Skip to content

chore(license): remove stray Palimpsest licence files - #331

Merged
hyperpolymath merged 1 commit into
mainfrom
chore/remove-stray-pmpl-files
Sep 2, 2026
Merged

chore(license): remove stray Palimpsest licence files#331
hyperpolymath merged 1 commit into
mainfrom
chore/remove-stray-pmpl-files

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

Owner ruling 2026-09-02: MPL-2.0 for code, CC-BY-SA-4.0 for docs; estate PMPL sweep Tier 1 (stray siblings); verified in license-body-verification/VERDICTS.md.

The primary LICENSE in this repo is already genuine MPL-2.0 — confirmed unchanged. This PR deletes stray PMPL/Palimpsest body files that sit beside it with no bearing on the declared licence:

  • LICENSE-PALIMPSEST — full PALIMPSEST-MPL v1.0 body
  • licenses/PALIMPSEST-EN.txt, licenses/PALIMPSEST-NL.txt — bilingual companion PMPL text

No primary LICENSE identity change. No workflow files touched.

Note for maintainer: README.adoc and RSR_OUTLINE.adoc also carry extensive Palimpsest/PMPL branding (badges, a "License" section describing "Palimpsest-MPL License v3.0 (PMPL-1.0)", a BibTeX license = {PMPL-1.0} field) that contradicts the real MPL-2.0 LICENSE. None of it references the deleted files by path, so it's out of scope for this narrow stray-file deletion — flagging for a follow-up editorial pass.

🤖 Generated with Claude Code

Owner ruling 2026-09-02: MPL-2.0 for code, CC-BY-SA-4.0 for docs; estate
migrating off the Palimpsest/PMPL licence. The primary LICENSE here is
already correct MPL-2.0. This removes stray PMPL/Palimpsest-body sibling
files that had no bearing on the declared licence:
- LICENSE-PALIMPSEST (full PALIMPSEST-MPL v1.0 body)
- licenses/PALIMPSEST-EN.txt, licenses/PALIMPSEST-NL.txt (bilingual
  companion PMPL text)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@coderabbitai

coderabbitai Bot commented Sep 2, 2026

Copy link
Copy Markdown

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Team

Run ID: 8afaa9f7-8365-4bb5-b9a3-dd7ef90e3d20

📥 Commits

Reviewing files that changed from the base of the PR and between d95ef0d and 799a034.

📒 Files selected for processing (3)
  • LICENSE-PALIMPSEST
  • licenses/PALIMPSEST-EN.txt
  • licenses/PALIMPSEST-NL.txt
💤 Files with no reviewable changes (3)
  • LICENSE-PALIMPSEST
  • licenses/PALIMPSEST-EN.txt
  • licenses/PALIMPSEST-NL.txt

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

📜 Recent review details
⏰ Context from checks skipped due to timeout. (8)
  • GitHub Check: CodeQL Analysis (javascript)
  • GitHub Check: Lint Elixir
  • GitHub Check: Rust Security Audit
  • GitHub Check: analyze (javascript-typescript, none)
  • GitHub Check: Hypatia Neurosymbolic Analysis
  • GitHub Check: Rust Security Audit
  • GitHub Check: CodeQL Analysis (javascript)
  • GitHub Check: Lint Elixir
⚠️ CI failures not shown inline (13)

GitHub Actions: Build / 0_SonarQube.txt: chore(license): remove stray Palimpsest licence files

Conclusion: failure

View job details

##[group]Run SonarSource/sonarqube-scan-action@v8.1.0
 with:
   projectBaseDir: .
   scannerVersion: 8.1.0.6389
   scannerBinariesUrl: https://binaries.sonarsource.com/Distribution/sonar-scanner-cli
   skipSignatureVerification: false
 env:
   SONAR_***REDACTED_SECRET_ASSIGNMENT***
 ##[endgroup]
 Installing Sonar Scanner CLI 8.1.0.6389 for linux-x64...
 Downloading from: https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-8.1.0.6389-linux-x64.zip
 Downloading signature from: https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-8.1.0.6389-linux-x64.zip.asc
 Importing SonarSource public key from hkps://keyserver.ubuntu.com...
 [command]/usr/bin/gpg --homedir /home/runner/work/_temp/gpg-home-1788348159606-2233 --batch --keyserver hkps://keyserver.ubuntu.com --recv-keys 679F1EE92B19609DE816FDE81DB198F93525EC1A
 gpg: keybox '/home/runner/work/_temp/gpg-home-1788348159606-2233/pubring.kbx' created
 gpg: /home/runner/work/_temp/gpg-home-1788348159606-2233/trustdb.gpg: trustdb created
 gpg: key 1DB198F93525EC1A: public key "SonarSource S.A. <infra@sonarsource.com>" imported
 gpg: Total number processed: 1
 gpg:               imported: 1
 Successfully imported key from hkps://keyserver.ubuntu.com
 ✓ SonarSource public key imported successfully
 Verifying GPG signature...
 [command]/usr/bin/gpg --homedir /home/runner/work/_temp/gpg-home-1788348159606-2233 --batch --verify /home/runner/work/_temp/a2129a43-3567-477f-8d14-a7580f9f1cf0 /home/runner/work/_temp/ad86dca6-1282-49fa-9c0d-70edf9c88291
 gpg: Signature made Tue Apr 21 07:20:26 2026 UTC
 gpg:                using RSA key D1436C0DBACEA48702AF97C363F1DD7753B8B315
 gpg: Good signature from "SonarSource S.A. <infra@sonarsource.com>" [unknown]
 gpg: WARNING: This key is not certified with a trusted signature!
 gpg:          There is no indication that the signature belongs to the owner.
 Primary key fingerprint: 679F 1EE9 2B19 609D E816  FDE8 1DB1 98F9 3525 EC1A
   ...

GitHub Actions: Build / SonarQube: chore(license): remove stray Palimpsest licence files

Conclusion: failure

View job details

##[group]Run SonarSource/sonarqube-scan-action@v8.1.0
 with:
   projectBaseDir: .
   scannerVersion: 8.1.0.6389
   scannerBinariesUrl: https://binaries.sonarsource.com/Distribution/sonar-scanner-cli
   skipSignatureVerification: false
 env:
   SONAR_***REDACTED_SECRET_ASSIGNMENT***
 ##[endgroup]
 Installing Sonar Scanner CLI 8.1.0.6389 for linux-x64...
 Downloading from: https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-8.1.0.6389-linux-x64.zip
 Downloading signature from: https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-8.1.0.6389-linux-x64.zip.asc
 Importing SonarSource public key from hkps://keyserver.ubuntu.com...
 [command]/usr/bin/gpg --homedir /home/runner/work/_temp/gpg-home-1788348159606-2233 --batch --keyserver hkps://keyserver.ubuntu.com --recv-keys 679F1EE92B19609DE816FDE81DB198F93525EC1A
 gpg: keybox '/home/runner/work/_temp/gpg-home-1788348159606-2233/pubring.kbx' created
 gpg: /home/runner/work/_temp/gpg-home-1788348159606-2233/trustdb.gpg: trustdb created
 gpg: key 1DB198F93525EC1A: public key "SonarSource S.A. <infra@sonarsource.com>" imported
 gpg: Total number processed: 1
 gpg:               imported: 1
 Successfully imported key from hkps://keyserver.ubuntu.com
 ✓ SonarSource public key imported successfully
 Verifying GPG signature...
 [command]/usr/bin/gpg --homedir /home/runner/work/_temp/gpg-home-1788348159606-2233 --batch --verify /home/runner/work/_temp/a2129a43-3567-477f-8d14-a7580f9f1cf0 /home/runner/work/_temp/ad86dca6-1282-49fa-9c0d-70edf9c88291
 gpg: Signature made Tue Apr 21 07:20:26 2026 UTC
 gpg:                using RSA key D1436C0DBACEA48702AF97C363F1DD7753B8B315
 gpg: Good signature from "SonarSource S.A. <infra@sonarsource.com>" [unknown]
 gpg: WARNING: This key is not certified with a trusted signature!
 gpg:          There is no indication that the signature belongs to the owner.
 Primary key fingerprint: 679F 1EE9 2B19 609D E816  FDE8 1DB1 98F9 3525 EC1A
   ...

GitHub Actions: Dogfood Gate / 2_Validate A2ML manifests.txt: chore(license): remove stray Palimpsest licence files

Conclusion: failure

View job details

##[group]A2ML Manifest Validation
 Scanning . for .a2ml files...
 Found 23 .a2ml file(s)
   Validating: ./.machine_readable/6a2/0-AI-MANIFEST.a2ml
 ##[warning]Missing SPDX-License-Identifier in first 10 lines
   Validating: ./.machine_readable/6a2/AGENTIC.a2ml
 ##[warning]Missing SPDX-License-Identifier in first 10 lines
   Validating: ./.machine_readable/6a2/ECOSYSTEM.a2ml
   Validating: ./.machine_readable/6a2/META.a2ml
   Validating: ./.machine_readable/6a2/NEUROSYM.a2ml
 ##[warning]Missing SPDX-License-Identifier in first 10 lines
   Validating: ./.machine_readable/6a2/PLAYBOOK.a2ml
 ##[warning]Missing SPDX-License-Identifier in first 10 lines
   Validating: ./.machine_readable/6a2/STATE.a2ml
   Validating: ./.machine_readable/6a2/anchor/0-AI-MANIFEST.a2ml
 ##[warning]Missing SPDX-License-Identifier in first 10 lines
   Validating: ./.machine_readable/6a2/anchor/ANCHOR.a2ml
 ##[warning]Missing SPDX-License-Identifier in first 10 lines
   Validating: ./.machine_readable/CLADE.a2ml
   Validating: ./.machine_readable/bot_directives/coverage.a2ml
   Validating: ./.machine_readable/bot_directives/debt.a2ml
   Validating: ./.machine_readable/bot_directives/methodology.a2ml
   Validating: ./.machine_readable/contractiles/Adjustfile.a2ml
   Validating: ./.machine_readable/contractiles/Intentfile.a2ml
   Validating: ./.machine_readable/contractiles/Mustfile.a2ml
   Validating: ./.machine_readable/contractiles/Trustfile.a2ml
   Validating: ./.machine_readable/integrations/feedback-o-tron.a2ml
   Validating: ./.machine_readable/integrations/proven.a2ml
   Validating: ./.machine_readable/integrations/verisimdb.a2ml
   Validating: ./.machine_readable/integrations/vexometer.a2ml
   Validating: ./0-AI-MANIFEST.a2ml
 ##[warning]Missing SPDX-License-Identifier in first 10 lines
   Validating: ./audits/assail-classifications.a2ml
 ##[warning]Missing SPDX-License-Identifier in first 10 lines
 ##[error]Missing required identity field (agent-id, name, or project)

GitHub Actions: Dogfood Gate / Validate A2ML manifests: chore(license): remove stray Palimpsest licence files

Conclusion: failure

View job details

##[group]A2ML Manifest Validation
 Scanning . for .a2ml files...
 Found 23 .a2ml file(s)
   Validating: ./.machine_readable/6a2/0-AI-MANIFEST.a2ml
 ##[warning]Missing SPDX-License-Identifier in first 10 lines
   Validating: ./.machine_readable/6a2/AGENTIC.a2ml
 ##[warning]Missing SPDX-License-Identifier in first 10 lines
   Validating: ./.machine_readable/6a2/ECOSYSTEM.a2ml
   Validating: ./.machine_readable/6a2/META.a2ml
   Validating: ./.machine_readable/6a2/NEUROSYM.a2ml
 ##[warning]Missing SPDX-License-Identifier in first 10 lines
   Validating: ./.machine_readable/6a2/PLAYBOOK.a2ml
 ##[warning]Missing SPDX-License-Identifier in first 10 lines
   Validating: ./.machine_readable/6a2/STATE.a2ml
   Validating: ./.machine_readable/6a2/anchor/0-AI-MANIFEST.a2ml
 ##[warning]Missing SPDX-License-Identifier in first 10 lines
   Validating: ./.machine_readable/6a2/anchor/ANCHOR.a2ml
 ##[warning]Missing SPDX-License-Identifier in first 10 lines
   Validating: ./.machine_readable/CLADE.a2ml
   Validating: ./.machine_readable/bot_directives/coverage.a2ml
   Validating: ./.machine_readable/bot_directives/debt.a2ml
   Validating: ./.machine_readable/bot_directives/methodology.a2ml
   Validating: ./.machine_readable/contractiles/Adjustfile.a2ml
   Validating: ./.machine_readable/contractiles/Intentfile.a2ml
   Validating: ./.machine_readable/contractiles/Mustfile.a2ml
   Validating: ./.machine_readable/contractiles/Trustfile.a2ml
   Validating: ./.machine_readable/integrations/feedback-o-tron.a2ml
   Validating: ./.machine_readable/integrations/proven.a2ml
   Validating: ./.machine_readable/integrations/verisimdb.a2ml
   Validating: ./.machine_readable/integrations/vexometer.a2ml
   Validating: ./0-AI-MANIFEST.a2ml
 ##[warning]Missing SPDX-License-Identifier in first 10 lines
   Validating: ./audits/assail-classifications.a2ml
 ##[warning]Missing SPDX-License-Identifier in first 10 lines
 ##[error]Missing required identity field (agent-id, name, or project)

GitHub Actions: Dogfood Gate / 3_Groove manifest check.txt: chore(license): remove stray Palimpsest licence files

Conclusion: failure

View job details

##[group]Run # Check for static or dynamic Groove endpoints
 �[36;1m# Check for static or dynamic Groove endpoints�[0m
 �[36;1mHAS_MANIFEST="false"�[0m
 �[36;1mHAS_GROOVE_CODE="false"�[0m
 �[36;1m�[0m
 �[36;1mif [ -f ".well-known/groove/manifest.json" ]; then�[0m
 �[36;1m  HAS_MANIFEST="true"�[0m
 �[36;1m  # Validate the manifest JSON�[0m
 �[36;1m  if ! jq empty .well-known/groove/manifest.json 2>/dev/null; then�[0m
 �[36;1m    echo "::error file=.well-known/groove/manifest.json::Invalid JSON in Groove manifest"�[0m

GitHub Actions: Dogfood Gate / Groove manifest check: chore(license): remove stray Palimpsest licence files

Conclusion: failure

View job details

##[group]Run # Check for static or dynamic Groove endpoints
 �[36;1m# Check for static or dynamic Groove endpoints�[0m
 �[36;1mHAS_MANIFEST="false"�[0m
 �[36;1mHAS_GROOVE_CODE="false"�[0m
 �[36;1m�[0m
 �[36;1mif [ -f ".well-known/groove/manifest.json" ]; then�[0m
 �[36;1m  HAS_MANIFEST="true"�[0m
 �[36;1m  # Validate the manifest JSON�[0m
 �[36;1m  if ! jq empty .well-known/groove/manifest.json 2>/dev/null; then�[0m
 �[36;1m    echo "::error file=.well-known/groove/manifest.json::Invalid JSON in Groove manifest"�[0m

GitHub Actions: Governance / 1_governance _ Well-Known (RFC 9116 + RSR).txt: chore(license): remove stray Palimpsest licence files

Conclusion: failure

View job details

##[group]Run SECTXT=""
 �[36;1mSECTXT=""�[0m
 �[36;1m[ -f ".well-known/security.txt" ] && SECTXT=".well-known/security.txt"�[0m
 �[36;1m[ -f "security.txt" ] && SECTXT="security.txt"�[0m
 �[36;1mif [ -z "$SECTXT" ]; then�[0m
 �[36;1m  echo "::warning::No security.txt found."�[0m
 �[36;1m  exit 0�[0m
 �[36;1mfi�[0m
 �[36;1mgrep -q "^Contact:" "$SECTXT" || { echo "::error::Missing Contact field"; exit 1; }�[0m

GitHub Actions: Governance / governance _ Well-Known (RFC 9116 + RSR): chore(license): remove stray Palimpsest licence files

Conclusion: failure

View job details

##[group]Run SECTXT=""
 �[36;1mSECTXT=""�[0m
 �[36;1m[ -f ".well-known/security.txt" ] && SECTXT=".well-known/security.txt"�[0m
 �[36;1m[ -f "security.txt" ] && SECTXT="security.txt"�[0m
 �[36;1mif [ -z "$SECTXT" ]; then�[0m
 �[36;1m  echo "::warning::No security.txt found."�[0m
 �[36;1m  exit 0�[0m
 �[36;1mfi�[0m
 �[36;1mgrep -q "^Contact:" "$SECTXT" || { echo "::error::Missing Contact field"; exit 1; }�[0m

GitHub Actions: Governance / governance _ Well-Known (RFC 9116 + RSR): chore(license): remove stray Palimpsest licence files

Conclusion: failure

View job details

##[group]Run MIXED=$(grep -rE 'src="http://|href="http://' --include="*.html" --include="*.htm" . 2>/dev/null | grep -vE 'localhost|127\.0\.0\.1|example\.com|lol/|node_modules/|third-party/|vendor/' | head -5 || true)
 �[36;1mMIXED=$(grep -rE 'src="http://|href="http://' --include="*.html" --include="*.htm" . 2>/dev/null | grep -vE 'localhost|127\.0\.0\.1|example\.com|lol/|node_modules/|third-party/|vendor/' | head -5 || true)�[0m
 �[36;1mif [ -n "$MIXED" ]; then�[0m
 �[36;1m  echo "::error::Mixed content (HTTP in HTML)"�[0m

GitHub Actions: Governance / 3_governance _ Security policy checks.txt: chore(license): remove stray Palimpsest licence files

Conclusion: failure

View job details

##[group]Run set -uo pipefail
 �[36;1mset -uo pipefail�[0m
 �[36;1mPATTERN='^[[:space:]]*[*_]{0,2}Version[*_]{0,2}[[:space:]]*[:=][[:space:]]*v?[0-9]+\.[0-9]+\.[0-9]+'�[0m
 �[36;1mR5B=0�[0m
 �[36;1mshopt -s nullglob�[0m
 �[36;1mfor doc in *.md *.adoc; do�[0m
 �[36;1m  [ -f "$doc" ] || continue�[0m
 �[36;1m  case "$doc" in CHANGELOG.md|CHANGELOG.adoc) continue ;; esac�[0m
 �[36;1m  while IFS= read -r hit; do�[0m
 �[36;1m    [ -n "$hit" ] || continue�[0m
 �[36;1m    echo "❌ [R5b] pinned version string: $doc:$hit"�[0m
 �[36;1m    R5B=$((R5B+1))�[0m
 �[36;1m  done < <(grep -nE "$PATTERN" "$doc" 2>/dev/null || true)�[0m
 �[36;1mdone�[0m
 �[36;1mif [ "$R5B" -gt 0 ]; then�[0m
 �[36;1m  echo ""�[0m
 �[36;1m  echo "❌ [R5b] $R5B pinned version-string line(s) in load-bearing docs."�[0m
 �[36;1m  echo "Fix: drop the embedded version; defer to CHANGELOG.md (release"�[0m
 �[36;1m  echo "history) and Cargo.toml's [package].version (semver pin) or the"�[0m
 �[36;1m  echo "equivalent package manifest. Git log carries dates."�[0m
 �[36;1m  exit 1�[0m
 �[36;1mfi�[0m
 �[36;1mecho "✅ [R5b] Documentation version-string drift: clean."�[0m
 shell: /usr/bin/bash -e {0}
 ##[endgroup]
 ❌ [R5b] pinned version string: README.adoc:1653:*Version*: 0.1.0
 ❌ [R5b] pinned version string: justfile-cookbook.adoc:123:Version: 1.0.0
 ❌ [R5b] 2 pinned version-string line(s) in load-bearing docs.
 Fix: drop the embedded version; defer to CHANGELOG.md (release
 history) and Cargo.toml's [package].version (semver pin) or the
 equivalent package manifest. Git log carries dates.
 ##[error]Process completed with exit code 1.

GitHub Actions: Governance / governance _ Security policy checks: chore(license): remove stray Palimpsest licence files

Conclusion: failure

View job details

##[group]Run set -uo pipefail
 �[36;1mset -uo pipefail�[0m
 �[36;1mPATTERN='^[[:space:]]*[*_]{0,2}Version[*_]{0,2}[[:space:]]*[:=][[:space:]]*v?[0-9]+\.[0-9]+\.[0-9]+'�[0m
 �[36;1mR5B=0�[0m
 �[36;1mshopt -s nullglob�[0m
 �[36;1mfor doc in *.md *.adoc; do�[0m
 �[36;1m  [ -f "$doc" ] || continue�[0m
 �[36;1m  case "$doc" in CHANGELOG.md|CHANGELOG.adoc) continue ;; esac�[0m
 �[36;1m  while IFS= read -r hit; do�[0m
 �[36;1m    [ -n "$hit" ] || continue�[0m
 �[36;1m    echo "❌ [R5b] pinned version string: $doc:$hit"�[0m
 �[36;1m    R5B=$((R5B+1))�[0m
 �[36;1m  done < <(grep -nE "$PATTERN" "$doc" 2>/dev/null || true)�[0m
 �[36;1mdone�[0m
 �[36;1mif [ "$R5B" -gt 0 ]; then�[0m
 �[36;1m  echo ""�[0m
 �[36;1m  echo "❌ [R5b] $R5B pinned version-string line(s) in load-bearing docs."�[0m
 �[36;1m  echo "Fix: drop the embedded version; defer to CHANGELOG.md (release"�[0m
 �[36;1m  echo "history) and Cargo.toml's [package].version (semver pin) or the"�[0m
 �[36;1m  echo "equivalent package manifest. Git log carries dates."�[0m
 �[36;1m  exit 1�[0m
 �[36;1mfi�[0m
 �[36;1mecho "✅ [R5b] Documentation version-string drift: clean."�[0m
 shell: /usr/bin/bash -e {0}
 ##[endgroup]
 ❌ [R5b] pinned version string: README.adoc:1653:*Version*: 0.1.0
 ❌ [R5b] pinned version string: justfile-cookbook.adoc:123:Version: 1.0.0
 ❌ [R5b] 2 pinned version-string line(s) in load-bearing docs.
 Fix: drop the embedded version; defer to CHANGELOG.md (release
 history) and Cargo.toml's [package].version (semver pin) or the
 equivalent package manifest. Git log carries dates.
 ##[error]Process completed with exit code 1.

GitHub Actions: Governance / 7_governance _ Allowlist Preflight.txt: chore(license): remove stray Palimpsest licence files

Conclusion: failure

View job details

##[group]Run # check-actions-policy.sh `exec`s its SIBLING check-allowed-actions.sh
 �[36;1m# check-actions-policy.sh `exec`s its SIBLING check-allowed-actions.sh�[0m
 �[36;1m# via "${0%/*}/...". Copying only the first script and then deleting�[0m
 �[36;1m# the checkout left that sibling missing, so the step died with exit�[0m
 �[36;1m# 127 (command not found) on every run. Stage both, plus the canonical�[0m
 �[36;1m# allowlist itself — consumer repos have no copy of it in their tree.�[0m
 �[36;1mcp .standards-checkout/scripts/check-actions-policy.sh \�[0m
 �[36;1m   .standards-checkout/scripts/check-allowed-actions.sh "$RUNNER_TEMP/"�[0m
 �[36;1mcp .standards-checkout/rhodium-standard-repositories/actions-allowlist/allowed-actions.json \�[0m
 �[36;1m   "$RUNNER_TEMP/allowed-actions.json"�[0m
 �[36;1mrm -rf .standards-checkout�[0m
 �[36;1mALLOWLIST_JSON="$RUNNER_TEMP/allowed-actions.json" \�[0m
 �[36;1m  bash "$RUNNER_TEMP/check-actions-policy.sh" .github/workflows�[0m
 shell: /usr/bin/bash -e {0}
 ##[endgroup]
 gh: To use GitHub CLI in a GitHub Actions workflow, set the GH_TOKEN environment variable. Example:
   env:
     GH_***REDACTED_SECRET_ASSIGNMENT*** github.token }}
 ERROR: could not read live Actions permissions for .github/workflows
 ##[error]Process completed with exit code 3.

GitHub Actions: Governance / governance _ Allowlist Preflight: chore(license): remove stray Palimpsest licence files

Conclusion: failure

View job details

##[group]Run # check-actions-policy.sh `exec`s its SIBLING check-allowed-actions.sh
 �[36;1m# check-actions-policy.sh `exec`s its SIBLING check-allowed-actions.sh�[0m
 �[36;1m# via "${0%/*}/...". Copying only the first script and then deleting�[0m
 �[36;1m# the checkout left that sibling missing, so the step died with exit�[0m
 �[36;1m# 127 (command not found) on every run. Stage both, plus the canonical�[0m
 �[36;1m# allowlist itself — consumer repos have no copy of it in their tree.�[0m
 �[36;1mcp .standards-checkout/scripts/check-actions-policy.sh \�[0m
 �[36;1m   .standards-checkout/scripts/check-allowed-actions.sh "$RUNNER_TEMP/"�[0m
 �[36;1mcp .standards-checkout/rhodium-standard-repositories/actions-allowlist/allowed-actions.json \�[0m
 �[36;1m   "$RUNNER_TEMP/allowed-actions.json"�[0m
 �[36;1mrm -rf .standards-checkout�[0m
 �[36;1mALLOWLIST_JSON="$RUNNER_TEMP/allowed-actions.json" \�[0m
 �[36;1m  bash "$RUNNER_TEMP/check-actions-policy.sh" .github/workflows�[0m
 shell: /usr/bin/bash -e {0}
 ##[endgroup]
 gh: To use GitHub CLI in a GitHub Actions workflow, set the GH_TOKEN environment variable. Example:
   env:
     GH_***REDACTED_SECRET_ASSIGNMENT*** github.token }}
 ERROR: could not read live Actions permissions for .github/workflows
 ##[error]Process completed with exit code 3.

📝 Summary

Summary by CodeRabbit

  • Documentation
    • Removed the Palimpsest-MPL licence text and related provisions from the repository.
    • Removed the English and Dutch Palimpsest companion licence documents, including their principles, attribution details, and explanatory content.
    • No public entities or application functionality were changed.

Walkthrough

The change deletes the repository Palimpsest licence file and its English and Dutch companion texts. No public entity declarations change.

Changes

Cohort / File(s) Summary
Palimpsest licence removal
LICENSE-PALIMPSEST, licenses/PALIMPSEST-EN.txt, licenses/PALIMPSEST-NL.txt
Deletes all Palimpsest licence content in English, Dutch, and the repository root licence file.

Estimated code review effort: 2 (Simple) | ~10 minutes

Merge Risk: ⚪ Minimal · up to 799a0

This is a clearly localized deletion of stray licence files without changes to the primary licence or workflow behavior; no actionable merge-blocking risk remains after normal checks and review.

Poem

A rabbit checks the licence shelf
Three pages vanish by themselves
The burrow stays neat and clear
No public names are altered here
Hop onward through the code this year

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description check ✅ Passed The description accurately explains the removal of the stray Palimpsest licence files and confirms that the primary MPL-2.0 licence remains unchanged.
Title check ✅ Passed The title clearly and concisely identifies the removal of the stray Palimpsest licence files, which is the main change.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files.

✨ Finishing Touches 💡 1
🛠️ Fix failing CI checks 💡
  • Create stacked PR
  • Commit on current branch

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Sep 2, 2026

Copy link
Copy Markdown

🔍 Hypatia Security Scan

Findings: 69 issues detected

Severity Count
🔴 Critical 7
🟠 High 35
🟡 Medium 27

⚠️ Action Required: Critical security issues found!

View findings
[
  {
    "reason": "Issue in build.yml",
    "type": "missing_timeout_minutes",
    "file": "build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in label-triage.yml",
    "type": "missing_timeout_minutes",
    "file": "label-triage.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in labels.yml",
    "type": "missing_timeout_minutes",
    "file": "labels.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in push-email-notify.yml",
    "type": "missing_timeout_minutes",
    "file": "push-email-notify.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in instant-sync.yml",
    "type": "secret_action_without_presence_gate",
    "file": "instant-sync.yml",
    "action": "peter-evans/repository-dispatch",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in mirror.yml",
    "type": "secret_action_without_presence_gate",
    "file": "mirror.yml",
    "action": "webfactory/ssh-agent",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in mirror.yml",
    "type": "secret_action_without_presence_gate",
    "file": "mirror.yml",
    "action": "webfactory/ssh-agent",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in mirror.yml",
    "type": "secret_action_without_presence_gate",
    "file": "mirror.yml",
    "action": "webfactory/ssh-agent",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in mirror.yml",
    "type": "secret_action_without_presence_gate",
    "file": "mirror.yml",
    "action": "webfactory/ssh-agent",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in mirror.yml",
    "type": "secret_action_without_presence_gate",
    "file": "mirror.yml",
    "action": "webfactory/ssh-agent",
    "rule_module": "workflow_audit",
    "severity": "high"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence

@hyperpolymath
hyperpolymath merged commit 4c3aee5 into main Sep 2, 2026
55 of 75 checks passed
@hyperpolymath
hyperpolymath deleted the chore/remove-stray-pmpl-files branch September 2, 2026 11:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant