Merge remote-tracking branch 'origin/main' into coderabbit/format-rust-code-ci/92ffd79b

# Conflicts:
#	tests/test_byte_detection.sh

Author: hyperpolymath

.github/workflows/governance.yml

@@ -32,4 +32,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@092dedada188f56c5915f74a5fd40aac093742c3
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c

.github/workflows/mirror.yml

@@ -7,9 +7,10 @@ on:
   workflow_dispatch:
 
 permissions:
+  actions: read
   contents: read
 
 jobs:
   mirror:
-    uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@092dedada188f56c5915f74a5fd40aac093742c3
+    uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c
     secrets: inherit

.github/workflows/rust-ci.yml

@@ -14,4 +14,4 @@ permissions:
 
 jobs:
   rust-ci:
-    uses: hyperpolymath/standards/.github/workflows/rust-ci-reusable.yml@092dedada188f56c5915f74a5fd40aac093742c3
+    uses: hyperpolymath/standards/.github/workflows/rust-ci-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c

.github/workflows/scorecard.yml

@@ -13,7 +13,7 @@ permissions:
 
 jobs:
   analysis:
-    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@092dedada188f56c5915f74a5fd40aac093742c3
+    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c
     permissions:
       contents: read
       security-events: write

.github/workflows/secret-scanner.yml

@@ -17,5 +17,5 @@ jobs:
   scan:
     permissions:
       contents: read
-    uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@092dedada188f56c5915f74a5fd40aac093742c3
+    uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c
     secrets: inherit

tests/test_byte_detection.sh

@@ -24,7 +24,7 @@ echo ""
 PASS=0
 FAIL=0
 
-# Test helper functions
+# Assert that a fixture contains the supplied grep-compatible pattern.
 test_should_match() {
     local desc="$1"
     local file="$2"
@@ -39,6 +39,7 @@ test_should_match() {
     fi
 }
 
+# Assert that a fixture does not contain the supplied grep-compatible pattern.
 test_should_not_match() {
     local desc="$1"
     local file="$2"
@@ -104,7 +105,7 @@ echo ""
 echo "Test Group 3: Mid-file Invisible Unicode (Advisory)"
 echo "────────────────────────────────────────────────────"
 
-# For PCRE patterns with Unicode, we need the -P flag
+# Assert that a fixture contains the supplied Unicode-aware PCRE pattern.
 test_should_match_pcre() {
     local desc="$1"
     local file="$2"
@@ -119,6 +120,7 @@ test_should_match_pcre() {
     fi
 }
 
+# Assert that a fixture does not contain the supplied Unicode-aware PCRE pattern.
 test_should_not_match_pcre() {
     local desc="$1"
     local file="$2"