Skip to content

Promote the Fleet Instruction Set Resync to Main - #552

Merged
ptr727 merged 2 commits into
mainfrom
develop
Oct 26, 2026
Merged

ptr727 merged 2 commits into
mainfrom
develop

Conversation

@ptr727

@ptr727 ptr727 commented Oct 26, 2026

Copy link
Copy Markdown
Owner

Summary

Promotes the fleet resync against hub main at 5344d82 to main.

  • #548 carries the instruction set and the skills tree: the AGENTS.md and GOVERNANCE.md verbatim sections, including the new "Design Before Code" and "Trust Boundaries and Hardening Effort" sections, CODESTYLE.md and WORKFLOW.md, the Copilot runbook with Blog's first disproved-claims entry, and the carried skills. OPERATIONS.md lists Blog's trust boundaries under "Configuration Layout", as the carried rule asks.
  • #551 carries the Markdown config, scopes the publisher's concurrency group to its ref per WORKFLOW.md D7.1, cites each concurrency exception by number, and fixes the README pre-release shield and reference order.

Nothing the server sends changes, so no deploy is owed. A release is the maintainer's call.

Follow-ups filed along the way: #546, #547, #549, #550, ptr727/ProjectTemplate#3503, and ptr727/ProjectTemplate#3504.

Closes #540

🤖 Generated with Claude Code

ptr727 and others added 2 commits October 26, 2026 08:51
* Carry the Design Before Code and Trust Boundaries Sections

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* Re-Vendor the AGENTS.md and GOVERNANCE.md Verbatim Sections

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* Count the AGENTS.md Preamble's Contents as the Hub Does

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* Carry the Hub's CODESTYLE.md and WORKFLOW.md Changes

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* Carry the Copilot Runbook Changes and Record the E402 Disproof

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* Re-Vendor the Carried Skills Tree

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* State the E402 Claim's Origin Without a Pull Request Number

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* List Blog's Trust Boundaries Under Configuration Layout, and Pin the E402 Proof to Its Ruff Version

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* Class Fork Media and Third-Party Lookups as Untrusted in the Trust List

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* Follow the Fleet Rule for Fuzzer Failures and Scope the Trusted Catch-All

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* Class All CrowdSec Output Untrusted and Leave Fuzzer Failures to the Carried Rule

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
…Shields (#551)

* Carry the Markdown Config, Scope the Publisher's Concurrency, and Fix the README Shields

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* Cite Each Concurrency Exception by Number

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Copilot AI lite review requested due to automatic review settings October 26, 2026 15:57
@coderabbitai

coderabbitai Bot commented Oct 26, 2026

Copy link
Copy Markdown

Important

  • 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: e56cfa47-dacf-4bde-8f7e-05d97fd74f88
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@codecov

codecov Bot commented Oct 26, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 53.98%. Comparing base (b18f7cc) to head (8eb0043).
⚠️ Report is 156 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #552   +/-   ##
=======================================
  Coverage   53.98%   53.98%           
=======================================
  Files          12       12           
  Lines        3412     3412           
=======================================
  Hits         1842     1842           
  Misses       1570     1570           
Flag Coverage Δ
python-3.13 53.98% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

Two unresolved moderate findings remain regarding the naming-rule conflict and contradictory trust-boundary guidance.

No open issues 🎉

What changed in this PR

This pull request promotes the fleet instruction-set resync and related workflow, documentation, and configuration updates to main, while preserving Blog-specific operational guidance and release behavior.

Changes:

  • Updates operational trust-boundary, coding, documentation, review, and workflow guidance.
  • Refreshes the carried skills tree and instruction-management procedures.
  • Fixes the pre-release shield, reference ordering, Markdown configuration comments, and workflow concurrency declarations.
File Description
README.md Updates the pre-release shield and repository reference ordering.
OPERATIONS.md Adds Blog-specific trust-boundary and operational guidance.
CODESTYLE.md Carries updated coding, naming, parsing, testing, and dependency rules.
.markdownlint-cli2.jsonc Clarifies Markdown glob and ignore configuration.
.github/​workflows/​publish-release.yml Uses ref-scoped publisher concurrency.
.github/​workflows/​merge-bot-pull-request.yml Documents the merge-bot concurrency exception.
.github/​workflows/​deploy-site.yml Documents the deploy concurrency exception.
.github/​skills/​workflow-ci-contract/​SKILL.md Refreshes workflow and composite-action contract guidance.
.github/​skills/​workflow-ci-contract/​references/​test-methodology.md Updates workflow trace scenarios and live-probe guidance.
.github/​skills/​workflow-ci-contract/​references/​architecture.md Documents release-asset hooks and workflow architecture.
.github/​skills/​upstream-contribution-workflow/​SKILL.md Clarifies mirror branches and unmerged iteration PRs.
.github/​skills/​standup-a-repo/​SKILL.md Adds line-ending conversion and hub-report requirements.
.github/​skills/​skill-lifecycle/​SKILL.md Updates skill generation, distribution, and installation procedures.
.github/​skills/​shell-codestyle/​SKILL.md Adds structured-format and command-line guidance.
.github/​skills/​resync-a-repo/​SKILL.md Updates audit, resync, conversion, and cleanup procedures.
.github/​skills/​repo-worktree/​SKILL.md Adds stash avoidance and centralized cleanup guidance.
.github/​skills/​python-codestyle/​SKILL.md Updates Python checker, environment, dependency, and argument guidance.
.github/​skills/​python-codestyle/​references/​profiles.md Refreshes Python profile and test dependency instructions.
.github/​skills/​python-codestyle/​references/​code-style.md Adds subprocess encoding and naming guidance.
.github/​skills/​merge-and-release/​SKILL.md Updates promotion, attestation, refresh, and cleanup procedures.
.github/​skills/​local-strict-review/​SKILL.md Refines review dispatch, recording, and prose-lint guidance.
.github/​skills/​git-commit-conventions/​SKILL.md Clarifies signature and cleanup rules.
.github/​skills/​git-commit-conventions/​references/​history-rewrite.md Clarifies history-rewrite requirements.
.github/​skills/​fleet-code-review/​SKILL.md Adds design, hardening, trust-boundary, and review guidance.
.github/​skills/​drive-pr/​SKILL.md Updates attestation, cleanup, finding disposition, and promotion procedures.
.github/​skills/​dotnet-codestyle/​SKILL.md Refreshes .NET clean-compile and warning-policy guidance.
.github/​skills/​dotnet-codestyle/​references/​testing.md Clarifies coverage and test-diagnosis requirements.
.github/​skills/​copilot-instructions-keeper/​SKILL.md Generalizes carried-section and instruction ownership guidance.
.github/​skills/​comment-and-doc-style/​SKILL.md Updates documentation, comments, count, character, and lint guidance.
.github/​skills/​comment-and-doc-style/​references/​markdown-links.md Generalizes Markdown link exception wording.
.github/​skills/​comment-and-doc-style/​references/​line-endings.md Clarifies Git normalization and Python line-ending behavior.
.github/​skills/​comment-and-doc-style/​references/​carried-doc-references.md Updates carried-document reference restrictions.
.github/​skills/​check-this-repo/​SKILL.md Expands plugin-status interpretation and refresh guidance.
.github/​skills/​carried-instruction-file-guard/​SKILL.md Generalizes instruction-file protection guidance.
.github/​skills/​branching-and-release-model/​SKILL.md Updates branching and promotion-model terminology.
.github/​skills/​branching-and-release-model/​references/​release-publish-mechanics.md Documents release-asset hooks and publishing recovery details.
.github/​skills/​branching-and-release-model/​references/​branch-protection-and-promotion.md Updates branch-protection and promotion guidance.
.github/​skills/​backlog-burndown/​SKILL.md Updates worker handback, claims, blocking, ranking, and cleanup procedures.
.github/​skills/​audit-a-repo/​SKILL.md Updates audit commands, history requirements, and checkout cleanup.
.github/​copilot-instructions.md Updates review attestation guidance and records Blog’s disproved-claims entry.

Review effort: Lite

@ptr727

ptr727 commented Oct 26, 2026

Copy link
Copy Markdown
Owner Author

Answering the two items this round's headline names. Neither has a thread or a line, so each is matched to what this change has on record.

  • Naming-rule conflict. This is the carried CODESTYLE.md "Env and secret files" row against the dotted host env file names OPERATIONS.md documents. Apply One Naming Convention to Every Env and Secret File, Host-Side Files Included ProjectTemplate#3503 decided that the rule reaches host-side files and that the fields join with _. The hub writes that into CODESTYLE.md first, and Blog's rename follows in the resync that carries it, so the rule and the docs change together. Deferred to Rename the Host Env Files to the Fleet's Underscore-Joined Form #550.
  • Trust-boundary guidance. OPERATIONS.md "Trust Boundaries" applies the carried GOVERNANCE.md "Trust Boundaries and Hardening Effort" section. It classes a fork's media untrusted and adds no hardening for it, because a crafted file there can only fail that run's own check. That follows the section's bullet that untrusted input is validated "in proportion to what it can reach from there". The maintainer chose to follow the carried rule for fuzzer failures with no local exception, and Retire the Media Parser Fuzz Gate, Since Its Inputs Are Trusted #549 retires the fuzz gate. Five local strict review passes read this subsection against the carried section, and the last reported nothing. If the round meant a different pair of statements, name the lines and they will be checked.

@ptr727
ptr727 merged commit dbb671e into main Oct 26, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Resync the Carried Instruction Set, Starting With CODESTYLE.md's General Rules

2 participants