From bde861407a794b6fcb8d2f65b25f78e364d83304 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Tue, 22 Sep 2026 18:40:55 +0100 Subject: [PATCH 1/2] ci(pipeline): re-pin ci-pipeline.yml to f95130bb This caller was pinned to 2eb9bb19, which predates hyperpolymath/standards#985. That commit fixed the ci-pipeline detect gate; every caller still on 2eb9bb19 runs the pre-fix gate and goes red on its next pull_request. Re-pins to f95130bb (the #985 squash merge) and updates the provenance comment to the matching blob 8bcdeaf2. Both lines move together: a SHA bump that leaves a stale blob comment behind is a phantom pin, unverifiable against the tree it claims to name. f95130bb was chosen over current main (d1bd7f42) deliberately: ci-pipeline.yml is byte-identical at both (blob 8bcdeaf2), f95130bb is the reviewed revision, and its only red checks are SonarCloud and the mirror trio -- all four listed in standards' own config/rulesets/gates.json never_required_workflows. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_01Ji1bq3TypfycfUPAR7hSxR --- .github/workflows/standards-pipeline.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/standards-pipeline.yml b/.github/workflows/standards-pipeline.yml index 592680b..8ab3c44 100644 --- a/.github/workflows/standards-pipeline.yml +++ b/.github/workflows/standards-pipeline.yml @@ -33,10 +33,10 @@ permissions: jobs: pipeline: - # hyperpolymath/standards @ 2eb9bb19 — ci-pipeline.yml blob d2583657. + # hyperpolymath/standards @ f95130bb — ci-pipeline.yml blob 8bcdeaf2. # # NO `secrets:` block, deliberately. ci-pipeline.yml declares # `workflow_call.inputs` only, has no `secrets:` block and references no # `secrets.*` anywhere; `secrets: inherit` would hand the whole store to a # workflow that consumes none of it. - uses: hyperpolymath/standards/.github/workflows/ci-pipeline.yml@2eb9bb19d43b6285466ca36b92d1324a09e7a207 + uses: hyperpolymath/standards/.github/workflows/ci-pipeline.yml@f95130bbcbc8917bfec8f8875fa810ad93b08871 From be2b0855317bbf679e9abb41506d81b680cfa916 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Tue, 22 Sep 2026 20:12:28 +0100 Subject: [PATCH 2/2] fix(ci): retarget ci-pipeline pin to standards#989 squash SHA ed5e3f65 f95130bb predated hyperpolymath/standards#989 and carried both defects that PR cures: the exemption-ledger checkout read `ref: a2ff696a` (an abbreviated SHA, which `git fetch` cannot resolve) and `detect` did its own `exit 1`, so a ledgered repository went red regardless of its exemption. Re-pins to ed5e3f65 - the squash merge of #989 on standards' main - where the ledger is read at `${{ job.workflow_sha }}` and `report` is the single judge. Proven on the pilot before this wave: AcceleratorGate.jl#40, dispatch run 35770740241, printed `ledger read at 'ed5e3f651305dd1ce0d0b5d2d08b97a963634632'` - the callee's own commit, 40 hex, non-empty - and the run was green while correctly refusing. The provenance comment moves with the pin: a stale comment is a phantom pin. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_01Ji1bq3TypfycfUPAR7hSxR --- .github/workflows/standards-pipeline.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/standards-pipeline.yml b/.github/workflows/standards-pipeline.yml index 8ab3c44..e9bf8c8 100644 --- a/.github/workflows/standards-pipeline.yml +++ b/.github/workflows/standards-pipeline.yml @@ -33,10 +33,10 @@ permissions: jobs: pipeline: - # hyperpolymath/standards @ f95130bb — ci-pipeline.yml blob 8bcdeaf2. + # hyperpolymath/standards @ ed5e3f65 — ci-pipeline.yml blob ea87c43a. # # NO `secrets:` block, deliberately. ci-pipeline.yml declares # `workflow_call.inputs` only, has no `secrets:` block and references no # `secrets.*` anywhere; `secrets: inherit` would hand the whole store to a # workflow that consumes none of it. - uses: hyperpolymath/standards/.github/workflows/ci-pipeline.yml@f95130bbcbc8917bfec8f8875fa810ad93b08871 + uses: hyperpolymath/standards/.github/workflows/ci-pipeline.yml@ed5e3f651305dd1ce0d0b5d2d08b97a963634632