Consistency audit compliance¶
Which project currently meets which criterion. This page is
regenerated weekly by the consistency audit workflow and
committed by it, and it is the only generated file in docs/audits/
-- every criterion specification beside it is hand-written and
changes only when a person changes it.
Read a table here together with the criterion it belongs to. The
table says who passes and which issue tracks each failure -- - in
the Issue column means none is open, and ? that the lookup failed,
so whether one is open is not known; the
specification says what is checked and why, what the check
deliberately does not cover, and which template implements it, and is
what to read first when picking up an issue. README.md
indexes them all.
The generation timestamp below is load-bearing. When a run fails it leaves the previous run's verdicts in place, so this page goes on looking healthy while being stale -- check the date before trusting a verdict. The audit runs at 18:00 UTC every Sunday and can be dispatched by hand in between, so a timestamp older than the most recent Sunday 18:00 UTC means the last scheduled run failed, however many manual runs came before it. See ../consistency-audits.md for what a run does.
Generated 2026-10-25T20:21:47.014253+00:00 from scripts/audit-check.py; do not edit.
ci-review-automation¶
Criterion: ci-review-automation.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | non-compliant | client-python#408 |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | non-compliant | clingwrap#121 |
| cloudgood | compliant | - |
| development | compliant | - |
| divergulent | non-compliant | divergulent#120 |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | non-compliant | kerbside-client#5 |
| kerbside-patches | non-compliant | kerbside-patches#1977 |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | non-compliant | uncalibrated-sextant#16 |
| visual-digest-rust | compliant | - |
Details for non-compliant projects:
- client-python (Status): pr-re-review.yml does not confirm that the tree it checked out is the commit it resolved, so a push between the two is reviewed with no warning; pr-retest.yml: job trigger-retest does not export pr-bot-trigger's same-repo output, so the job that needs it cannot require a same-repository pull request
- clingwrap (Status): pr-re-review.yml does not use shakenfist/actions/pr-bot-trigger@main, so it hand-rolls the trigger handling and does not inherit the action's fork pull request guard; pr-re-review.yml does not confirm that the tree it checked out is the commit it resolved, so a push between the two is reviewed with no warning; pr-retest.yml: job trigger-retest does not export pr-bot-trigger's same-repo output, so the job that needs it cannot require a same-repository pull request; the retired comment addresser is still deployed (.github/workflows/pr-address-comments.yml, tools/address-comments-with-claude.sh, tools/render-review.py, tools/review-schema.json); it is unused, and its workflow holds contents: write on the pull request branch
- divergulent (Status): pr-re-review.yml does not confirm that the tree it checked out is the commit it resolved, so a push between the two is reviewed with no warning; pr-retest.yml: job trigger-retest does not export pr-bot-trigger's same-repo output, so the job that needs it cannot require a same-repository pull request
- kerbside-client (Status): Missing pr-re-review.yml; Missing pr-retest.yml; No automated reviewer: no workflow other than pr-re-review.yml or pr-retest.yml calls shakenfist/actions/.github/workflows/pr-auto-review.yml@main or uses shared action review-pr-with-claude@main
- kerbside-patches (Status): No automated reviewer: no workflow other than pr-re-review.yml or pr-retest.yml calls shakenfist/actions/.github/workflows/pr-auto-review.yml@main or uses shared action review-pr-with-claude@main
- uncalibrated-sextant (Status): Missing pr-re-review.yml; Missing pr-retest.yml; No automated reviewer: no workflow other than pr-re-review.yml or pr-retest.yml calls shakenfist/actions/.github/workflows/pr-auto-review.yml@main or uses shared action review-pr-with-claude@main
console-logging¶
Criterion: console-logging.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | compliant | - |
| andris | N/A | - |
| client-python | compliant | - |
| client-python-k3s | N/A | - |
| client-python-ova | N/A | - |
| clingwrap | N/A | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | N/A | - |
| hunkydory | N/A | - |
| images | N/A | - |
| instar | N/A | - |
| kerbside | N/A | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | N/A | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | N/A | - |
| sfui | N/A | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
default-branch-naming¶
Criterion: default-branch-naming.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | compliant | - |
| kerbside-patches | compliant | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | compliant | - |
| visual-digest-rust | compliant | - |
delete-branch-on-merge¶
Criterion: delete-branch-on-merge.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | compliant | - |
| development | compliant | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | non-compliant | kerbside-client#9 |
| kerbside-patches | compliant | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | non-compliant | uncalibrated-sextant#21 |
| visual-digest-rust | compliant | - |
Details for non-compliant projects:
- kerbside-client (Status): Delete branch on merge is not enabled
- uncalibrated-sextant (Status): Delete branch on merge is not enabled
dependency-name-normalization¶
Criterion: dependency-name-normalization.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | compliant | - |
| andris | N/A | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | compliant | - |
| hunkydory | N/A | - |
| images | N/A | - |
| instar | N/A | - |
| kerbside | compliant | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | N/A | - |
| sfui | N/A | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
diagram-format¶
Criterion: diagram-format.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | non-compliant | clingwrap#126 |
| cloudgood | compliant | - |
| development | compliant | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | compliant | - |
| kerbside-patches | compliant | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | compliant | - |
| visual-digest-rust | compliant | - |
Details for non-compliant projects:
- clingwrap (Status): 1 diagram(s) drawn in ASCII rather than mermaid (convert them, or mark a block that is genuinely better drawn by hand with an "audit-ok: diagram-format" comment above the fence): ARCHITECTURE.md:21
docs-external-links¶
Criterion: docs-external-links.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | compliant | - |
| development | compliant | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | non-compliant | instar#826 |
| kerbside | compliant | - |
| kerbside-client | N/A | - |
| kerbside-patches | compliant | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | non-compliant | ryll#616 |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | non-compliant | uncalibrated-sextant#7 |
| visual-digest-rust | compliant | - |
Details for non-compliant projects:
- instar (Status): 2 relative link(s) in docs/ that do not resolve to a file inside docs/ (use absolute https://github.com/... URLs, which survive the docs site import): docs/plans/PLAN-differencing-phase-17-compose-docs.md -> docs/plans/PLAN-differencing.md, docs/plans/PLAN-differencing-phase-17-compose-docs.md -> plans/PLAN-differencing.md
- ryll (Status): 1 relative link(s) in docs/ that do not resolve to a file inside docs/ (use absolute https://github.com/... URLs, which survive the docs site import): docs/plans/completed/PLAN-stream-caps-and-flap-phase-05-auto-snapshot.md -> PLAN-stream-caps-and-flap.md
- uncalibrated-sextant (Status): 67 relative link(s) in docs/ that do not resolve to a file inside docs/ (use absolute https://github.com/... URLs, which survive the docs site import): docs/plans/PLAN-audit-cleanup-phase-02-structural.md -> ../../src/bootloader.rs, docs/plans/PLAN-audit-cleanup-phase-02-structural.md -> ../../src/renderer/mod.rs, docs/plans/PLAN-audit-cleanup-phase-02-structural.md -> ../../src/scene.rs, docs/plans/PLAN-audit-cleanup-phase-03-tests.md -> ../../Makefile, docs/plans/PLAN-audit-cleanup-phase-03-tests.md -> ../../scripts/screenshot.sh, docs/plans/PLAN-audit-cleanup-phase-03-tests.md -> ../../scripts/verify-release.sh, docs/plans/PLAN-audit-cleanup-phase-03-tests.md -> ../../src/scene.rs, docs/plans/PLAN-audit-cleanup.md -> ../../AGENTS.md, docs/plans/PLAN-audit-cleanup.md -> ../../ARCHITECTURE.md, docs/plans/PLAN-audit-cleanup.md -> ../../PUSH-AUDIT.md (+57 more)
docs-line-references¶
Criterion: docs-line-references.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | compliant | - |
| development | compliant | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | non-compliant | instar#827 |
| kerbside | compliant | - |
| kerbside-client | compliant | - |
| kerbside-patches | compliant | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | compliant | - |
| visual-digest-rust | compliant | - |
Details for non-compliant projects:
- instar (Status): 6 line(s) in the documentation cite code by line number, which goes stale on the next edit to that code (name the function or class instead, or use a GitHub permalink pinned to a commit sha): docs/create.md:405, docs/create.md:406, docs/create.md:411, docs/measure.md:105, docs/quirks.md:1118, docs/quirks.md:1123
eol-distro¶
Criterion: eol-distro.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | compliant | - |
| development | compliant | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | compliant | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | compliant | - |
| kerbside-patches | non-compliant | kerbside-patches#1987 |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | compliant | - |
| visual-digest-rust | compliant | - |
Details for non-compliant projects:
- kerbside-patches (Status): 1 reference(s) to end-of-life distribution releases. Debian 12 (bookworm) reached end of life on 2026-06-10; use the debian-13 runner labels, or a debian:13 (trixie) image. Moving a runner label also means declaring the new one in .github/actionlint.yaml in the same commit, or the workflow fails actionlint. A reference that must stay -- test input built on the old release, say -- is marked "audit-ok: eol-distro" with the reason, on the line or the line above
eol-producers¶
Criterion: eol-producers.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | N/A | - |
| andris | N/A | - |
| client-python | N/A | - |
| client-python-k3s | N/A | - |
| client-python-ova | N/A | - |
| clingwrap | N/A | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | N/A | - |
| hunkydory | N/A | - |
| images | N/A | - |
| instar | N/A | - |
| kerbside | N/A | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | N/A | - |
| occystrap | N/A | - |
| private-ci | compliant | - |
| ryll | N/A | - |
| sfui | N/A | - |
| shakenfist | N/A | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
expensive-lane-path-filter¶
Criterion: expensive-lane-path-filter.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | non-compliant | clingwrap#118 |
| cloudgood | compliant | - |
| development | compliant | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | compliant | - |
| kerbside-patches | compliant | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | compliant | - |
| visual-digest-rust | compliant | - |
Details for non-compliant projects:
- clingwrap (Status): 1 expensive lane(s) triggered by pull_request or merge_group without adequate path filtering: functional-tests.yml (no path filtering). Add a check_paths filter job (see kerbside functional-tests.yml) or, only for workflows backing no required status check, trigger-level paths-ignore, excluding docs/** and the review-tracking files; mark deliberate exceptions with an "audit-ok: no-path-filter" comment
export-repo-config¶
Criterion: export-repo-config.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | compliant | - |
| development | compliant | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | non-compliant | kerbside-client#7 |
| kerbside-patches | compliant | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | non-compliant | uncalibrated-sextant#19 |
| visual-digest-rust | compliant | - |
Details for non-compliant projects:
- kerbside-client (Status): Missing .github/workflows/export-repo-config.yml
- uncalibrated-sextant (Status): Missing .github/workflows/export-repo-config.yml
fuzz-nightly-reporting¶
Criterion: fuzz-nightly-reporting.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | N/A | - |
| andris | N/A | - |
| client-python | N/A | - |
| client-python-k3s | N/A | - |
| client-python-ova | N/A | - |
| clingwrap | N/A | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | N/A | - |
| hunkydory | N/A | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | N/A | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | N/A | - |
| occystrap | N/A | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | N/A | - |
| shakenfist | N/A | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
github-security¶
Criterion: github-security.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | compliant | - |
| development | compliant | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | non-compliant | kerbside-client#8 |
| kerbside-patches | compliant | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | non-compliant | uncalibrated-sextant#20 |
| visual-digest-rust | compliant | - |
Details for non-compliant projects:
- kerbside-client (Status): Missing .github/workflows/codeql-analysis.yml; Secret scanning not enabled; Secret scanning push protection not enabled
- uncalibrated-sextant (Status): Missing .github/workflows/codeql-analysis.yml; Secret scanning not enabled; Secret scanning push protection not enabled
llm-context-lint-ci¶
Criterion: llm-context-lint-ci.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | non-compliant | clingwrap#120 |
| cloudgood | compliant | - |
| development | compliant | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | N/A | - |
| kerbside-patches | compliant | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | non-compliant | uncalibrated-sextant#6 |
| visual-digest-rust | compliant | - |
Details for non-compliant projects:
- clingwrap (Status): skillsaw does not run from .pre-commit-config.yaml or a CI workflow
- uncalibrated-sextant (Status): skillsaw does not run from .pre-commit-config.yaml or a CI workflow
llm-context-lint¶
Criterion: llm-context-lint.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | compliant | - |
| development | compliant | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | N/A | - |
| kerbside-patches | compliant | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | compliant | - |
| visual-digest-rust | compliant | - |
llm-doc-naming¶
Criterion: llm-doc-naming.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | non-compliant | client-python#406 |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | compliant | - |
| development | compliant | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | compliant | - |
| kerbside-patches | compliant | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | compliant | - |
| visual-digest-rust | compliant | - |
Details for non-compliant projects:
- client-python (Status): 1 agent instruction file is named for a single tool rather than AGENTS.md (CLAUDE.md); AGENTS.md is tracked beside it, so it is a second set of instructions loaded with equal authority: merge what is still true into AGENTS.md and delete the original
llm-doc-structure¶
Criterion: llm-doc-structure.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | compliant | - |
| development | compliant | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | N/A | - |
| kerbside-patches | compliant | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | compliant | - |
| visual-digest-rust | compliant | - |
llm-tooling¶
Criterion: llm-tooling.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | compliant | - |
| development | compliant | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | non-compliant | kerbside-client#1 |
| kerbside-patches | compliant | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | compliant | - |
| visual-digest-rust | compliant | - |
Details for non-compliant projects:
- kerbside-client (Status): Missing: AGENTS.md, ARCHITECTURE.md
merge-group-cancellation¶
Criterion: merge-group-cancellation.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | N/A | - |
| kerbside-patches | compliant | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | N/A | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
merge-queue-config¶
Criterion: merge-queue-config.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | N/A | - |
| kerbside-patches | compliant | - |
| library-utilities | compliant | - |
| occystrap | N/A | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | N/A | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
mermaid-lint-ci¶
Criterion: mermaid-lint-ci.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | N/A | - |
| andris | N/A | - |
| client-python | N/A | - |
| client-python-k3s | N/A | - |
| client-python-ova | N/A | - |
| clingwrap | N/A | - |
| cloudgood | compliant | - |
| development | compliant | - |
| divergulent | N/A | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | N/A | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | N/A | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
npm-pin-indirect-dependencies¶
Criterion: npm-pin-indirect-dependencies.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | N/A | - |
| andris | N/A | - |
| client-python | N/A | - |
| client-python-k3s | N/A | - |
| client-python-ova | N/A | - |
| clingwrap | N/A | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | N/A | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | N/A | - |
| kerbside | N/A | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | N/A | - |
| occystrap | N/A | - |
| private-ci | N/A | - |
| ryll | N/A | - |
| sfui | N/A | - |
| shakenfist | N/A | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
npm-undeclared-direct-dependency¶
Criterion: npm-undeclared-direct-dependency.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | N/A | - |
| andris | N/A | - |
| client-python | N/A | - |
| client-python-k3s | N/A | - |
| client-python-ova | N/A | - |
| clingwrap | N/A | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | N/A | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | N/A | - |
| kerbside | N/A | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | N/A | - |
| occystrap | N/A | - |
| private-ci | N/A | - |
| ryll | N/A | - |
| sfui | N/A | - |
| shakenfist | N/A | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
npm-unused-declared-dependency¶
Criterion: npm-unused-declared-dependency.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | N/A | - |
| andris | N/A | - |
| client-python | N/A | - |
| client-python-k3s | N/A | - |
| client-python-ova | N/A | - |
| clingwrap | N/A | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | N/A | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | N/A | - |
| kerbside | N/A | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | N/A | - |
| occystrap | N/A | - |
| private-ci | N/A | - |
| ryll | N/A | - |
| sfui | N/A | - |
| shakenfist | N/A | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
pin-indirect-dependencies¶
Criterion: pin-indirect-dependencies.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | N/A | - |
| andris | N/A | - |
| client-python | N/A | - |
| client-python-k3s | N/A | - |
| client-python-ova | N/A | - |
| clingwrap | N/A | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | N/A | - |
| hunkydory | N/A | - |
| images | N/A | - |
| instar | N/A | - |
| kerbside | compliant | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | N/A | - |
| occystrap | N/A | - |
| private-ci | N/A | - |
| ryll | N/A | - |
| sfui | N/A | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
plan-audit-phase¶
Criterion: plan-audit-phase.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | N/A | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | N/A | - |
| cloudgood | N/A | - |
| development | compliant | - |
| divergulent | compliant | - |
| hunkydory | N/A | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | non-compliant | uncalibrated-sextant#10 |
| visual-digest-rust | N/A | - |
Details for non-compliant projects:
- uncalibrated-sextant (Status): 5 of 5 incomplete master plan(s) do not end with a phase running PUSH-AUDIT.md, which the plan-push-audit-phase shared block requires; each is named with the fix it needs: PLAN-locked-bootloader.md (no push audit phase; phase 3 is "3. Iteration, documentation, inventory closeout"), PLAN-display-mode-keystrokes.md (no push audit phase; phase 3 is "3. Iteration against ryll display-mode-ui, documentation,..."), PLAN-audit-cleanup.md (no push audit phase; phase 3 is "3. Test coverage and release verification"), PLAN-visual-digest.md (no push audit phase; phase 3 is "3. Repaint integration, format spec, closeout"), PLAN-continuous-digest.md (no push audit phase; phase 3 is "3. Docs, decoder coordination, closeout"); 2 plan(s) with no phases this check can read, not judged: PLAN-language-probes.md, PLAN-headless-readback-bug.md
plan-history-in-source¶
Criterion: plan-history-in-source.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | non-compliant | client-python#425 |
| client-python-k3s | non-compliant | client-python-k3s#139 |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | compliant | - |
| development | compliant | - |
| divergulent | non-compliant | divergulent#129 |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | compliant | - |
| kerbside-patches | compliant | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | non-compliant | shakenfist#4630 |
| uncalibrated-sextant | non-compliant | uncalibrated-sextant#22 |
| visual-digest-rust | compliant | - |
Details for non-compliant projects:
- client-python (Status): 19 plan history reference(s) in source, in 3 file(s) (write the reason the code is this way instead of citing the plan step that produced it)
- client-python-k3s (Status): 63 plan history reference(s) in source, in 14 file(s) (write the reason the code is this way instead of citing the plan step that produced it)
- divergulent (Status): 251 plan history reference(s) in source, in 47 file(s) (write the reason the code is this way instead of citing the plan step that produced it)
- shakenfist (Status): 45 plan history reference(s) in source, in 22 file(s) (write the reason the code is this way instead of citing the plan step that produced it)
- uncalibrated-sextant (Status): 22 plan history reference(s) in source, in 5 file(s) (write the reason the code is this way instead of citing the plan step that produced it)
plan-index¶
Criterion: plan-index.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | N/A | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | N/A | - |
| cloudgood | N/A | - |
| development | compliant | - |
| divergulent | compliant | - |
| hunkydory | N/A | - |
| images | N/A | - |
| instar | non-compliant | instar#828 |
| kerbside | compliant | - |
| kerbside-client | N/A | - |
| kerbside-patches | compliant | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | compliant | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | non-compliant | uncalibrated-sextant#9 |
| visual-digest-rust | N/A | - |
Details for non-compliant projects:
- instar (Status): 1 status cell(s) outside the shared vocabulary (Proposed, Not started, In progress, Blocked, Complete, Abandoned, Superseded): Populated BAT output: fixed VHDX and non-qcow2 preallocation ("full on vmdk / vpc / vhdx as the no-o...")
- uncalibrated-sextant (Status): 7 status cell(s) outside the shared vocabulary (Proposed, Not started, In progress, Blocked, Complete, Abandoned, Superseded): Locked bootloader ("Complete (commits a7b261d through thi..."), Display-mode keystrokes ("Complete (commits 455d2b5 through thi..."), Audit cleanup ("Complete (commits 1482eb0 through thi..."), Visual on-screen digest ("Complete (commits 55844a5 through thi..."), Continuous multi-channel visual digest ("Complete (commits 8814fab through thi...") (+2 more)
plan-phase-references¶
Criterion: plan-phase-references.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | non-compliant | client-python#382 |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | compliant | - |
| development | compliant | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | compliant | - |
| kerbside-patches | non-compliant | kerbside-patches#1975 |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | non-compliant | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | non-compliant | uncalibrated-sextant#8 |
| visual-digest-rust | compliant | - |
Details for non-compliant projects:
- client-python (Status): 1 plan phase reference(s) in documentation (describe the current behaviour, or link the master plan in docs/plans/ instead of citing a phase number): AGENTS.md:121
- kerbside-patches (Status): 34 plan phase reference(s) in documentation (describe the current behaviour, or link the master plan in docs/plans/ instead of citing a phase number): docs/containerised-deployer.md:117, docs/containerised-deployer.md:118, docs/containerised-deployer.md:127, docs/containerised-deployer.md:220, docs/containerised-deployer.md:270, docs/containerised-deployer.md:276, docs/containerised-deployer.md:291, docs/containerised-deployer.md:297, docs/containerised-deployer.md:299, docs/containerised-deployer.md:317 (+24 more)
- private-ci (Status): 9 plan phase reference(s) in documentation (describe the current behaviour, or link the master plan in docs/plans/ instead of citing a phase number): docs/capacity-claims.md:249, docs/capacity-claims.md:943, docs/capacity-claims.md:949, docs/capacity-claims.md:982, docs/capacity-claims.md:1007, docs/capacity-claims.md:1026, docs/capacity-claims.md:1428, docs/capacity-claims.md:1434, docs/capacity-claims.md:1495
- uncalibrated-sextant (Status): 25 plan phase reference(s) in documentation (describe the current behaviour, or link the master plan in docs/plans/ instead of citing a phase number): AGENTS.md:104, AGENTS.md:126, AGENTS.md:145, AGENTS.md:166, ARCHITECTURE.md:3, ARCHITECTURE.md:10, ARCHITECTURE.md:16, ARCHITECTURE.md:29, ARCHITECTURE.md:44, ARCHITECTURE.md:137 (+15 more)
plan-source-references¶
Criterion: plan-source-references.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | N/A | - |
| andris | N/A | - |
| client-python | non-compliant | client-python#403 |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | N/A | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | compliant | - |
| hunkydory | N/A | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | N/A | - |
| occystrap | N/A | - |
| private-ci | compliant | - |
| ryll | compliant | - |
| sfui | N/A | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | compliant | - |
| visual-digest-rust | N/A | - |
Details for non-compliant projects:
- client-python (Status): 2 of 4 plan reference(s) in source or configuration do not resolve, in 2 file(s) (update the path, or use an absolute https://github.com/... URL for a plan in another repository)
plan-template¶
Criterion: plan-template.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | N/A | - |
| andris | compliant | - |
| client-python | N/A | - |
| client-python-k3s | non-compliant | client-python-k3s#157 |
| client-python-ova | compliant | - |
| clingwrap | N/A | - |
| cloudgood | N/A | - |
| development | compliant | - |
| divergulent | non-compliant | divergulent#127 |
| hunkydory | N/A | - |
| images | N/A | - |
| instar | non-compliant | instar#829 |
| kerbside | compliant | - |
| kerbside-client | N/A | - |
| kerbside-patches | compliant | - |
| library-utilities | N/A | - |
| occystrap | compliant | - |
| private-ci | compliant | - |
| ryll | non-compliant | ryll#617 |
| sfui | N/A | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | non-compliant | uncalibrated-sextant#12 |
| visual-digest-rust | N/A | - |
Details for non-compliant projects:
- client-python-k3s (Status): shared block plan-push-audit-phase is stale (v3 embedded, v4 current; copy it verbatim from templates/shared-blocks/plan-push-audit-phase.md in the development repository)
- divergulent (Status): shared block plan-file-conventions is stale (v1 embedded, v2 current; copy it verbatim from templates/shared-blocks/plan-file-conventions.md in the development repository); shared block plan-push-audit-phase is stale (v3 embedded, v4 current; copy it verbatim from templates/shared-blocks/plan-push-audit-phase.md in the development repository)
- instar (Status): shared block plan-push-audit-phase is stale (v3 embedded, v4 current; copy it verbatim from templates/shared-blocks/plan-push-audit-phase.md in the development repository)
- ryll (Status): shared block plan-push-audit-phase is stale (v3 embedded, v4 current; copy it verbatim from templates/shared-blocks/plan-push-audit-phase.md in the development repository)
- uncalibrated-sextant (Status): shared block plan-file-conventions is stale (v1 embedded, v2 current; copy it verbatim from templates/shared-blocks/plan-file-conventions.md in the development repository); missing shared block plan-status-vocabulary (copy it verbatim from templates/shared-blocks/plan-status-vocabulary.md in the development repository); missing shared block plan-push-audit-phase (copy it verbatim from templates/shared-blocks/plan-push-audit-phase.md in the development repository); missing shared block plan-phase-landing (copy it verbatim from templates/shared-blocks/plan-phase-landing.md in the development repository)
push-audit¶
Criterion: push-audit.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | N/A | - |
| andris | compliant | - |
| client-python | N/A | - |
| client-python-k3s | compliant | - |
| client-python-ova | N/A | - |
| clingwrap | N/A | - |
| cloudgood | N/A | - |
| development | compliant | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | N/A | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | non-compliant | uncalibrated-sextant#11 |
| visual-digest-rust | N/A | - |
Details for non-compliant projects:
- uncalibrated-sextant (Status): missing shared block llm-doc-discipline (copy it verbatim from templates/shared-blocks/llm-doc-discipline.md in the development repository); missing shared block diagram-discipline (copy it verbatim from templates/shared-blocks/diagram-discipline.md in the development repository); missing shared block comment-proportion (copy it verbatim from templates/shared-blocks/comment-proportion.md in the development repository); missing shared block source-file-size (copy it verbatim from templates/shared-blocks/source-file-size.md in the development repository); missing shared block plan-references-in-code (copy it verbatim from templates/shared-blocks/plan-references-in-code.md in the development repository); missing shared block plan-phase-references (copy it verbatim from templates/shared-blocks/plan-phase-references.md in the development repository); missing shared block path-traversal-review (copy it verbatim from templates/shared-blocks/path-traversal-review.md in the development repository); missing shared block python-version-discipline (copy it verbatim from templates/shared-blocks/python-version-discipline.md in the development repository); missing shared block functional-test-coverage (copy it verbatim from templates/shared-blocks/functional-test-coverage.md in the development repository); AGENTS.md does not reference PUSH-AUDIT.md (an audit nothing points at does not get run)
pyproject-usage¶
Criterion: pyproject-usage.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | compliant | - |
| andris | N/A | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | compliant | - |
| hunkydory | N/A | - |
| images | N/A | - |
| instar | N/A | - |
| kerbside | compliant | - |
| kerbside-client | non-compliant | kerbside-client#3 |
| kerbside-patches | N/A | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | N/A | - |
| sfui | N/A | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
Details for non-compliant projects:
- kerbside-client (Status): 6 Python file(s) but no pyproject.toml
python-version¶
Criterion: python-version.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | compliant | - |
| andris | N/A | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | compliant | - |
| hunkydory | N/A | - |
| images | N/A | - |
| instar | N/A | - |
| kerbside | compliant | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | N/A | - |
| sfui | N/A | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
readme-absolute-links¶
Criterion: readme-absolute-links.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | non-compliant | clingwrap#108 |
| cloudgood | N/A | - |
| development | compliant | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | compliant | - |
| kerbside-patches | compliant | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | compliant | - |
| visual-digest-rust | compliant | - |
Details for non-compliant projects:
- clingwrap (Status): 5 relative link target(s) in README.md (use absolute URLs so the README renders off the repo landing page): AGENTS.md, ARCHITECTURE.md, RELEASE-SETUP.md, docs/, docs/index.md
readme-structure¶
Criterion: readme-structure.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | N/A | - |
| development | compliant | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | compliant | - |
| kerbside-patches | compliant | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | compliant | - |
| visual-digest-rust | compliant | - |
release-artifacts-exclude-plans¶
Criterion: release-artifacts-exclude-plans.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | N/A | - |
| andris | N/A | - |
| client-python | non-compliant | client-python#426 |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | N/A | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | non-compliant | divergulent#130 |
| hunkydory | N/A | - |
| images | N/A | - |
| instar | N/A | - |
| kerbside | compliant | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | N/A | - |
| sfui | N/A | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
Details for non-compliant projects:
- client-python (Status): 1 release artifact(s) would ship docs/plans/, which is working history rather than source; exclude it with the mechanism each finding names
- divergulent (Status): 1 release artifact(s) would ship docs/plans/, which is working history rather than source; exclude it with the mechanism each finding names
release-environment-protection¶
Criterion: release-environment-protection.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | N/A | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
release-process¶
Criterion: release-process.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | compliant | - |
| andris | N/A | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | compliant | - |
| hunkydory | N/A | - |
| images | N/A | - |
| instar | N/A | - |
| kerbside | compliant | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | N/A | - |
| sfui | N/A | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
renovate-lockstep-groups¶
Criterion: renovate-lockstep-groups.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | N/A | - |
| andris | N/A | - |
| client-python | N/A | - |
| client-python-k3s | N/A | - |
| client-python-ova | N/A | - |
| clingwrap | N/A | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | N/A | - |
| hunkydory | N/A | - |
| images | N/A | - |
| instar | N/A | - |
| kerbside | N/A | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | N/A | - |
| occystrap | N/A | - |
| private-ci | N/A | - |
| ryll | N/A | - |
| sfui | N/A | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
renovate¶
Criterion: renovate.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | non-compliant | agent-python#159 |
| andris | compliant | - |
| client-python | non-compliant | client-python#437 |
| client-python-k3s | non-compliant | client-python-k3s#158 |
| client-python-ova | compliant | - |
| clingwrap | non-compliant | clingwrap#117 |
| cloudgood | compliant | - |
| development | compliant | - |
| divergulent | non-compliant | divergulent#136 |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | non-compliant | instar#830 |
| kerbside | compliant | - |
| kerbside-client | non-compliant | kerbside-client#2 |
| kerbside-patches | non-compliant | kerbside-patches#1976 |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | non-compliant | ryll#618 |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | non-compliant | uncalibrated-sextant#13 |
| visual-digest-rust | compliant | - |
Details for non-compliant projects:
- agent-python (Status): renovate.yml runs Renovate through renovatebot/github-action, which needs a Docker daemon the runner may not have; copy the template, which runs it from npm; renovate.json does not extend customManagers:githubActionsVersions, so the Renovate version pinned in renovate.yml is never bumped
- client-python (Status): renovate.yml runs Renovate through renovatebot/github-action, which needs a Docker daemon the runner may not have; copy the template, which runs it from npm; renovate.json does not extend customManagers:githubActionsVersions, so the Renovate version pinned in renovate.yml is never bumped
- client-python-k3s (Status): renovate.yml runs Renovate through renovatebot/github-action, which needs a Docker daemon the runner may not have; copy the template, which runs it from npm; renovate.json does not extend customManagers:githubActionsVersions, so the Renovate version pinned in renovate.yml is never bumped
- clingwrap (Status): renovate.yml runs Renovate through renovatebot/github-action, which needs a Docker daemon the runner may not have; copy the template, which runs it from npm; renovate.json does not extend customManagers:githubActionsVersions, so the Renovate version pinned in renovate.yml is never bumped; renovate.json does not enable the pre-commit manager, so the hook revisions in .pre-commit-config.yaml are unmanaged and drift silently
- divergulent (Status): renovate.yml runs Renovate through renovatebot/github-action, which needs a Docker daemon the runner may not have; copy the template, which runs it from npm; renovate.json does not extend customManagers:githubActionsVersions, so the Renovate version pinned in renovate.yml is never bumped
- instar (Status): renovate.yml runs Renovate through renovatebot/github-action, which needs a Docker daemon the runner may not have; copy the template, which runs it from npm; renovate.json does not extend customManagers:githubActionsVersions, so the Renovate version pinned in renovate.yml is never bumped
- kerbside-client (Status): Missing: .github/workflows/renovate.yml, renovate.json
- kerbside-patches (Status): renovate.yml runs Renovate through renovatebot/github-action, which needs a Docker daemon the runner may not have; copy the template, which runs it from npm; renovate.json does not extend customManagers:githubActionsVersions, so the Renovate version pinned in renovate.yml is never bumped
- ryll (Status): renovate.yml runs Renovate through renovatebot/github-action, which needs a Docker daemon the runner may not have; copy the template, which runs it from npm; renovate.json does not extend customManagers:githubActionsVersions, so the Renovate version pinned in renovate.yml is never bumped
- uncalibrated-sextant (Status): Missing: .github/workflows/renovate.yml, renovate.json
reusable-workflow-secrets¶
Criterion: reusable-workflow-secrets.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | compliant | - |
| development | compliant | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | compliant | - |
| kerbside-patches | compliant | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | compliant | - |
| visual-digest-rust | compliant | - |
review-coverage¶
Criterion: review-coverage.md
| Project | Status | Issue |
|---|---|---|
| actions | non-compliant | actions#200 |
| agent-python | N/A | - |
| andris | N/A | - |
| client-python | N/A | - |
| client-python-k3s | N/A | - |
| client-python-ova | N/A | - |
| clingwrap | N/A | - |
| cloudgood | N/A | - |
| development | non-compliant | development#247 |
| divergulent | N/A | - |
| hunkydory | non-compliant | hunkydory#121 |
| images | N/A | - |
| instar | N/A | - |
| kerbside | non-compliant | kerbside#227 |
| kerbside-client | non-compliant | kerbside-client#12 |
| kerbside-patches | N/A | - |
| library-utilities | N/A | - |
| occystrap | N/A | - |
| private-ci | N/A | - |
| ryll | non-compliant | ryll#456 |
| sfui | non-compliant | sfui#42 |
| shakenfist | N/A | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
Details for non-compliant projects:
- actions (Status): 152 of 163 in-scope files reviewed at HEAD; 11 need review (threshold 5)
- development (Status): 181 of 225 in-scope files reviewed at HEAD; 44 need review (threshold 5)
- hunkydory (Status): 54 of 62 in-scope files reviewed at HEAD (1 imported from shakenfist/development); 8 need review (threshold 5)
- kerbside (Status): 100 of 292 in-scope files reviewed at HEAD (4 imported from shakenfist/development); 192 need review (threshold 5)
- kerbside-client (Status): 2 of 15 in-scope files reviewed at HEAD (2 imported from shakenfist/development); 13 need review (threshold 5)
- ryll (Status): 162 of 272 in-scope files reviewed at HEAD (1 imported from shakenfist/development); 110 need review (threshold 5)
- sfui (Status): 5 of 49 in-scope files reviewed at HEAD (5 imported from shakenfist/development); 44 need review (threshold 5)
review-scope-completeness¶
Criterion: review-scope-completeness.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | N/A | - |
| andris | N/A | - |
| client-python | N/A | - |
| client-python-k3s | N/A | - |
| client-python-ova | N/A | - |
| clingwrap | N/A | - |
| cloudgood | N/A | - |
| development | compliant | - |
| divergulent | N/A | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | N/A | - |
| kerbside | compliant | - |
| kerbside-client | compliant | - |
| kerbside-patches | N/A | - |
| library-utilities | N/A | - |
| occystrap | N/A | - |
| private-ci | N/A | - |
| ryll | non-compliant | ryll#619 |
| sfui | compliant | - |
| shakenfist | N/A | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
Details for non-compliant projects:
- ryll (Status): 1 tracked file(s) are out of review scope only because no include pattern in .vscode/review-scope.toml names them
review-tracking-templates¶
Criterion: review-tracking-templates.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | N/A | - |
| andris | N/A | - |
| client-python | N/A | - |
| client-python-k3s | N/A | - |
| client-python-ova | N/A | - |
| clingwrap | N/A | - |
| cloudgood | N/A | - |
| development | compliant | - |
| divergulent | N/A | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | N/A | - |
| kerbside | compliant | - |
| kerbside-client | compliant | - |
| kerbside-patches | N/A | - |
| library-utilities | N/A | - |
| occystrap | N/A | - |
| private-ci | N/A | - |
| ryll | non-compliant | ryll#636 |
| sfui | compliant | - |
| shakenfist | N/A | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
Details for non-compliant projects:
- ryll (Status): tools/review-tracking.sh differs from templates/review-tracking/review-tracking.sh. Copy them byte for byte from templates/review-tracking/ in shakenfist/development
rust-unwrap-lint¶
Criterion: rust-unwrap-lint.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | N/A | - |
| andris | compliant | - |
| client-python | N/A | - |
| client-python-k3s | N/A | - |
| client-python-ova | N/A | - |
| clingwrap | N/A | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | N/A | - |
| hunkydory | N/A | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | N/A | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | N/A | - |
| occystrap | N/A | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | N/A | - |
| shakenfist | N/A | - |
| uncalibrated-sextant | non-compliant | uncalibrated-sextant#14 |
| visual-digest-rust | compliant | - |
Details for non-compliant projects:
- uncalibrated-sextant (Status): clippy unwrap_used lint not set to warn or deny in Cargo.toml; clippy.toml missing allow-unwrap-in-tests = true
scheduled-workflow-health¶
Criterion: scheduled-workflow-health.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | non-compliant | cloudgood#12 |
| development | compliant | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | non-compliant | instar#831 |
| kerbside | compliant | - |
| kerbside-client | compliant | - |
| kerbside-patches | compliant | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | compliant | - |
| visual-digest-rust | compliant | - |
Details for non-compliant projects:
- cloudgood (Status): 1 workflow(s) that fire unattended have failed on main at least 3 times and never once succeeded, so whatever they are meant to do has never happened. The usual cause is an installation that was not finished -- a missing secret, or an organisation secret not granted to this repository -- and the reason is in the log of the linked run
- instar (Status): 1 workflow(s) that fire unattended have failed on develop at least 3 times and never once succeeded, so whatever they are meant to do has never happened. The usual cause is an installation that was not finished -- a missing secret, or an organisation secret not granted to this repository -- and the reason is in the log of the linked run
scope-coverage¶
Criterion: scope-coverage.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | N/A | - |
| andris | N/A | - |
| client-python | N/A | - |
| client-python-k3s | N/A | - |
| client-python-ova | N/A | - |
| clingwrap | N/A | - |
| cloudgood | N/A | - |
| development | compliant | - |
| divergulent | N/A | - |
| hunkydory | N/A | - |
| images | N/A | - |
| instar | N/A | - |
| kerbside | N/A | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | N/A | - |
| occystrap | N/A | - |
| private-ci | N/A | - |
| ryll | N/A | - |
| sfui | N/A | - |
| shakenfist | N/A | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
secret-handling¶
Criterion: secret-handling.md
| Project | Status | Issue |
|---|---|---|
| actions | compliant | - |
| agent-python | compliant | - |
| andris | compliant | - |
| client-python | compliant | - |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | non-compliant | clingwrap#111 |
| cloudgood | N/A | - |
| development | compliant | - |
| divergulent | compliant | - |
| hunkydory | compliant | - |
| images | N/A | - |
| instar | compliant | - |
| kerbside | compliant | - |
| kerbside-client | non-compliant | kerbside-client#11 |
| kerbside-patches | compliant | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | compliant | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | non-compliant | uncalibrated-sextant#18 |
| visual-digest-rust | compliant | - |
Details for non-compliant projects:
- clingwrap (Status): No secret scanner in CI; expected one of gitleaks, trufflehog, detect-secrets in a workflow
- kerbside-client (Status): No secret scanner in CI; expected one of gitleaks, trufflehog, detect-secrets in a workflow
- uncalibrated-sextant (Status): No secret scanner in CI; expected one of gitleaks, trufflehog, detect-secrets in a workflow
security-sanitization¶
Criterion: security-sanitization.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | N/A | - |
| andris | N/A | - |
| client-python | N/A | - |
| client-python-k3s | N/A | - |
| client-python-ova | N/A | - |
| clingwrap | N/A | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | N/A | - |
| hunkydory | N/A | - |
| images | N/A | - |
| instar | N/A | - |
| kerbside | N/A | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | N/A | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | compliant | - |
| sfui | N/A | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
sfui-vendor¶
Criterion: sfui-vendor.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | N/A | - |
| andris | N/A | - |
| client-python | N/A | - |
| client-python-k3s | N/A | - |
| client-python-ova | N/A | - |
| clingwrap | N/A | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | N/A | - |
| hunkydory | N/A | - |
| images | N/A | - |
| instar | N/A | - |
| kerbside | non-compliant | kerbside#606 |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | N/A | - |
| occystrap | N/A | - |
| private-ci | non-compliant | - |
| ryll | non-compliant | ryll#620 |
| sfui | N/A | - |
| shakenfist | N/A | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
Details for non-compliant projects:
- kerbside (Status): kerbside/api/static/sfui: 4 commit(s) behind canonical; re-run tools/vendor.sh from an up to date sfui checkout
- private-ci (Status): conductor/static/sfui: 9 commit(s) behind canonical; re-run tools/vendor.sh from an up to date sfui checkout
- ryll (Status): ryll/src/web/assets/sfui: 22 commit(s) behind canonical; re-run tools/vendor.sh from an up to date sfui checkout
undeclared-direct-dependency¶
Criterion: undeclared-direct-dependency.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | N/A | - |
| andris | N/A | - |
| client-python | N/A | - |
| client-python-k3s | N/A | - |
| client-python-ova | N/A | - |
| clingwrap | N/A | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | N/A | - |
| hunkydory | N/A | - |
| images | N/A | - |
| instar | N/A | - |
| kerbside | compliant | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | N/A | - |
| occystrap | N/A | - |
| private-ci | N/A | - |
| ryll | N/A | - |
| sfui | N/A | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
unused-declared-dependency¶
Criterion: unused-declared-dependency.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | compliant | - |
| andris | N/A | - |
| client-python | non-compliant | client-python#383 |
| client-python-k3s | compliant | - |
| client-python-ova | compliant | - |
| clingwrap | compliant | - |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | compliant | - |
| hunkydory | N/A | - |
| images | N/A | - |
| instar | N/A | - |
| kerbside | compliant | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | N/A | - |
| sfui | N/A | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
Details for non-compliant projects:
- client-python (Status): Declared but never imported: chardet (pyproject.toml:23), pyyaml (pyproject.toml:27), requests_toolbelt (pyproject.toml:22). Remove each, or record why it is installed with a "# not-imported:
-- " comment in the dependencies array
version-file-gitignore¶
Criterion: version-file-gitignore.md
| Project | Status | Issue |
|---|---|---|
| actions | N/A | - |
| agent-python | compliant | - |
| andris | N/A | - |
| client-python | compliant | - |
| client-python-k3s | N/A | - |
| client-python-ova | N/A | - |
| clingwrap | non-compliant | clingwrap#106 |
| cloudgood | N/A | - |
| development | N/A | - |
| divergulent | compliant | - |
| hunkydory | N/A | - |
| images | N/A | - |
| instar | N/A | - |
| kerbside | compliant | - |
| kerbside-client | N/A | - |
| kerbside-patches | N/A | - |
| library-utilities | compliant | - |
| occystrap | compliant | - |
| private-ci | N/A | - |
| ryll | N/A | - |
| sfui | N/A | - |
| shakenfist | compliant | - |
| uncalibrated-sextant | N/A | - |
| visual-digest-rust | N/A | - |
Details for non-compliant projects:
- clingwrap (Status): clingwrap/_version.py is not covered by .gitignore
workflow-standards¶
Criterion: workflow-standards.md
| Project | flake8wrap | Runners | Static tags | VM size | Permissions | Linting | devpi fallback | devpi IP | Review scope | Review marks | Issue |
|---|---|---|---|---|---|---|---|---|---|---|---|
| actions | N/A | compliant | compliant | compliant | compliant | compliant | N/A | compliant | compliant | compliant | - |
| agent-python | compliant | compliant | compliant | compliant | compliant | compliant | N/A | compliant | N/A | N/A | - |
| andris | N/A | compliant | compliant | compliant | compliant | compliant | N/A | compliant | N/A | N/A | - |
| client-python | compliant | compliant | compliant | non-compliant | compliant | compliant | N/A | compliant | N/A | N/A | client-python#378 |
| client-python-k3s | compliant | compliant | compliant | compliant | compliant | compliant | N/A | compliant | N/A | N/A | - |
| client-python-ova | N/A | compliant | compliant | compliant | compliant | compliant | N/A | compliant | N/A | N/A | - |
| clingwrap | compliant | compliant | compliant | non-compliant | compliant | compliant | N/A | compliant | N/A | N/A | clingwrap#125 |
| cloudgood | N/A | compliant | compliant | compliant | compliant | compliant | N/A | compliant | N/A | N/A | - |
| development | N/A | compliant | compliant | compliant | compliant | compliant | N/A | compliant | compliant | N/A | - |
| divergulent | compliant | compliant | compliant | compliant | compliant | compliant | N/A | compliant | N/A | N/A | - |
| hunkydory | N/A | compliant | compliant | compliant | compliant | compliant | N/A | compliant | compliant | N/A | - |
| images | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | - |
| instar | N/A | compliant | compliant | compliant | compliant | compliant | N/A | compliant | N/A | N/A | - |
| kerbside | compliant | compliant | compliant | compliant | compliant | compliant | compliant | compliant | compliant | compliant | - |
| kerbside-client | non-compliant | compliant | compliant | compliant | compliant | non-compliant | N/A | compliant | N/A | N/A | kerbside-client#4, kerbside-client#6 |
| kerbside-patches | N/A | compliant | compliant | compliant | compliant | compliant | N/A | compliant | N/A | N/A | - |
| library-utilities | compliant | compliant | compliant | compliant | compliant | compliant | N/A | compliant | N/A | N/A | - |
| occystrap | compliant | compliant | compliant | compliant | compliant | compliant | N/A | compliant | N/A | N/A | - |
| private-ci | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | - |
| ryll | N/A | compliant | compliant | compliant | compliant | compliant | N/A | compliant | non-compliant | N/A | ryll#635 |
| sfui | N/A | compliant | compliant | compliant | compliant | compliant | compliant | compliant | compliant | compliant | - |
| shakenfist | compliant | compliant | compliant | compliant | compliant | compliant | compliant | compliant | N/A | N/A | - |
| uncalibrated-sextant | N/A | non-compliant | compliant | compliant | non-compliant | compliant | N/A | compliant | N/A | N/A | uncalibrated-sextant#15, uncalibrated-sextant#17 |
| visual-digest-rust | N/A | compliant | compliant | compliant | compliant | compliant | N/A | compliant | N/A | N/A | - |
Details for non-compliant projects:
- client-python (VM size): 3 "vm" runner job(s) naming no size: code-formatting.yml:19 (self-hosted, vm), functional-tests.yml:95 (self-hosted, vm), supply-chain.yml:81 (self-hosted, vm). The conductor takes the runner size from the labels and falls back to the first CI_SIZES entry -- "xs", one vCPU and 2048 MB -- when it finds none, so an omitted size is a silent downgrade to the smallest runner rather than a free choice. Add the size the job actually wants (xs/s/m/l/xl; m-bigdisk/xl-bigdisk when the job needs the disk; s-cloud/s-cluster when it builds a nested cloud or cluster); "xs" is a valid answer stated explicitly. A job which genuinely cannot name one marks the line "audit-ok: vm-runner-size" with the reason
- clingwrap (VM size): 1 "vm" runner job(s) naming no size: functional-tests.yml:29 (self-hosted, vm, debian-13). The conductor takes the runner size from the labels and falls back to the first CI_SIZES entry -- "xs", one vCPU and 2048 MB -- when it finds none, so an omitted size is a silent downgrade to the smallest runner rather than a free choice. Add the size the job actually wants (xs/s/m/l/xl; m-bigdisk/xl-bigdisk when the job needs the disk; s-cloud/s-cluster when it builds a nested cloud or cluster); "xs" is a valid answer stated explicitly. A job which genuinely cannot name one marks the line "audit-ok: vm-runner-size" with the reason
- kerbside-client (flake8wrap): Missing shellcheck disable=SC2086 directive
- kerbside-client (Linting): Missing .pre-commit-config.yaml
- ryll (Review scope): A pull request changing only .vscode/review-scope.toml skips the automated reviewer: ci.yml (its paths-filter excludes it). The scope config decides what is reviewed at all, so it is not review state; filter only REVIEWS.md, .vscode/.weaudit and .vscode/.weaudit-shas.json
- uncalibrated-sextant (Runners): 1 unmarked GitHub-hosted runner reference(s): pre-commit.yml:10 (ubuntu-latest). Move to a self-hosted runner, or mark deliberate exceptions with an "audit-ok: github-hosted-runner" comment
- uncalibrated-sextant (Permissions): 1 workflow(s) missing top-level permissions: pre-commit.yml
Criteria with no automated check¶
These criteria are written down and judged by a person, so they have no table above. Each says why in its own page: