fix(identity): give wokelangiser its own deterministic uuid - #27
Merged
Merged
Conversation
…iser's scaffold placeholder) The uuid was the unedited RSR-scaffold value, byte-identical to iseriser's CLADE.a2ml uuid — a cross-repo identity collision (uuids are meant to be unique per repo). Replaced with the registry's deterministic UUIDv5 derived from "github.com/hyperpolymath/wokelangiser" (URL namespace), per gv-clade-index's documented scheme (sync/deploy-clade-a2ml.sh); verified by reproducing wokelang's known uuid with the same sha1sum method. Clade (rm) and prefixed-name left unchanged: wokelangiser is not yet registered in gv-clade-index and the -iser family has no clade assigned there, so the correct value isn't derivable from the registry — flagged rather than guessed. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Y2MWTAqX2x7goVJzjFB4j5
hyperpolymath
marked this pull request as ready for review
June 20, 2026 02:27
🔍 Hypatia Security ScanFindings: 54 issues detected
View findings[
{
"reason": "Issue in boj-build.yml",
"type": "missing_timeout_minutes",
"file": "boj-build.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in casket-pages.yml",
"type": "missing_timeout_minutes",
"file": "casket-pages.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in casket-pages.yml",
"type": "missing_timeout_minutes",
"file": "casket-pages.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in codeql.yml",
"type": "missing_timeout_minutes",
"file": "codeql.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in dogfood-gate.yml",
"type": "missing_timeout_minutes",
"file": "dogfood-gate.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in dogfood-gate.yml",
"type": "missing_timeout_minutes",
"file": "dogfood-gate.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in dogfood-gate.yml",
"type": "missing_timeout_minutes",
"file": "dogfood-gate.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in dogfood-gate.yml",
"type": "missing_timeout_minutes",
"file": "dogfood-gate.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in dogfood-gate.yml",
"type": "missing_timeout_minutes",
"file": "dogfood-gate.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in instant-sync.yml",
"type": "missing_timeout_minutes",
"file": "instant-sync.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
}
]Powered by Hypatia Neurosymbolic CI/CD Intelligence |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why
Follow-up to #26. That PR corrected wokelangiser's
canonical-name+ forge URLs but deliberately leftuuidas a flagged placeholder. The scaffold uuida5ea1382-a34c-5334-8a46-a2ebe904c810is byte-identical to iseriser'sCLADE.a2mluuid (iseriser is also an unedited RSR scaffold) — a cross-repo identity collision. uuids in this estate are meant to be unique per repo.Change
.machine_readable/CLADE.a2ml—uuid→1c233dc2-7b7e-5856-9606-22f119ed68ad.This is the registry's deterministic UUIDv5, exactly per
gv-clade-index's documented scheme (sync/deploy-clade-a2ml.sh,sync/export-json.sh, README):Verified, not guessed: there is no
uuidgenin the build env, so I implemented UUIDv5 withsha1sum(URL namespace6ba7b811-9dad-11d1-80b4-00c04fd430c8) and reproduced wokelang's known uuide460af5f-1cfb-58bf-9c5a-70bf458ea2afexactly before applying the identical method to wokelangiser.Clade — intentionally NOT changed (flagged)
[clade] primary = "rm"/prefixed-name = "rm-wokelangiser"remain the RSR scaffold defaults. I did not touch them: wokelangiser is not registered ingv-clade-index(worker/data/repos.jsonhas no wokelangiser entry and no-iserfamily at all), and the clade definitions are VeriSimDB-backed, so the correct-iserclade isn't derivable from the registry. Assigning it is a registry decision. If you have the authoritative-iserclade, tell me and I'll set[clade] primary+prefixed-namehere before merge.Out of scope
wokelang+wokelangiserare). Noted as an upstream follow-up.Verification (actually run)
e460af5f-…) → confirms the derivation is correct; wokelangiser then computes deterministically to1c233dc2-….uuidvalue):1 file changed, 1 insertion(+), 1 deletion(-); SPDX header and every other key untouched.🤖 Generated with Claude Code
https://claude.ai/code/session_01Y2MWTAqX2x7goVJzjFB4j5
Generated by Claude Code