ci(hypatia): standardise the wrapper caller id to the canonical hypatia

[hyperpolymath]

The check a reusable-caller job publishes is <caller job id> / <inner job display name>. The estate's canonical required context is hypatia / Hypatia Neurosymbolic Analysis (docs/audits/audit-hypatia-pin-orphan-2026-05-27.adoc), so the caller job must be named hypatia. This wrapper named it scan, and so published scan / Hypatia Neurosymbolic Analysis — two names for one gate, and any requirement written against one is unsatisfiable in a repository that publishes the other (the defect class of hyperpolymath/tropical-types#17).

Rename only — the job body, its pin, its inputs and its secrets are byte-for-byte unchanged.

Audit-first, requirement-aware: this is --fix output from scripts/propagate-hypatia-caller-id.sh in hyperpolymath/standards (the script stages; it never commits or pushes). The repository's active branch rulesets were read before the rename — no rule here names the old prefixed context, so the published name and every requirement stay in agreement.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 6cbc3e9b-97d1-4e7c-9e5d-a883fd67b38f

📥 Commits

Reviewing files that changed from the base of the PR and between 11b2460 and b79159d.

📒 Files selected for processing (1)

• .github/workflows/hypatia-scan.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

📜 Recent review details

⏰ Context from checks skipped due to timeout. (27)

• GitHub Check: governance / Exemption ratchet
• GitHub Check: governance / Workflow security linter
• GitHub Check: governance / Trusted-base reduction policy
• GitHub Check: governance / Debt ratchet
• GitHub Check: governance / Licence consistency
• GitHub Check: governance / Well-Known (RFC 9116 + RSR)
• GitHub Check: governance / Security policy checks
• GitHub Check: governance / Check Workflow Staleness
• GitHub Check: governance / Code quality + docs
• GitHub Check: governance / Language / package anti-pattern policy
• GitHub Check: governance / Guix packaging policy (Nix retired)
• GitHub Check: governance / Allowlist Preflight
• GitHub Check: scan / rust-secrets
• GitHub Check: scan / gitleaks
• GitHub Check: hypatia / Hypatia Neurosymbolic Analysis
• GitHub Check: scan / shell-secrets
• GitHub Check: rust-ci / Detect Cargo.toml
• GitHub Check: analyze (actions, none)
• GitHub Check: Validate eclexiaiser manifest
• GitHub Check: Hypatia neurosymbolic scan
• GitHub Check: ABI ↔ FFI structural conformance
• GitHub Check: Validate A2ML manifests
• GitHub Check: Groove manifest check
• GitHub Check: panic-attack assail
• GitHub Check: Empty-linter (invisible characters)
• GitHub Check: Validate K9 contracts
• GitHub Check: Zig FFI builds + tests (Zig 0.14.0)

🔇 Additional comments (1)

.github/workflows/hypatia-scan.yml (1)

22-22: LGTM!

---

📝 Summary

Summary by CodeRabbit

• Chores
  • Updated the security scanning workflow configuration to improve internal workflow consistency.
  • No user-facing functionality or behaviour has changed.

Walkthrough

The Hypatia Security Scan workflow job is renamed from scan to hypatia. Its reusable workflow invocation and permissions remain unchanged.

Changes

Hypatia workflow

Layer / File(s)	Summary
Rename the workflow job .github/workflows/hypatia-scan.yml	The job identifier changes from scan to hypatia. The reusable workflow invocation and permissions remain unchanged.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~2 minutes

Change: Bug fix

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description explains the change and its rationale, but it does not follow the required template. It omits the required headings, checklist status, explicit testing section, and applicable document…	Update the description to include the Summary, Changes, RSR Quality Checklist, and Testing sections. Mark each applicable checklist item. State the test commands run and their results. Include screenshots or terminal output if appli…

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly identifies the CI change: it standardises the Hypatia wrapper caller job ID to hypatia.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Full details: Description check

Explanation

The description explains the change and its rationale, but it does not follow the required template. It omits the required headings, checklist status, explicit testing section, and applicable documentation such as screenshots or terminal output.

Resolution

Update the description to include the Summary, Changes, RSR Quality Checklist, and Testing sections. Mark each applicable checklist item. State the test commands run and their results. Include screenshots or terminal output if applicable.

• Fix all pre-merge checks with AI

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{A rabbit checks the workflow name
hypatia now leads the scan
The settings stay in place
No permissions change their pace
One small rename completes the plan}

_{Comment @coderabbitai help to get the list of available commands.}