trusted-base-ignore` exemption for `src/assail/analyzer.rs` — the + file IS the scanner that defines the escape-hatch patterns, so its + literal references to them are by design. +- **Secret Scanner rust-secrets** false-positive cleared (#94): + refactored `RE_HARDCODED_SECRET` regex construction via `concat!` to + split detector keywords across source-string boundaries (the literal + `password` keyword in the source was self-flagging). +- **Rust CI reusable** SHA bumped past `standards#334` (#97) — caller + now resolves the + `${{ }}`-wrapped job-level `if:` fix and unblocks the `rust-ci.yml` + wrapper that was reporting 0-second parse failures (root cause + documented at `standards#322`). +- **rsr-template scaffolding gaps filled** (#96): LICENSE flipped from + AGPL-3.0 body to MPL-2.0 (matching SPDX headers + Cargo.toml + + README.adoc); CODE_OF_CONDUCT.md placeholders instantiated + (`{{CONDUCT_EMAIL}}` → `j.d.a.jewell@open.ac.uk`, `{{CONDUCT_TEAM}}` → + `panic-attack maintainers`, `{{RESPONSE_TIME}}` → `48 hours`, + `language-bridges` → `panic-attack`); bug_report/feature_request + issue templates Rust-toolchain-aware; empty `custom.md` removed; + SECURITY.md version table updated from `0.2.x` to `2.5.x`. + +### Changed (2026-06-01) +- **Dependabot rust-minor group bumps** (#93): `log` 0.4.29 → 0.4.30, + `eframe` minor update. + ### Added (2026-05-30) — issue #33 closure - **VeriSimDB hexad persistence complete (issue #33 S1–S3)** — per-finding hexads, campaign state lifecycle, and S-expression query DSL all shipped: