Skip to content

docs: kcX is now kyX - #364

Merged
hyperpolymath merged 1 commit into
mainfrom
chore/kcx-renamed-kyx
Oct 13, 2026
Merged

hyperpolymath merged 1 commit into
mainfrom
chore/kcx-renamed-kyx

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

The planned projection compiler named kcX in D309/D313 is renamed kyX (owner ruling D334, hyperpolymath/standards#1234). Read it as "y for anything from X". Its sibling kcq became kyq the same day (D333, metadatastician/kyq).

Changed (live references): .claude/CLAUDE.md, docs/READINESS.adoc, docs/README.adoc, docs/practice/TESTS-AND-BENCHES.adoc, docs/wikis/CI-and-Required-Checks.adoc. Dated records, such as affirmations "as of" a date, keep the name they were written with.

🤖 Generated with Claude Code

The planned projection compiler named kcX in D309/D313 is renamed kyX
(owner ruling D334, hyperpolymath/standards#1234). Read it as "y for
anything from X". Its sibling kcq was renamed kyq the same day (D333).
Live references only; dated records keep the name they were written
with.

Signed-off-by: Jonathan D.A. Jewell <6759885+hyperpolymath@users.noreply.github.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@coderabbitai

coderabbitai Bot commented Oct 13, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 46ccac63-bbb8-49ef-9134-2b3fae9ff877
📥 Commits

Reviewing files that changed from the base of the PR and between 3df9427 and e902c2b.

📒 Files selected for processing: 5
  • .claude/CLAUDE.md
  • docs/READINESS.adoc
  • docs/README.adoc
  • docs/practice/TESTS-AND-BENCHES.adoc
  • docs/wikis/CI-and-Required-Checks.adoc

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

📜 Recent review details
⏰ Context from checks skipped due to timeout: 36
  • GitHub Check: governance / Well-Known (RFC 9116 + RSR)
  • GitHub Check: governance / Trusted-base reduction policy
  • GitHub Check: governance / Debt ratchet
  • GitHub Check: governance / Exemption ratchet
  • GitHub Check: governance / Allowlist Preflight
  • GitHub Check: governance / Licence consistency
  • GitHub Check: governance / Actions lockfile verify
  • GitHub Check: governance / Code quality + docs
  • GitHub Check: governance / UUID v7 conformance
  • GitHub Check: governance / Workflow security linter
  • GitHub Check: governance / Security policy checks
  • GitHub Check: governance / Language / package anti-pattern policy
  • GitHub Check: governance / Check Workflow Staleness
  • GitHub Check: governance / Guix packaging policy (Nix retired)
  • GitHub Check: governance / Live Actions policy (credentialed advisory)
  • GitHub Check: scan / shell-secrets
  • GitHub Check: scan / gitleaks
  • GitHub Check: scan / rust-secrets
  • GitHub Check: Validate K9 contracts
  • GitHub Check: Groove manifest check
  • GitHub Check: Validate DEED manifests
  • GitHub Check: Validate eclexiaiser manifest
  • GitHub Check: Empty-linter (invisible characters)
  • GitHub Check: Bridge — deno (unit + boot smoke)
  • GitHub Check: Bridge — node (unit + boot smoke)
  • GitHub Check: Bridge — bun (unit + boot smoke)
  • GitHub Check: Detect relevant changes
  • GitHub Check: Detect relevant changes
  • GitHub Check: Hypatia Neurosymbolic Analysis
  • GitHub Check: Trusted-base audit (no new axioms)
  • GitHub Check: analyze (javascript-typescript, none)
  • GitHub Check: Idris2 type-check (core + all cartridge ABIs)
  • GitHub Check: SonarQube
  • GitHub Check: Detect relevant changes
  • GitHub Check: Detect relevant changes
  • GitHub Check: semgrep-cloud-platform/scan
⚠️ CI failures not shown inline: 2

GitHub Actions: Build / 0_SonarQube.txt: docs: kcX is now kyX

Conclusion: failure

View job details

##[group]Run SonarSource/sonarqube-scan-action@v8.1.0
 with:
   projectBaseDir: .
   scannerVersion: 8.1.0.6389
   scannerBinariesUrl: https://binaries.sonarsource.com/Distribution/sonar-scanner-cli
   skipSignatureVerification: false
 env:
   SONAR_***REDACTED_SECRET_ASSIGNMENT***
 ##[endgroup]
 Installing Sonar Scanner CLI 8.1.0.6389 for linux-x64...
 Downloading from: https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-8.1.0.6389-linux-x64.zip
 Downloading signature from: https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-8.1.0.6389-linux-x64.zip.asc
 Importing SonarSource public key from hkps://keyserver.ubuntu.com...
 [command]/usr/bin/gpg --homedir /home/runner/work/_temp/gpg-home-1791933200417-2096 --batch --keyserver hkps://keyserver.ubuntu.com --recv-keys 679F1EE92B19609DE816FDE81DB198F93525EC1A
 gpg: keybox '/home/runner/work/_temp/gpg-home-1791933200417-2096/pubring.kbx' created
 gpg: /home/runner/work/_temp/gpg-home-1791933200417-2096/trustdb.gpg: trustdb created
 gpg: key 1DB198F93525EC1A: public key "SonarSource S.A. <infra@sonarsource.com>" imported
 gpg: Total number processed: 1
 gpg:               imported: 1
 Successfully imported key from hkps://keyserver.ubuntu.com
 ✓ SonarSource public key imported successfully
 Verifying GPG signature...
 [command]/usr/bin/gpg --homedir /home/runner/work/_temp/gpg-home-1791933200417-2096 --batch --verify /home/runner/work/_temp/ef756b2f-8c17-4255-b41b-a14409c90e82 /home/runner/work/_temp/c9b07654-e87e-4050-bdbd-4a376173dec4
 gpg: Signature made Tue Apr 21 07:20:26 2026 UTC
 gpg:                using RSA key D1436C0DBACEA48702AF97C363F1DD7753B8B315
 gpg: Good signature from "SonarSource S.A. <infra@sonarsource.com>" [unknown]
 gpg: WARNING: This key is not certified with a trusted signature!
 gpg:          There is no indication that the signature belongs to the owner.
 Primary key fingerprint: 679F 1EE9 2B19 609D E816  FDE8 1DB1 98F9 3525 EC1A
   ...

GitHub Actions: Build / SonarQube: docs: kcX is now kyX

Conclusion: failure

View job details

##[group]Run SonarSource/sonarqube-scan-action@v8.1.0
 with:
   projectBaseDir: .
   scannerVersion: 8.1.0.6389
   scannerBinariesUrl: https://binaries.sonarsource.com/Distribution/sonar-scanner-cli
   skipSignatureVerification: false
 env:
   SONAR_***REDACTED_SECRET_ASSIGNMENT***
 ##[endgroup]
 Installing Sonar Scanner CLI 8.1.0.6389 for linux-x64...
 Downloading from: https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-8.1.0.6389-linux-x64.zip
 Downloading signature from: https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-8.1.0.6389-linux-x64.zip.asc
 Importing SonarSource public key from hkps://keyserver.ubuntu.com...
 [command]/usr/bin/gpg --homedir /home/runner/work/_temp/gpg-home-1791933200417-2096 --batch --keyserver hkps://keyserver.ubuntu.com --recv-keys 679F1EE92B19609DE816FDE81DB198F93525EC1A
 gpg: keybox '/home/runner/work/_temp/gpg-home-1791933200417-2096/pubring.kbx' created
 gpg: /home/runner/work/_temp/gpg-home-1791933200417-2096/trustdb.gpg: trustdb created
 gpg: key 1DB198F93525EC1A: public key "SonarSource S.A. <infra@sonarsource.com>" imported
 gpg: Total number processed: 1
 gpg:               imported: 1
 Successfully imported key from hkps://keyserver.ubuntu.com
 ✓ SonarSource public key imported successfully
 Verifying GPG signature...
 [command]/usr/bin/gpg --homedir /home/runner/work/_temp/gpg-home-1791933200417-2096 --batch --verify /home/runner/work/_temp/ef756b2f-8c17-4255-b41b-a14409c90e82 /home/runner/work/_temp/c9b07654-e87e-4050-bdbd-4a376173dec4
 gpg: Signature made Tue Apr 21 07:20:26 2026 UTC
 gpg:                using RSA key D1436C0DBACEA48702AF97C363F1DD7753B8B315
 gpg: Good signature from "SonarSource S.A. <infra@sonarsource.com>" [unknown]
 gpg: WARNING: This key is not certified with a trusted signature!
 gpg:          There is no indication that the signature belongs to the owner.
 Primary key fingerprint: 679F 1EE9 2B19 609D E816  FDE8 1DB1 98F9 3525 EC1A
   ...
🧰 Additional context used
📚 Code guidelines: 1
.github/copilot-instructions.md — auto-discovered
📓 Path-based instructions: 1
Source excerpt: SPDX: `MPL-2.0` on all new files.

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

Files:

  • docs/READINESS.adoc
  • docs/wikis/CI-and-Required-Checks.adoc
  • docs/practice/TESTS-AND-BENCHES.adoc
  • docs/README.adoc
🔇 Additional comments: 5
.claude/CLAUDE.md: 1

9-9: LGTM!

docs/READINESS.adoc: 1

109-109: LGTM!

docs/README.adoc: 1

206-206: LGTM!

docs/practice/TESTS-AND-BENCHES.adoc: 1

123-123: LGTM!

docs/wikis/CI-and-Required-Checks.adoc: 1

126-126: LGTM!

📝 Summary

Summary by CodeRabbit

  • Documentation
    • Updated documentation to identify kyX as the pending destination for retired A2ML state and descriptive metadata, replacing kcX.
    • Clarified that the state files remain read-only and are not current pending migration to chora.

The guidance and documentation now identify kyX, instead of kcX, as the pending deed for conversion to chora. The existing read-only and not-current descriptions remain unchanged.

Changes: A2ML deed references

Layer / File(s) Summary
Update pending deed references
.claude/CLAUDE.md, docs/READINESS.adoc, docs/README.adoc, docs/practice/TESTS-AND-BENCHES.adoc, docs/wikis/CI-and-Required-Checks.adoc
The guidance, readiness entry, related-files entry, practice reference and runbook now use kyX instead of kcX for the pending chora deed. The read-only and not-current descriptions remain unchanged.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to e902c

The live references reflect the updated kyX designation; AFFIRMATION retains historical wording, so no current documentation inconsistency is established.

### Architecture Summary

Architecture risk: 🔵 Low · up to e902c

The change affects 1 system.

Changed systems: docs

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

  • observed — docs (service) was modified; 4 changed files map to changed impact.

Before / after behavior

  • observed — Modified behavior in docs/READINESS.adoc: The retired A2ML STATE entry changes the pending deed identifier from kcX to kyX.
  • observed — Modified behavior in docs/README.adoc: The related-files entry changes the named converter from kcX to kyX; the read-only-until-conversion and not-current descriptions are unchanged.
  • observed — Modified behavior in docs/practice/TESTS-AND-BENCHES.adoc: The pending destination in the .machine_readable/6a2/STATE.a2ml reference changes from kcX to kyX.
  • observed — Modified behavior in docs/wikis/CI-and-Required-Checks.adoc: The operational runbook entry changes the pending deed reference from kcX → chora to kyX → chora.
Pre-merge checks: Passed 4 · Failed 1

Failed Failed checks: 1 warning

Check name Status Explanation Resolution
Description check Warning The description explains the rename and lists the affected files, but it omits the required Summary, Changes, RSR Quality Checklist, Testing, and Screenshots sections from the repository template. Update the description to use the repository template. Add the required headings, complete the RSR Quality Checklist, and state the testing performed. Mark Screenshots as not applicable if no screenshots are needed.
Passed Passed checks: 4 passed
Check name Status Explanation
Title check Passed The title clearly and concisely identifies the documentation change from kcX to kyX.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
  • Fix all pre-merge checks with AI
✨ Finishing Touches: 💡 1
🛠️ Fix failing CI checks: 💡
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

A rabbit checked the deed at dawn,
And found the old kcX was gone.
kyX now points the way,
Through notes that guide the day.
To chora, neat and clear,
The rabbit hops with cheer.

Comment @coderabbitai help to get the list of available commands.

@github-actions

Copy link
Copy Markdown

🔍 Hypatia Security Scan

Findings: 110 issues detected

Severity Count
🔴 Critical 10
🟠 High 18
🟡 Medium 82

⚠️ Action Required: Critical security issues found!

View findings
[
  {
    "reason": "Job `sonarqube` in build.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).",
    "type": "missing_timeout_minutes",
    "file": ".github/workflows/build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium",
    "recipe_id": "recipe-add-workflow-timeout-minutes",
    "job": "sonarqube"
  },
  {
    "reason": "Job `triage` in label-triage.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).",
    "type": "missing_timeout_minutes",
    "file": ".github/workflows/label-triage.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium",
    "recipe_id": "recipe-add-workflow-timeout-minutes",
    "job": "triage"
  },
  {
    "reason": "Job `sync` in labels.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).",
    "type": "missing_timeout_minutes",
    "file": ".github/workflows/labels.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium",
    "recipe_id": "recipe-add-workflow-timeout-minutes",
    "job": "sync"
  },
  {
    "reason": "Job `deploy` in pages-deploy.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).",
    "type": "missing_timeout_minutes",
    "file": ".github/workflows/pages-deploy.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium",
    "recipe_id": "recipe-add-workflow-timeout-minutes",
    "job": "deploy"
  },
  {
    "reason": "Step uses `peter-evans/repository-dispatch` with `token: ${{ secrets.FARM_DISPATCH_TOKEN }}` but has no `if: secrets.FARM_DISPATCH_TOKEN != ''` gate. On repos where the secret hasn't been propagated the action fails on every push, red-maining the repo. Add the step-level gate (or env+if pattern) so the missing-secret path is a clean skip instead of a red.",
    "type": "secret_action_without_presence_gate",
    "file": ".github/workflows/instant-sync.yml",
    "action": "peter-evans/repository-dispatch",
    "rule_module": "workflow_audit",
    "severity": "high",
    "fix_recipe": "add_secret_presence_gate"
  },
  {
    "reason": "codeql.yml does not list `language: actions` in its matrix, but the repo has workflow files. CodeQL's `actions` language scans workflow YAML for injection and other CI/CD-specific weaknesses — every repo with workflows benefits. Add an entry to `matrix.include` with `language: actions` + `build-mode: none`.",
    "type": "codeql_missing_actions_language",
    "file": ".github/workflows/codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium",
    "fix_recipe": "add_codeql_actions_language"
  },
  {
    "line": 39,
    "reason": "job in .github/workflows/labels.yml references `secrets.*` but does not install `step-security/harden-runner` — review outbound-egress monitoring",
    "type": "RE001",
    "file": ".github/workflows/labels.yml",
    "action": "report",
    "rule_module": "research_extensions",
    "severity": "medium"
  },
  {
    "line": 46,
    "reason": "job in .github/workflows/push-email-notify.yml references `secrets.*` but does not install `step-security/harden-runner` — review outbound-egress monitoring",
    "type": "RE001",
    "file": ".github/workflows/push-email-notify.yml",
    "action": "report",
    "rule_module": "research_extensions",
    "severity": "medium"
  },
  {
    "line": 32,
    "reason": "job in .github/workflows/build.yml references `secrets.*` but does not install `step-security/harden-runner` — review outbound-egress monitoring",
    "type": "RE001",
    "file": ".github/workflows/build.yml",
    "action": "report",
    "rule_module": "research_extensions",
    "severity": "medium"
  },
  {
    "line": 44,
    "reason": "job in .github/workflows/container-publish.yml references `secrets.*` but does not install `step-security/harden-runner` — review outbound-egress monitoring",
    "type": "RE001",
    "file": ".github/workflows/container-publish.yml",
    "action": "report",
    "rule_module": "research_extensions",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence

@hyperpolymath
hyperpolymath enabled auto-merge (squash) October 13, 2026 23:16
@hyperpolymath
hyperpolymath merged commit 2874b3f into main Oct 13, 2026
59 of 61 checks passed
@hyperpolymath
hyperpolymath deleted the chore/kcx-renamed-kyx branch October 13, 2026 23:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant