From 875d40bf27021a897c99cc570aa3e0b1b3ddd3ae Mon Sep 17 00:00:00 2001 From: hyperpolymath Date: Mon, 21 Sep 2026 00:46:15 +0000 Subject: [PATCH] refactor: rename Hexadeca -> unified-api-adapter (estate-wide) - workflow panic-attack-hexadeca.yml -> panic-attack-unified-api-adapter.yml (name/job/steps/artifact renamed; actions.lock key renamed in lockstep) - main-estate-audit.yml flips to cicd-suite zig-unified-api-adapter-check@main (expand phase live since cicd-suite#26) - Justfile assail-hexadeca -> assail-unified-api-adapter (both contractile mirrors) - connector README/header/Types.idr + 6a2 A2ML prose renamed --- .github/workflows/actions.lock | 2 +- .github/workflows/main-estate-audit.yml | 4 ++-- ...l => panic-attack-unified-api-adapter.yml} | 20 +++++++++---------- .machine_readable/6a2/ECOSYSTEM.a2ml | 2 +- .machine_readable/6a2/STATE.a2ml | 2 +- .machine_readable/contractiles/Justfile | 6 +++--- Justfile | 6 +++--- connectors/proven-nesy-solver-api/README.adoc | 2 +- .../generated/abi/nesy_solver_api.h | 2 +- .../src/NesySolverAPI/Types.idr | 2 +- .../proven-nesy-solver-api/zig/deploy-fly.sh | 0 container/ct-build.sh | 0 container/entrypoint.sh | 0 scripts/maintenance/perms-state.sh | 0 scripts/maintenance/run-maintenance.sh | 0 setup.sh | 0 tests/aspect/security_test.sh | 0 tests/cross_binding_test.sh | 0 tests/e2e.sh | 0 tests/property_test.sh | 0 tools/check-binding-policy.sh | 0 tools/gen-abi.sh | 0 22 files changed, 24 insertions(+), 24 deletions(-) rename .github/workflows/{panic-attack-hexadeca.yml => panic-attack-unified-api-adapter.yml} (87%) mode change 100755 => 100644 connectors/proven-nesy-solver-api/zig/deploy-fly.sh mode change 100755 => 100644 container/ct-build.sh mode change 100755 => 100644 container/entrypoint.sh mode change 100755 => 100644 scripts/maintenance/perms-state.sh mode change 100755 => 100644 scripts/maintenance/run-maintenance.sh mode change 100755 => 100644 setup.sh mode change 100755 => 100644 tests/aspect/security_test.sh mode change 100755 => 100644 tests/cross_binding_test.sh mode change 100755 => 100644 tests/e2e.sh mode change 100755 => 100644 tests/property_test.sh mode change 100755 => 100644 tools/check-binding-policy.sh mode change 100755 => 100644 tools/gen-abi.sh diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 203521fc..a12a21e2 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -46,7 +46,7 @@ workflows: - 'actions/checkout@v7.0.1' - 'actions/deploy-pages@v5.0.1' - 'actions/upload-pages-artifact@v5.0.0' - '.github/workflows/panic-attack-hexadeca.yml': + '.github/workflows/panic-attack-unified-api-adapter.yml': - 'actions/checkout@v7.0.1' - 'actions/upload-artifact@v7.0.1' - 'dtolnay/rust-toolchain@stable' diff --git a/.github/workflows/main-estate-audit.yml b/.github/workflows/main-estate-audit.yml index b8a344c1..2229d944 100644 --- a/.github/workflows/main-estate-audit.yml +++ b/.github/workflows/main-estate-audit.yml @@ -28,8 +28,8 @@ jobs: - name: Idris2 ABI Purity Gate uses: hyperpolymath/cicd-suite/actions/idris2-abi-check@main - - name: Zig Hexadeca API Gate - uses: hyperpolymath/cicd-suite/actions/zig-hexadeca-check@main + - name: Zig UnifiedApiAdapter API Gate + uses: hyperpolymath/cicd-suite/actions/zig-unified-api-adapter-check@main - name: Contractile Validation Gate uses: hyperpolymath/cicd-suite/actions/contractile-validation-check@main diff --git a/.github/workflows/panic-attack-hexadeca.yml b/.github/workflows/panic-attack-unified-api-adapter.yml similarity index 87% rename from .github/workflows/panic-attack-hexadeca.yml rename to .github/workflows/panic-attack-unified-api-adapter.yml index b1000d84..eb655ad0 100644 --- a/.github/workflows/panic-attack-hexadeca.yml +++ b/.github/workflows/panic-attack-unified-api-adapter.yml @@ -3,15 +3,15 @@ # This workflow is managed by gh actions-lock. # This workflow is managed by gh actions-lock. # This workflow is managed by gh actions-lock. -# panic-attack hexadeca surface scan for proven-nesy-solver-api. +# panic-attack unified-api-adapter surface scan for proven-nesy-solver-api. # -# Scans the zig hexadeca connector (all 16 protocol surfaces) with +# Scans the zig unified-api-adapter connector (all 16 protocol surfaces) with # panic-attack assail, then maps findings to individual surfaces and # reports a per-surface pass/fail in the job summary. # # Triggered only when V connector source or its config changes. -name: panic-attack / hexadeca (nesy-solver-api) +name: panic-attack / unified-api-adapter (nesy-solver-api) on: push: branches: [main] @@ -26,8 +26,8 @@ permissions: actions: read contents: read jobs: - hexadeca-scan: - name: panic-attack hexadeca scan + unified-api-adapter-scan: + name: panic-attack unified-api-adapter scan runs-on: ubuntu-latest timeout-minutes: 15 steps: @@ -51,7 +51,7 @@ jobs: cargo build --release sudo install -m 0755 target/release/panic-attack /usr/local/bin/panic-attack panic-attack --version - - name: Run panic-attack assail (hexadeca connector) + - name: Run panic-attack assail (unified-api-adapter connector) id: assail working-directory: connectors/proven-nesy-solver-api/v run: | @@ -69,7 +69,7 @@ jobs: echo "total=$TOTAL" >> $GITHUB_OUTPUT echo "critical=$CRITICAL" >> $GITHUB_OUTPUT echo "high=$HIGH" >> $GITHUB_OUTPUT - - name: Build hexadeca surface report + - name: Build unified-api-adapter surface report id: surface-report working-directory: connectors/proven-nesy-solver-api/v run: | @@ -77,7 +77,7 @@ jobs: SURFACES=(rest graphql websocket sse grpc jsonrpc msgpack_rpc cbor flatbuffers capnproto bebop trpc mqtt amqp soap verisimdb) - echo "## panic-attack hexadeca surface report" >> $GITHUB_STEP_SUMMARY + echo "## panic-attack unified-api-adapter surface report" >> $GITHUB_STEP_SUMMARY echo "" >> $GITHUB_STEP_SUMMARY echo "| # | Surface | Findings | Status |" >> $GITHUB_STEP_SUMMARY echo "|---|---------|----------|--------|" >> $GITHUB_STEP_SUMMARY @@ -111,7 +111,7 @@ jobs: if: always() uses: actions/upload-artifact@v7.0.1 with: - name: panic-findings-hexadeca + name: panic-findings-unified-api-adapter path: | /tmp/panic-findings.json /tmp/panic-raw.txt @@ -119,6 +119,6 @@ jobs: - name: Fail on critical findings if: steps.assail.outputs.critical > 0 run: |- - echo "Critical findings in hexadeca connector — see artifact." + echo "Critical findings in unified-api-adapter connector — see artifact." jq '[.[] | select(.severity == "critical")]' /tmp/panic-findings.json exit 1 diff --git a/.machine_readable/6a2/ECOSYSTEM.a2ml b/.machine_readable/6a2/ECOSYSTEM.a2ml index d50dc949..344d3bb8 100644 --- a/.machine_readable/6a2/ECOSYSTEM.a2ml +++ b/.machine_readable/6a2/ECOSYSTEM.a2ml @@ -41,5 +41,5 @@ points = [ { system = "RGTV (rgtv-nesy)", direction = "inbound", protocol = "HTTP grant→redeem over Fly.io private 6PN (.flycast)" }, { system = "echidna (echidna-nesy)", direction = "outbound", protocol = "HTTP POST /api/verify over Fly.io private 6PN (.flycast)" }, { system = "verisim-api", direction = "outbound", protocol = "HTTP POST /attempts over Fly.io private 6PN (.flycast)" }, - { system = "panic-attack", direction = "inbound", protocol = "hexadeca 16-surface CI scan via panic-attack-hexadeca.yml" }, + { system = "panic-attack", direction = "inbound", protocol = "unified-api-adapter 16-surface CI scan via panic-attack-unified-api-adapter.yml" }, ] diff --git a/.machine_readable/6a2/STATE.a2ml b/.machine_readable/6a2/STATE.a2ml index d977bfa5..64c7c155 100644 --- a/.machine_readable/6a2/STATE.a2ml +++ b/.machine_readable/6a2/STATE.a2ml @@ -55,7 +55,7 @@ actions = [ [completed-work] entries = [ { date = "2026-04-11", description = "RGTV credential brokering: wired rgtv_client.v into nesy-solver-api, deploy-fly.sh rgtv phase added, RGTV_URL + RGTV_AGENT_TOKEN in fly.toml, vault-broker axum HTTP server built." }, - { date = "2026-04-11", description = "panic-attack hexadeca CI: 16-surface protocol architecture in panic-attack.toml, GitHub Actions workflow panic-attack-hexadeca.yml with per-surface attribution table, Justfile assail-hexadeca recipe." }, + { date = "2026-04-11", description = "panic-attack unified-api-adapter CI: 16-surface protocol architecture in panic-attack.toml, GitHub Actions workflow panic-attack-unified-api-adapter.yml with per-surface attribution table, Justfile assail-unified-api-adapter recipe." }, { date = "2026-04-11", description = "Fly.io cold-start hardening: echidna read_timeout 90s in server.v, deploy-fly.sh echidna grace_period 90s, echidna fly.toml HTTP health check + 90s grace, echidna Containerfile curl HEALTHCHECK with 90s start-period." }, { date = "2026-04-11", description = "ROADMAP.adoc: v1.1.0 (HAR, conative-gating, invariant path), v1.2.0 (Hypatia CI), v1.3.0 (Lithoglyph aqueduct), v1.4.0 (cadre-tea-router + ReScript TEA) milestones added." }, { date = "2026-04-11", description = "deploy-fly.sh: RGTV phase 0 added, dependency order updated (rgtv → clickhouse → schema → verisim → echidna → nesy-api), rgtv-agent-token state file management." }, diff --git a/.machine_readable/contractiles/Justfile b/.machine_readable/contractiles/Justfile index b9a407c8..e9f49f1e 100644 --- a/.machine_readable/contractiles/Justfile +++ b/.machine_readable/contractiles/Justfile @@ -895,12 +895,12 @@ edit: assail: @command -v panic-attack >/dev/null 2>&1 && panic-attack assail . || echo "panic-attack not found — install from https://github.com/hyperpolymath/panic-attacker" -# Run panic-attack hexadeca surface scan on the nesy-solver-api V connector. +# Run panic-attack unified-api-adapter surface scan on the nesy-solver-api V connector. # Uses connectors/proven-nesy-solver-api/v/panic-attack.toml for surface-specific # thresholds (REST + VerisimDB held to 85 robustness; others to 75). -assail-hexadeca: +assail-unified-api-adapter: @command -v panic-attack >/dev/null 2>&1 || { echo "panic-attack not found — install from https://github.com/hyperpolymath/panic-attacker"; exit 1; } - @echo "Scanning hexadeca connector (16 surfaces)..." + @echo "Scanning unified-api-adapter connector (16 surfaces)..." @cd connectors/proven-nesy-solver-api/v && panic-attack assail . --config panic-attack.toml # Self-diagnostic — checks dependencies, permissions, paths diff --git a/Justfile b/Justfile index b9a407c8..e9f49f1e 100644 --- a/Justfile +++ b/Justfile @@ -895,12 +895,12 @@ edit: assail: @command -v panic-attack >/dev/null 2>&1 && panic-attack assail . || echo "panic-attack not found — install from https://github.com/hyperpolymath/panic-attacker" -# Run panic-attack hexadeca surface scan on the nesy-solver-api V connector. +# Run panic-attack unified-api-adapter surface scan on the nesy-solver-api V connector. # Uses connectors/proven-nesy-solver-api/v/panic-attack.toml for surface-specific # thresholds (REST + VerisimDB held to 85 robustness; others to 75). -assail-hexadeca: +assail-unified-api-adapter: @command -v panic-attack >/dev/null 2>&1 || { echo "panic-attack not found — install from https://github.com/hyperpolymath/panic-attacker"; exit 1; } - @echo "Scanning hexadeca connector (16 surfaces)..." + @echo "Scanning unified-api-adapter connector (16 surfaces)..." @cd connectors/proven-nesy-solver-api/v && panic-attack assail . --config panic-attack.toml # Self-diagnostic — checks dependencies, permissions, paths diff --git a/connectors/proven-nesy-solver-api/README.adoc b/connectors/proven-nesy-solver-api/README.adoc index 1f515c35..baf69b8d 100644 --- a/connectors/proven-nesy-solver-api/README.adoc +++ b/connectors/proven-nesy-solver-api/README.adoc @@ -61,7 +61,7 @@ zig/ Zig HTTP service + deployment | `ObligationClass` | 0–10 | mirrors verisimdb `proof_attempts` Enum8 | `ProveOutcome` | 0–3 | mirrors verisimdb `outcome` field | `SessionState` | 0–3 | `src/NesySolverAPIABI/Transitions.idr` -| `SurfaceKind` | 0–15 | 16 zig hexadeca protocol surfaces +| `SurfaceKind` | 0–15 | 16 zig unified-api-adapter protocol surfaces |=== Any change to these tag values MUST update Layout.idr, nesy_solver_api.h, diff --git a/connectors/proven-nesy-solver-api/generated/abi/nesy_solver_api.h b/connectors/proven-nesy-solver-api/generated/abi/nesy_solver_api.h index 13c327b4..445614f3 100644 --- a/connectors/proven-nesy-solver-api/generated/abi/nesy_solver_api.h +++ b/connectors/proven-nesy-solver-api/generated/abi/nesy_solver_api.h @@ -18,7 +18,7 @@ * ObligationClass: tags 0-10 (11 classes, mirrors verisimdb Enum8) * ProveOutcome: tags 0-3 (success/failure/timeout/unknown) * SessionState: tags 0-3 (Idle/Dispatching/Recording/FailedS) - * SurfaceKind: tags 0-15 (16 hexadeca protocol surfaces) + * SurfaceKind: tags 0-15 (16 unified-api-adapter protocol surfaces) */ #ifndef PROVEN_NESY_SOLVER_API_H diff --git a/connectors/proven-nesy-solver-api/src/NesySolverAPI/Types.idr b/connectors/proven-nesy-solver-api/src/NesySolverAPI/Types.idr index 0069611f..562abde5 100644 --- a/connectors/proven-nesy-solver-api/src/NesySolverAPI/Types.idr +++ b/connectors/proven-nesy-solver-api/src/NesySolverAPI/Types.idr @@ -163,7 +163,7 @@ Show SessionState where show FailedS = "FailedS" --------------------------------------------------------------------------- --- SurfaceKind — which of the 16 hexadeca surfaces a request arrived on. +-- SurfaceKind — which of the 16 unified-api-adapter surfaces a request arrived on. --------------------------------------------------------------------------- ||| Which zig protocol surface a request came in on. The 16 surfaces diff --git a/connectors/proven-nesy-solver-api/zig/deploy-fly.sh b/connectors/proven-nesy-solver-api/zig/deploy-fly.sh old mode 100755 new mode 100644 diff --git a/container/ct-build.sh b/container/ct-build.sh old mode 100755 new mode 100644 diff --git a/container/entrypoint.sh b/container/entrypoint.sh old mode 100755 new mode 100644 diff --git a/scripts/maintenance/perms-state.sh b/scripts/maintenance/perms-state.sh old mode 100755 new mode 100644 diff --git a/scripts/maintenance/run-maintenance.sh b/scripts/maintenance/run-maintenance.sh old mode 100755 new mode 100644 diff --git a/setup.sh b/setup.sh old mode 100755 new mode 100644 diff --git a/tests/aspect/security_test.sh b/tests/aspect/security_test.sh old mode 100755 new mode 100644 diff --git a/tests/cross_binding_test.sh b/tests/cross_binding_test.sh old mode 100755 new mode 100644 diff --git a/tests/e2e.sh b/tests/e2e.sh old mode 100755 new mode 100644 diff --git a/tests/property_test.sh b/tests/property_test.sh old mode 100755 new mode 100644 diff --git a/tools/check-binding-policy.sh b/tools/check-binding-policy.sh old mode 100755 new mode 100644 diff --git a/tools/gen-abi.sh b/tools/gen-abi.sh old mode 100755 new mode 100644