Skip to content

chore: import estate scripts into putative-scripts/ for triage - #300

Merged
hyperpolymath merged 2 commits into
mainfrom
chore/putative-scripts-2026-10-06
Oct 6, 2026
Merged

hyperpolymath merged 2 commits into
mainfrom
chore/putative-scripts-2026-10-06

Conversation

@hyperpolymath

@hyperpolymath hyperpolymath commented Oct 6, 2026 •

Copy link
Copy Markdown
Owner

Summary

Imports the estate maintenance scripts from the private hyperpolymath/estate-scripts repo into a new putative-scripts/ directory, so they can be grouped into reposystem over time. The owner asked for this and plans to retire the standalone repo. Imported from estate-scripts main@a41fd01, 78 files, verbatim. The only change is one-line docstrings on 27 previously undocumented shell functions.

Left out: the personal vault sync scripts (memory-sync.sh, claude-config-sync.sh, dev-notes-sync.sh), *.py (Python is banned), backup/ (rclone setup) and ruleset-backups/ (raw JSON dumps). The full original history is kept as a git bundle outside GitHub.

Handover notes added to llm-warmup-dev.adoc and .claude/CLAUDE.md, pointing at putative-scripts/README.adoc.

Closes: no issue (owner request in session).

Type of change

  • 🐛 Bug fix: no
  • ✨ New feature: no; the scripts are not wired into the build
  • 💥 Breaking change: no
  • 🕳️ Soundness fix: no
  • 📖 Documentation: handover notes and a provenance README
  • 🧹 Refactor / tech debt: consolidates a separate scripts repo into reposystem
  • ⚡ Performance: no
  • 🔧 Build / CI / tooling: no workflow or build change

📌 New pins

Head SHA: 52a0bca. No new pins: no uses: added, no actions.lock entry, no lockfile record, no container digest.

How has this been verified?

  • Secret scans with positive controls:
    • gitleaks detect on the full estate-scripts history (2 commits): no leaks. The control repo with planted secrets: 2 leaks, rc=1.
    • trufflehog 3.96.0 git on the full history: 0 findings, 0 errors. The control detected the planted AWS key.
  • Private-repo-name check: git grep -wFf against the 44 private repo names in hyperpolymath and metadatastician (gh repo list --visibility private --limit 1000). Hits are only on generic words (tools, dev-notes, linguist, rescript, dotfiles) and on name-only mentions of .git-private-farm, which public standards already names. No contents of a private repo are included.
  • standards/.githooks/docstring-scan.sh --staged: 54/54 functions documented, coverage 100%, legb=pass.
  • bash -n on every imported .sh: all parse.
  • CodeFactor flagged 4 shellcheck findings in the imported scripts (SC2181, SC2005, SC2209, SC2010). They are fixed in 52a0bca without changing behaviour. Control: shellcheck on the original estate-fsck-canary.sh reports SC2010; the fixed file reports none.

Checklist

  • My commits are signed (git log --format=%G? → G).
  • I ran the project's own checks/tests locally: not run. The imported scripts are not part of reposystem's build or tests, and this PR touches no code reposystem runs.
  • New files carry the correct SPDX: putative-scripts/README.adoc is CC-BY-SA-4.0. The imported scripts keep the headers they already had; nothing was relicensed.
  • Docs are updated, and no public claim overstates the code: the README marks the scripts as untriaged, machine-specific in places, and not wired in.
  • No soundness hole introduced: no checker or proof code is touched.

Notes for reviewers

  • Red checks deferred, all failing on main too and unrelated to this PR: rust-ci / Cargo check + clippy + fmt, governance / Workflow security linter, governance / Allowlist Preflight, Validate DEED manifests. Tracked in CI: four non-required checks red on main (clippy/fmt, workflow linter, allowlist preflight, DEED validation) #301.

  • The only required check, scan / gitleaks, has now run and passed on this PR. Squash automerge is armed.

  • Several scripts hard-code /home/hyperpolymath/developer/... paths and refer to the estate layout. That is expected for triage material.

🤖 Generated with Claude Code

https://claude.ai/code/session_013PzSt7Jwt4Fz3R4xYYJ5k8

- import hyperpolymath/estate-scripts main@a41fd01 verbatim (78 files)
- excluded: personal vault sync scripts, *.py (banned), backup/ (rclone), ruleset-backups/
- add one-line docstrings to 27 undocumented shell functions (no behaviour change)
- putative-scripts/README.adoc: provenance, exclusions, caveats
- handover notes in llm-warmup-dev.adoc and .claude/CLAUDE.md

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013PzSt7Jwt4Fz3R4xYYJ5k8
@coderabbitai

coderabbitai Bot commented Oct 6, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 84ba7216-38fd-454c-a4d6-7633e3205f02
📥 Commits

Reviewing files that changed from the base of the PR and between 6ea7b12 and 52a0bca.

📒 Files selected for processing (81)
  • .claude/CLAUDE.md
  • llm-warmup-dev.adoc
  • putative-scripts/99-net-hardening.conf
  • putative-scripts/ACTION_PLAN.md
  • putative-scripts/CI_FIXES_SUMMARY_2026-09-11.md
  • putative-scripts/COMPLETION_REPORT_2026-09-11.md
  • putative-scripts/FINAL_COMPLETION_SUMMARY_2026-09-11.md
  • putative-scripts/FINAL_REPORT_2026-09-11.md
  • putative-scripts/FINAL_STATUS_REPORT_2026-09-11.md
  • putative-scripts/FINAL_TOKEN_PERMISSIONS_COMPLETE.sh
  • putative-scripts/README.adoc
  • putative-scripts/REMAINING_TASKS_COMPREHENSIVE_2026-09-11.md
  • putative-scripts/TOKEN_PERMISSIONS_FINAL_VERIFICATION.sh
  • putative-scripts/TOKEN_PERMISSIONS_ID_COMPLETE_REPORT.md
  • putative-scripts/add-proof-needed-label.sh
  • putative-scripts/apply-ci-fixes-batched.sh
  • putative-scripts/apply-ci-fixes.sh
  • putative-scripts/apply-fixes-clean.sh
  • putative-scripts/apply-fixes-single-repo.sh
  • putative-scripts/apply-fixes-with-pr.sh
  • putative-scripts/audit-language-ci-workflows.sh
  • putative-scripts/audit-workspace-shape.sh
  • putative-scripts/bulk_fix_token_permissions.sh
  • putative-scripts/check-no-md-in-docs.sh
  • putative-scripts/check-no-vlang.sh
  • putative-scripts/check-root-shape.sh
  • putative-scripts/clear-pages-deployment-deadlock.sh
  • putative-scripts/commit_pinned_dependencies_fixes.sh
  • putative-scripts/create-and-merge-prs-v2.sh
  • putative-scripts/create-and-merge-prs-v3.sh
  • putative-scripts/create-and-merge-prs.sh
  • putative-scripts/estate-board.sh
  • putative-scripts/estate-fsck-canary.sh
  • putative-scripts/estate-inbox.sh
  • putative-scripts/estate-migration-toolkit/README.md
  • putative-scripts/estate-migration-toolkit/ci/language-gate.yml
  • putative-scripts/estate-migration-toolkit/scripts/check-proven-bindings.sh
  • putative-scripts/estate-migration-toolkit/scripts/deprecate-poly-mcps.sh
  • putative-scripts/estate-migration-toolkit/scripts/estate-scan.sh
  • putative-scripts/estate-migration-toolkit/scripts/estate-scan.sh.orig
  • putative-scripts/estate-migration-toolkit/scripts/find-nif-to-snif.sh
  • putative-scripts/estate-migration-toolkit/scripts/migrate-deno-to-bun.sh
  • putative-scripts/estate-migration-toolkit/scripts/rollout-language-gate.sh
  • putative-scripts/estate-migration-toolkit/templates/.language-policy.toml
  • putative-scripts/estate-migration-toolkit/templates/language-gate-caller.yml
  • putative-scripts/fix-empty-linter-patterns.sh
  • putative-scripts/fix-lockfile-drift-estate-wide.sh
  • putative-scripts/fix-panic-attack-url.sh
  • putative-scripts/fix-rsr-antipattern-reusable.sh
  • putative-scripts/fix_all_token_permissions.sh
  • putative-scripts/fix_all_token_permissions_v2.sh
  • putative-scripts/fix_token_permissions.sh
  • putative-scripts/generate_token_permissions_fix_report.sh
  • putative-scripts/gh-auth-health.sh
  • putative-scripts/master_token_permissions_fix.sh
  • putative-scripts/memory-index-health.sh
  • putative-scripts/merge-fix-ci-prs.sh
  • putative-scripts/monitor-ci-and-verify.sh
  • putative-scripts/publish-coprocessor-docs.sh
  • putative-scripts/push_all_changes.sh
  • putative-scripts/push_all_token_fix_commits.sh
  • putative-scripts/push_token_fix_commits_smart.sh
  • putative-scripts/rescue-into-keeper.sh
  • putative-scripts/run-estate-wide-fixes.sh
  • putative-scripts/run-full-propagation-v2.sh
  • putative-scripts/run-full-propagation.sh
  • putative-scripts/scan_token_permissions.exs
  • putative-scripts/scan_wh002_all_repos.exs
  • putative-scripts/sync_repos_v2.sh
  • putative-scripts/test/audit-workspace-shape.test.sh
  • putative-scripts/test/rescue-into-keeper.test.sh
  • putative-scripts/update-main-estate-audit.sh
  • putative-scripts/update-mirror-pins-complete.sh
  • putative-scripts/update-mirror-pins-force.sh
  • putative-scripts/update-mirror-pins-safe.sh
  • putative-scripts/update-mirror-reusable-pins.sh
  • putative-scripts/windows/Launch-ClaudePlan.ps1
  • putative-scripts/windows/README.md
  • putative-scripts/windows/Windows-Master-Update-Script.ps1
  • putative-scripts/windows/Windows-Optimize-Services.ps1
  • putative-scripts/windows/Windows-Setup-Pathroot.ps1
 ____________________________________________________________
< To infinity and beyond! Scouring your code for pesky bugs. >
 ------------------------------------------------------------
  \
   \   \
        \ /\
        ( )
      .( o ).
✨ Finishing Touches
📝 Generate docstrings
  • Commit to this branch
  • Create a new PR
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Comment thread putative-scripts/FINAL_COMPLETION_SUMMARY_2026-09-11.md
Comment thread putative-scripts/FINAL_STATUS_REPORT_2026-09-11.md
Comment thread putative-scripts/REMAINING_TASKS_COMPREHENSIVE_2026-09-11.md
Comment thread putative-scripts/apply-ci-fixes-batched.sh
Comment thread putative-scripts/apply-ci-fixes-batched.sh
Comment thread putative-scripts/run-full-propagation-v2.sh
Comment thread putative-scripts/run-full-propagation-v2.sh
Comment thread putative-scripts/run-full-propagation-v2.sh
Comment thread putative-scripts/run-full-propagation-v2.sh
Comment thread putative-scripts/run-full-propagation.sh
…, SC2209, SC2010)

Behaviour-preserving: if-on-command instead of $?, drop echo $(cmd),
quote a string assignment, find|sort instead of ls|grep.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013PzSt7Jwt4Fz3R4xYYJ5k8
@hyperpolymath
hyperpolymath merged commit 4dff42d into main Oct 6, 2026
27 of 33 checks passed
@hyperpolymath
hyperpolymath deleted the chore/putative-scripts-2026-10-06 branch October 6, 2026 17:11
@sonarqubecloud

sonarqubecloud Bot commented Oct 6, 2026

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
C Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants