[ptr727]

Summary

Resyncs the carried instruction set and the skills tree with hub main at 5344d82, per the hub's RESYNC.md steps 1 and 3, for #540. Measured by audit run 2026-10-26T15:06:59Z | hub 5344d82 against main@2e51a27.

• AGENTS.md and GOVERNANCE.md verbatim sections re-vendored with carry.py apply-sections. Every region classified stale (a past hub revision), none modified, so no local text was at risk. GOVERNANCE.md gains the hub's new "Design Before Code" and "Trust Boundaries and Hardening Effort" sections in hub order. The one AGENTS.md preamble change the hub made since the last resync is carried by hand.
• CODESTYLE.md and WORKFLOW.md carry the hub's own diff since the last resync. CODESTYLE.md keeps Blog's "Hugo" section and gains the General rules Rename Every Python File to the Fleet's snake_case Names #537 and Answer --help and Refuse Unknown Arguments in Every Script #542 already apply, among them "Script and Utility File Names" and "Command-Line Arguments". WORKFLOW.md is byte-identical to the hub.
• .github/copilot-instructions.md carries the runbook changes and the hub's ledger-ownership paragraph, and none of the hub's own ledger entries. It gains Blog's first "Disproved Claims" entry: Copilot's recurring claim that ruff refuses a test's import after sys.path.insert as E402. Proved with ruff 0.17.2, whose effective rule set holds no E402.
• .github/skills re-vendored with carry.py apply, no extra or missing paths.
• OPERATIONS.md: the newly carried "Trust Boundaries" rule says a repository lists its trusted and untrusted inputs under "Configuration Layout". Blog's "Threat Model" section moves there as "Trust Boundaries". It adds the log lines and third-party lookups the log procedures read as untrusted surfaces, and drops what now restates the carried section.

Not in This Change

• The publisher concurrency group, the concurrency exception citations, the Markdown config, and the README shields are a separate pull request, which merges after this one since it cites rules this one carries.
• capture/ Python files sit outside the declared checks and scripts directories, the expected drift the registry already records.
• version.json's intent advisory is timestamp-only: the hub commit behind it split one sentence in WORKFLOW.md, and Blog's copy matches the hub's except its own version line.
• Live settings: repo-config/configure.sh check ptr727/Blog release reports the configuration matches.

Local Review

Five local strict review passes on the frontier tier, each recorded. The two budgeted edit rounds fixed the E402 entry, which now names its ruff version and a ruff-release delete condition. They also moved the trust list under "Configuration Layout", classed fork media and third-party lookups untrusted, and dropped restated rules. The maintainer approved a third and a fourth round on the "Trust Boundaries" subsection:

• Blog follows the carried rule for fuzzer failures, with no local exception, since every media input is the maintainer's own. The fuzzer paragraph is removed, and Retire the Media Parser Fuzz Gate, Since Its Inputs Are Trusted #549 retires the fuzz gate itself.
• CrowdSec alert and decision output, the community blocklist included, and content from outside contributors are classed untrusted. The trusted catch-all covers the same ground as the untrusted list.

Pre-existing findings, filed

• Let the Read Be the Check in the checks/ Gates That Probe First #546, checks/ gates that probe before reading, against the carried "Operations and Failure Messages" rule. Class pre-existing.
• Remove the Incidental Counts From OPERATIONS.md #547, incidental counts in OPERATIONS.md, against the carried "Incidental Counts" rule. Class pre-existing.
• Apply One Naming Convention to Every Env and Secret File, Host-Side Files Included ProjectTemplate#3503, the env and secret file naming rule. Decided there: it reaches host-side env files, so Blog's dotted host env file names get renamed. Rename the Host Env Files to the Fleet's Underscore-Joined Form #550 tracks that rename, which waits for the hub's rule to merge. Class pre-existing.
• Bring the Durable Knowledge Handoff Bullets Onto the Standing-Issue Lifecycle ProjectTemplate#3504, the carried "Durable Knowledge" bullets describe the old handoff lifecycle. Carried text, so the fix lands in the hub. Class pre-existing.

Dropped findings

• Sentence-length advisories on carried hub text, which this repository cannot edit. Class style.

🤖 Generated with Claude Code

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 72e8ca10-86fa-486d-92e8-3803dd9836f8

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[ptr727]

A recorded local strict-review pass covers head 1f2d7b5c36f11df8590a0e5a1805ac296024f30f, the content this pull request carries at that commit against develop, and it recorded 3 findings.

[Copilot]

🟡 Changes recommended

The final review identifies an unresolved trust-boundary classification issue in OPERATIONS.md, and the supplied approval assessments require changes.

1 open issue

• Classify CrowdSec alerts, decisions, and blocklists as untrusted · New

What changed in this PR

Resynchronizes Blog’s carried instruction set and generated skills tree with the ProjectTemplate hub, while relocating repository-specific trust-boundary guidance into OPERATIONS.md.

Changes:

• Updates AGENTS.md, CODESTYLE.md, and .github/copilot-instructions.md with current hub guidance.
• Re-vendors the reviewed .github/skills procedures and references.
• Adds repository-specific trust-boundary and input classifications to OPERATIONS.md.

File	Summary
OPERATIONS.md	Adds repository-specific trust-boundary classifications.
CODESTYLE.md	Carries updated operations, parsing, CLI, naming, and dependency rules.
AGENTS.md	Updates bootstrap, delegation, and review guidance.
.github/​skills/​workflow-ci-contract/​SKILL.md	Refreshes workflow contract guidance.
.github/​skills/​workflow-ci-contract/​references/​test-methodology.md	Updates workflow testing and deployment verification.
.github/​skills/​workflow-ci-contract/​references/​architecture.md	Updates workflow architecture and file-target guidance.
.github/​skills/​upstream-contribution-workflow/​SKILL.md	Clarifies mirror and iteration-PR handling.
.github/​skills/​standup-a-repo/​SKILL.md	Updates onboarding and audit-report requirements.
.github/​skills/​skill-lifecycle/​SKILL.md	Refreshes skill generation and installation procedures.
.github/​skills/​shell-codestyle/​SKILL.md	Adds structured-format and command-line guidance.
.github/​skills/​resync-a-repo/​SKILL.md	Updates audit, worktree, and resync procedures.
.github/​skills/​repo-worktree/​SKILL.md	Updates isolation and cleanup procedures.
.github/​skills/​python-codestyle/​SKILL.md	Refreshes Python profiles and script guidance.
.github/​skills/​python-codestyle/​references/​profiles.md	Updates Python profile and dependency details.
.github/​skills/​python-codestyle/​references/​code-style.md	Adds subprocess encoding and naming guidance.
.github/​skills/​merge-and-release/​SKILL.md	Updates promotion and release procedures.
.github/​skills/​local-strict-review/​SKILL.md	Updates review dispatch and recording guidance.
.github/​skills/​git-commit-conventions/​SKILL.md	Clarifies signature and cleanup conventions.
.github/​skills/​git-commit-conventions/​references/​history-rewrite.md	Simplifies history-rewrite guidance.
.github/​skills/​fleet-code-review/​SKILL.md	Adds design, hardening, and review guidance.
.github/​skills/​drive-pr/​SKILL.md	Updates review, attestation, and cleanup flow.
.github/​skills/​dotnet-codestyle/​SKILL.md	Refreshes .NET build and clean-compile guidance.
.github/​skills/​dotnet-codestyle/​references/​testing.md	Updates test-runner and coverage guidance.
.github/​skills/​copilot-instructions-keeper/​SKILL.md	Clarifies carried-instruction ownership and preservation.
.github/​skills/​comment-and-doc-style/​SKILL.md	Updates documentation and formatting rules.
.github/​skills/​comment-and-doc-style/​references/​markdown-links.md	Updates Markdown link exception guidance.
.github/​skills/​comment-and-doc-style/​references/​line-endings.md	Expands line-ending and byte-preservation guidance.
.github/​skills/​comment-and-doc-style/​references/​carried-doc-references.md	Updates carried-document reference rules.
.github/​skills/​check-this-repo/​SKILL.md	Clarifies installed-skill reporting and refresh cadence.
.github/​skills/​carried-instruction-file-guard/​SKILL.md	Generalizes instruction-file overwrite protection.
.github/​skills/​branching-and-release-model/​SKILL.md	Updates branching and release terminology.
.github/​skills/​branching-and-release-model/​references/​release-publish-mechanics.md	Updates release-target and publishing mechanics.
.github/​skills/​branching-and-release-model/​references/​branch-protection-and-promotion.md	Clarifies promotion hazards.
.github/​skills/​backlog-burndown/​SKILL.md	Updates coordination, review handback, and cleanup rules.
.github/​skills/​audit-a-repo/​SKILL.md	Updates audit commands and cleanup guidance.
.github/​copilot-instructions.md	Updates review guidance and adds disproved-claim evidence.

_{Review effort: Lite}

[ptr727]

A recorded local strict-review pass covers head f03a98d245900b293a6a2621aa8ed12e0764c27f, the content this pull request carries at that commit against develop, and it recorded 0 findings.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 53.98%. Comparing base (b18f7cc) to head (f03a98d).

Additional details and impacted files

@@           Coverage Diff            @@
##           develop     #548   +/-   ##
========================================
  Coverage    53.98%   53.98%           
========================================
  Files           12       12           
  Lines         3412     3412           
========================================
  Hits          1842     1842           
  Misses        1570     1570           

Flag	Coverage Δ
python-3.13	53.98% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.