Skip to content

chore: fill derivable placeholders, drop false ARCHITECTURE, surface the rest #87

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
hyperpolymath wants to merge 3 commits into from
Closed

chore: fill derivable placeholders, drop false ARCHITECTURE, surface the rest #87

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
231d2d8
chore: fill derivable placeholders, drop false ARCHITECTURE, surface …
hyperpolymath Aug 5, 2026
3de3090
fix: restore {{PROJECT}} in reject-if-contains — it is a detector, no…
hyperpolymath Aug 5, 2026
0b62ee4
fix: restore the trailing newline
hyperpolymath Aug 5, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
36 changes: 3 additions & 33 deletions .github/CODEOWNERS
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,34 +1,4 @@
# SPDX-License-Identifier: MPL-2.0
# CODEOWNERS - Define code review assignments for GitHub
# See: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners

# Default: sole maintainer for all files
* @hyperpolymath

# Security-sensitive files require explicit ownership
SECURITY.md @hyperpolymath
.github/workflows/ @hyperpolymath
.machine_readable/ @hyperpolymath
contractiles/ @hyperpolymath

# License files
LICENSE @hyperpolymath
LICENSES/ @hyperpolymath

# Configuration
.gitignore @hyperpolymath
.github/ @hyperpolymath

# Documentation
README* @hyperpolymath
CONTRIBUTING* @hyperpolymath
CODE_OF_CONDUCT* @hyperpolymath
GOVERNANCE* @hyperpolymath
MAINTAINERS* @hyperpolymath
CHANGELOG* @hyperpolymath
ROADMAP* @hyperpolymath

# Build and CI
Justfile @hyperpolymath
Makefile @hyperpolymath
*.sh @hyperpolymath
# Solo-maintained hyperpolymath repo: no owner lines by policy.
# See hyperpolymath/standards CODEOWNERS-POLICY.adoc (Rule 1).
# Sole-maintainer review is moot; SPDX headers carry attribution.
6 changes: 3 additions & 3 deletions .machine_readable/contractiles/Justfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -867,8 +867,8 @@ container-init:
read -rp "Primary port [8080]: " _PORT
PORT="${_PORT:-8080}"

read -rp "Container registry [ghcr.io/${OWNER:-{{OWNER}}}]: " _REGISTRY
REGISTRY="${_REGISTRY:-ghcr.io/${OWNER:-{{OWNER}}}}"
read -rp "Container registry [ghcr.io/${OWNER:-hyperpolymath}]: " _REGISTRY
REGISTRY="${_REGISTRY:-ghcr.io/${OWNER:-hyperpolymath}}"

echo ""
echo " Service: $SERVICE_NAME"
Expand Down Expand Up @@ -1197,7 +1197,7 @@ test-matrix suite="unit" verbosity="normal" parallel="true":
@echo "Test matrix: suite={{suite}} verbosity={{verbosity}} parallel={{parallel}}"

# Container matrix: [build|run|push|shell|scan] x [registry] x [tag]
container-matrix action="build" registry="ghcr.io/{{OWNER}}" tag="latest":
container-matrix action="build" registry="ghcr.io/hyperpolymath" tag="latest":
@echo "Container matrix: action={{action}} registry={{registry}} tag={{tag}}"

# CI matrix: [lint|test|build|security|all] x [quick|full]
Expand Down
17 changes: 17 additions & 0 deletions 0-AI-MANIFEST.a2ml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,3 +13,20 @@
## Delivery Promises
- Mention in summaries whether STATE, `contractiles/`, or `.bot_directives/` changed.
- Keep this file in sync with the repository’s status; update it if the governance changes.

<!-- BEGIN requires-initialisation -->

## PRIORITY ACTION — this repository is not fully initialised

23 substitution token(s) still have no value. **Read
`REQUIRES_INITIALISATION.md` in the repository root before doing anything
else here** — it lists every outstanding token, what it means, and which
files it belongs in.

Do not fabricate values for them, and do not delete the sections that
contain them to quiet a gate. They are unfilled because they need a
decision, not because they were overlooked. Resolve what you legitimately
can, leave the rest, and delete `REQUIRES_INITIALISATION.md` only when
nothing outstanding remains.

<!-- END requires-initialisation -->
47 changes: 0 additions & 47 deletions ARCHITECTURE.md
View file
Open in desktop

This file was deleted.

6 changes: 3 additions & 3 deletions Justfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -867,8 +867,8 @@ container-init:
read -rp "Primary port [8080]: " _PORT
PORT="${_PORT:-8080}"

read -rp "Container registry [ghcr.io/${OWNER:-{{OWNER}}}]: " _REGISTRY
REGISTRY="${_REGISTRY:-ghcr.io/${OWNER:-{{OWNER}}}}"
read -rp "Container registry [ghcr.io/${OWNER:-hyperpolymath}]: " _REGISTRY
REGISTRY="${_REGISTRY:-ghcr.io/${OWNER:-hyperpolymath}}"

echo ""
echo " Service: $SERVICE_NAME"
Expand Down Expand Up @@ -1197,7 +1197,7 @@ test-matrix suite="unit" verbosity="normal" parallel="true":
@echo "Test matrix: suite={{suite}} verbosity={{verbosity}} parallel={{parallel}}"

# Container matrix: [build|run|push|shell|scan] x [registry] x [tag]
container-matrix action="build" registry="ghcr.io/{{OWNER}}" tag="latest":
container-matrix action="build" registry="ghcr.io/hyperpolymath" tag="latest":
@echo "Container matrix: action={{action}} registry={{registry}} tag={{tag}}"

# CI matrix: [lint|test|build|security|all] x [quick|full]
Expand Down
193 changes: 193 additions & 0 deletions REQUIRES_INITIALISATION.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,193 @@
<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->

# REQUIRES INITIALISATION

**This repository is not finished being set up.** 23 substitution token(s) across 5 file(s) still have no value.

## Why this is not already done

This repo was created from `hyperpolymath/rsr-template-repo`. The mint
(`just repo-init`) fills every token that has a single mechanical answer —
owner, repo, author, dates, licence, branch — and it has done so here.

The tokens below are the ones it *deliberately cannot* answer. They need a
decision or a fact that exists only in your head: what this project is for,
what command builds it, which port the service listens on, whether a PGP key
is held at all. The template's own token vocabulary says as much — you cannot
sensibly answer "required invariants" in a thirty-second bootstrap.

They were left **visibly unfilled on purpose**. The alternatives were both
worse: inventing plausible values would put confident falsehoods into a
security policy and an architecture document, and silently deleting the
sections would hide the fact that a decision is owed. A visible gap is
honest; a fabricated answer is not.

## Do not delete this file until every item below is resolved

This file is the only marker that the work is outstanding. Deleting it early
does not finish the setup, it just conceals it — and the next person or agent
to arrive will reasonably assume the repo is complete.

- **If you are a person:** delete this file yourself once the last item is done.
- **If you are an agent:** resolve what you legitimately can, leave the rest,
and delete this file only when no token below remains anywhere in the tree.
Do not delete it to make a gate go green.

Re-running the estate top-up tool will remove this file automatically once
nothing is outstanding, so the safest way to finish is to fix the tokens and
let the check confirm it.

## What is needed, and where it goes

### `{{ACCENT_COLOR}}`

Appears in:

- `scripts/mass-apply-templates.sh`

### `{{ARGS}}`

Arguments for the justfile recipe this appears in.

Appears in:

- `scripts/apply-justfiles.sh`

### `{{BG_COLOR}}`

Appears in:

- `scripts/mass-apply-templates.sh`

### `{{BINARY_NAME}}`

Appears in:

- `scripts/deploy-templates.sh`

### `{{BORDER_COLOR}}`

Appears in:

- `scripts/mass-apply-templates.sh`

### `{{COLOR_SCHEME}}`

Appears in:

- `scripts/mass-apply-templates.sh`

### `{{CONTACT_EMAIL}}`

Appears in:

- `scripts/mass-apply-templates.sh`

### `{{DESCRIPTION}}`

One-line description used in .github/settings.yml. HIGH PRIORITY: settings.yml is applied by a GitHub App, so an unfilled token here can be written into forge metadata verbatim.

Appears in:

- `scripts/mass-apply-templates.sh`

### `{{DOMAIN}}`

Appears in:

- `docs/MAAF_INTEGRATION.adoc`
- `scripts/mass-apply-templates.sh`

### `{{LANGUAGE}}`

Appears in:

- `scripts/deploy-templates.sh`

### `{{NAME}}`

Appears in:

- `scripts/apply-justfiles.sh`

### `{{PRIMARY_COLOR}}`

Appears in:

- `scripts/mass-apply-templates.sh`

### `{{PROJECT_NAME_SNAKE}}`

Appears in:

- `scripts/deploy-templates.sh`

### `{{PROJECT_SLUG}}`

Appears in:

- `scripts/mass-apply-templates.sh`

### `{{PROJECT_UNIQUE_STRENGTH}}`

What this does that its alternatives do not.

Appears in:

- `.machine_readable/bot_directives/methodology.a2ml`

### `{{RSR_TIER}}`

Appears in:

- `scripts/mass-apply-templates.sh`

### `{{SECONDARY_COLOR}}`

Appears in:

- `scripts/mass-apply-templates.sh`

### `{{TEXT_COLOR}}`

Appears in:

- `scripts/mass-apply-templates.sh`

### `{{TEXT_MUTED_COLOR}}`

Appears in:

- `scripts/mass-apply-templates.sh`

### `{{TIER}}`

Appears in:

- `scripts/deploy-templates.sh`

### `{{TRAINING_POLICY}}`

Appears in:

- `scripts/mass-apply-templates.sh`

### `{{VERSION}}`

Version/tag for the container image.

Appears in:

- `scripts/mass-apply-templates.sh`

### `{{YEAR}}`

Appears in:

- `scripts/mass-apply-templates.sh`

---

Generated by the estate top-up pass. Rationale and the governing rulings are
in `hyperpolymath/standards`; the token vocabulary is
`.machine_readable/ai/PLACEHOLDERS.adoc` in `rsr-template-repo`.
2 changes: 1 addition & 1 deletion ffi/zig/build.zig
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
// SPDX-License-Identifier: MPL-2.0
// Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
// {{PROJECT}} FFI Build Configuration
// CONATIVE_GATING FFI Build Configuration

const std = @import("std");

Expand Down
2 changes: 1 addition & 1 deletion ffi/zig/test/integration_test.zig
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
// SPDX-License-Identifier: MPL-2.0
// Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
// {{PROJECT}} Integration Tests
// CONATIVE_GATING Integration Tests
//
// These tests verify that the Zig FFI correctly implements the Idris2 ABI

Expand Down
16 changes: 8 additions & 8 deletions scripts/apply-common-files.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -60,7 +60,7 @@ for repo in */; do
if $DRY_RUN; then
log "[DRY] Would add .editorconfig to $name"
else
sed "s/{{PROJECT_NAME}}/$name/g" "$TEMPLATES_DIR/.editorconfig.template" > "$repo/.editorconfig"
sed "s/Conative Gating/$name/g" "$TEMPLATES_DIR/.editorconfig.template" > "$repo/.editorconfig"

@gitar-bot gitar-bot Bot Aug 5, 2026 •
edited
Loading

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚨 Bug: Placeholder tokens filled inside sed match patterns break template apply

These scripts substitute placeholder tokens in template files (e.g. sed "s/{{PROJECT_NAME}}/$name/g") — the token on the left-hand side is the pattern to find in the template, not a value to fill. The top-up pass replaced those match patterns with concrete values, so the scripts now run s/Conative Gating/$name/g, s/2026-08-05/$DATE/g, s/Jonathan D.A. Jewell/$AUTHOR/g, etc. Verified that the files under templates/ still contain {{PROJECT_NAME}} (and never the literal "Conative Gating"), so these substitutions no longer match anything: every generated .editorconfig, .well-known/*, and deployed file will ship with unreplaced {{PROJECT_NAME}}/{{DATE}}/{{AUTHOR}} tokens. Revert the left-hand side of these sed expressions back to the {{...}} tokens (leaving only genuine value fills untouched).

Restore the {{TOKEN}} match patterns on the sed LHS so template substitution works again.:

# scripts/deploy-templates.sh (and analogously in the other two scripts)
  sed -e "s/{{PROJECT_NAME}}/$PROJECT_NAME/g" \
      -e "s/{{PROJECT_NAME_SNAKE}}/$(echo "$PROJECT_NAME" | tr '-' '_')/g" \
      -e "s/{{LANGUAGE}}/$LANGUAGE/g" \
      -e "s/{{TIER}}/$TIER/g" \
      -e "s/{{BINARY_NAME}}/$(echo "$PROJECT_NAME" | tr '-' '_')/g" \
      "$template" > "$output"

Was this helpful? React with 👍 / 👎

log "Added .editorconfig to $name"
fi
((ec_added++)) || true
Expand All @@ -74,25 +74,25 @@ for repo in */; do
mkdir -p "$repo/.well-known"

# ai.txt
sed -e "s/{{PROJECT_NAME}}/$name/g" \
-e "s/{{DATE}}/$DATE/g" \
sed -e "s/Conative Gating/$name/g" \
-e "s/2026-08-05/$DATE/g" \
"$TEMPLATES_DIR/.well-known/ai.txt.template" > "$repo/.well-known/ai.txt" 2>/dev/null || true

# security.txt
sed -e "s/{{PROJECT_NAME}}/$name/g" \
-e "s/{{DATE}}/$DATE/g" \
sed -e "s/Conative Gating/$name/g" \
-e "s/2026-08-05/$DATE/g" \
"$TEMPLATES_DIR/.well-known/security.txt.template" > "$repo/.well-known/security.txt" 2>/dev/null || true

# humans.txt
sed -e "s/{{PROJECT_NAME}}/$name/g" \
sed -e "s/Conative Gating/$name/g" \
"$TEMPLATES_DIR/.well-known/humans.txt.template" > "$repo/.well-known/humans.txt" 2>/dev/null || true

# consent-required.txt
cp "$TEMPLATES_DIR/.well-known/consent-required.txt.template" "$repo/.well-known/consent-required.txt" 2>/dev/null || true

# provenance.json
sed -e "s/{{PROJECT_NAME}}/$name/g" \
-e "s/{{DATE}}/$DATE/g" \
sed -e "s/Conative Gating/$name/g" \
-e "s/2026-08-05/$DATE/g" \
"$TEMPLATES_DIR/.well-known/provenance.json.template" > "$repo/.well-known/provenance.json" 2>/dev/null || true

log "Added .well-known/ to $name"
Expand Down
Loading
Loading