Skip to content

Owner decision sheet D332+ (successor to #787): open rows and execution queue #1234

Open

Description

@hyperpolymath

Successor to #787, opened 2026-10-13 under F4a clause 4. #787 ran from D1 to D331 and is now closed as completed: every row on it is ruled, moot or struck. It stays the evidence; nothing there is re-asked here.

⚠ The rulings ledger no longer exists

The owner's workstation was wiped (owner, 2026-10-13). The local ledger MEMORY-RULINGS.md and its 2026-10-05 snapshot were on it, so this issue is now the only rulings register.

Conventions carried over from #787

  • F4a: a ruling is closed on the surface it governs, and a pointer comment lands here.
  • Basis is stated on every ruling: owner direct answer (selector) or applied-unless-struck (D113).
  • D296: question options name actors in the third person ("Jonathan enables…", "Claude opens…").

A. Execution queue: ruled on #787, not yet executed

# row what is owed acceptance
A1 D16 Remove ruleset bypass for app 1561 (Probot Settings, measured 2026-10-13) and app 946600 (not installed on the hyperpolymath account) wherever they still appear. D16's rule: an app that never pushes to the default branch loses bypass. A census of bypass_actors over every hyperpolymath repo ruleset and every metadatastician org/repo ruleset shows neither id.
A2 D14 ClusterFuzzLite cflite_* stays only on Rust/Zig repos with real fuzz targets and is deleted where it runs template stubs. A census lists every repo carrying cflite_* with a has-real-targets verdict; deletion PRs are merged for the rest.
A3 D24 Pages across the 48 repos: keep Pages where a repo publishes a real website, and delete docs-only Pages workflows (docs go to BerryWiki, D295). A per-repo classification table; deletion PRs merged; the list of real-site repos handed to Jonathan to enable Pages (API/UI-only).
A4 D97 Census of transfer candidates with per-repo cost (package-registry URLs, archived status, URL consumers), for a later ruling. A table posted here, followed by a ruling row.
A5 D298 Revert metadatastician Branch-Floor 23868655 and Tag-Floor 23868851 to canon (deletion + non_fast_forward, bypass_actors: []). Both added rules leave in the same PUT (#787 comment 65). Measured 2026-10-13: Branch-Floor still carries 4 branch rules. Needs admin:org, a posted blast-radius list and a ?dry-run PUT. After it lands, GET shows exactly the two canon rules on each.
A6 D67 (rev. 2026-10-13, amends D321) The 9 Marid Tier-1 packages (MaridArango, MaridCodec, MaridControl, MaridCRDT, MaridIR, MaridLive, MaridRaft, MaridStorage, MaridTransport) also go to General now. They stay in julia-professional-registry with the same UUIDs. The local RegistryCI AutoMerge guideline check runs first (the guideline source is AutoMerge/src/guidelines.jl; RegistryCI.jl is a monorepo). The AutoMerge guidelines pass locally for all 9, including on the UUIDv8 profile-T UUIDs from D322. Then 9 General registrations are merged, or each blocker is posted here with its guideline text.
A7 D330 canonical-ums deletion: the online and local copies are already gone (see the close-out on #787). What remains is for Jonathan to glance at gitlab.com → Projects, since a private GitLab copy cannot be seen anonymously, and delete it if one exists. Jonathan confirms that no GitLab copy exists.

B. Open decisions

row question (E)
D304 (open since 10-06) Which host takes the dedicated encrypted, off-GitHub store for mirror bundles? D303 requires that bundles survive whole-account loss, and the workstation wipe is a live instance of the risk D303 names. none stated yet
D332 (new, measured 2026-10-13) D13's premise is false: the Probot Settings app IS installed on hyperpolymath (installation 145157322, app id 1561). D13(E) was "confirm no install, then delete the dead .github/settings.yml files", so its precondition fails and those files are live config wherever the app has access. Keep the app and its settings.yml files, or uninstall it and then delete the files? Rulesets already own branch protection, so the two write the same settings. Uninstall, then delete the files: one owner of repo settings (rulesets), and no app re-applying a second copy.

C. Index back to #787

Final rulings and the close-out: #787 (last comment). Rows D1–D323 are in its body and comments; D324–D331 are in the close-out comment.

Activity

  1. added
    meta:umbrellaParent issue aggregating child issues
    governancePolicy, rulesets, standards, compliance, and their enforcement
    scope:estateAffects many or all repos across the estate
    status:needs-ownerUnassigned and needs someone to take it
    decisionA ruling is required before work can proceed
    on Oct 13, 2026
  2. hyperpolymath commented on Oct 13, 2026

    @hyperpolymath
    OwnerAuthor

    D333–D334: kcq and kcX renamed (owner, 2026-10-14)

    ID base: max(this issue D332) + 1 = D333.

    id ruling executed
    D333 kcq → kyq (Kubernetes YAML Query; "the Kubernetes yq"). The old expansion, Kubernetes Configuration Query, stopped fitting once D309 made it a strict KYAML/data-format parser. Clash check: crates.io, PyPI, Homebrew, Julia General and hex.pm are free; GitHub has only empty personal repos with that name. npm kyq is taken by an empty 0.0.0 placeholder from 2021, so any bun/npm publish uses a scope (@metadatastician/kyq). GitHub repo renamed; metadatastician/kcq redirects (301). In-repo references: metadatastician/kyq#9 (kyq_chora.deed, kyq-launcher.sh). Consumer docs: metadatastician/affinescript-libraries#5. :repo-uuid keeps its preimage github.com/metadatastician/kcq: a name-based UUID identifies the repository, and a rename does not mint a new one (ADR-008; aliasing remains #1230's question).
    D334 kcX → kyX for the planned projection compiler, read as "y for anything from X". The kc pairing is not kept for its own sake: kyX is the wider suite, and kyq is one consumer of the same KYAML front end. Live references updated: #1237 (CLAUDE.md, README, deed nostos vocabulary, AFFIRMATION, ADR-008, check-uuid-v8.sh comment), hyperpolymath/rsr-template-repo#234 (the template), the seven template-derived CLAUDE.md copies (autoformal-fidelity#2, heron-polyfeed-reader#2, resource-algebra#2, xmlpull-zig#2, zig-boringtls#2, zig-dnssec#2, zig-icu-collation#2), hyperpolymath/boj-server#364 and hyperpolymath/QuantumCircuit.jl#42.

    Not renamed, on purpose: dated records keep the name they were written with: affirmations "as of" a date (docs/affirmations/AFFIRMATION-2026-10-07.adoc, boj-server's and kyq's AFFIRMATION), the closed #787 and the ruling texts of D309, D313 and D320. A2ML descriptiles are not hand-edited (D313).

    Owner follow-up: the GitLab and Bitbucket mirror repos, if they exist, are still named metadatastician/kcq. The kyq deed's (forges …) now names them metadatastician/kyq, so rename them on those forges.

    Next free id: D335.

    🤖 Generated with Claude Code

  3. hyperpolymath commented on Oct 14, 2026

    @hyperpolymath
    OwnerAuthor

    D304 and D332 ruled; A7 closed (owner, 2026-10-14, selector)

    Basis: owner direct answer (selector). Three questions were put through the selection UI in session 01WbjuQvcerJjDjwqTVhomNf, options worded per D296. This comment books no new id; the next free id stays D335.

    row ruling executed
    D304 The mirror-bundle store is a Cloudflare R2 bucket under the Cloudflare account the estate already uses, and every bundle is age-encrypted client-side before upload, so the host never holds plaintext. This satisfies D303's whole-account-loss limb: the store is outside GitHub and outside any one workstation. Not yet. Jonathan provisions the bucket and its API token (owner credential); Claude then wires the bundle push with the age recipient. Tracked as owner follow-up (1) below.
    D332 Uninstall, then delete. Jonathan uninstalls the Probot Settings app (app id 1561, installation 145157322) at github.com/settings/installations; Claude then deletes every .github/settings.yml in the estate, one PR per repo. Rulesets are the single owner of repo settings (D94–D96) and nothing re-applies a second copy. D13's (E) arm is kept with its precondition inverted. Census of .github/settings.yml carriers is running in this session. The deletion PRs follow the uninstall, in that order, because the files are live config until the app is gone.
    A7 / D330 Jonathan checked gitlab.com → Projects: no GitLab copy of canonical-ums exists. D330 is now fully executed: no copy online (GitHub, Codeberg, sourcehut, Bitbucket, GitLab public and private) and none offline. Done. A7 leaves the queue.

    Execution route for A1–A3 (owner answer, same session): Claude attaches every hyperpolymath repository to the cloud session one at a time and runs the bypass_actors census and removal, the cflite_* census, and the Pages classification from there. The metadatastician org rulesets (A1's org half and all of A5) stay owner-side: the session proxy serves only repository-scoped endpoints, so admin:org writes cannot be made from it.

    Owner follow-ups now owed: (1) provision the R2 bucket and token (D304); (2) uninstall the Settings app, then tell Claude so the settings.yml deletion PRs can open (D332); (3) the admin:org writes for A1-org and A5 (D16, D298).


    Generated by Claude Code

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

decisionA ruling is required before work can proceedgovernancePolicy, rulesets, standards, compliance, and their enforcementmeta:umbrellaParent issue aggregating child issuespriority:p1High - schedule nextscope:estateAffects many or all repos across the estatestatus:needs-ownerUnassigned and needs someone to take it

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions