Skip to content

fix: remove stale banned gen-v-connector V-lang recipe#14

Merged
hyperpolymath merged 1 commit into
mainfrom
fix/remove-banned-v-lang-recipe
May 16, 2026
Merged

fix: remove stale banned gen-v-connector V-lang recipe#14
hyperpolymath merged 1 commit into
mainfrom
fix/remove-banned-v-lang-recipe

Conversation

@hyperpolymath
Copy link
Copy Markdown
Owner

This is the held consumer sweep following rsr-template-repo PR #22, which removed the banned gen-v-connector V-lang connector-scaffold recipe from the template. This repo carried a pre-PR#22 copy of that drift recipe.

Removed

  • The gen-v-connector Justfile recipe (the "Generate a V-lang connector scaffold from the Groove manifest" recipe and its full body, including the connectors/v-*/ generator and embedded main.v heredoc).

Preserved

  • No V-lang ban-enforcement asset was touched. The repo's own ban guard (e.g. scripts/check-no-vlang.sh, estate-rules workflow, 6a2/PLAYBOOK.a2ml), where present, legitimately contains the gen-v-connector/vlang string as a detection pattern and is left intact.
  • The legitimate groove-setup and verify-template recipes and the GROOVE & V-TRIPLE SETUP section header (which they share) are unchanged.

Justfile remains syntactically valid (just --list succeeds).

🤖 Generated with Claude Code

Held consumer sweep following rsr-template-repo PR #22, which removed
the banned gen-v-connector V-lang connector-scaffold recipe from the
template. This repo carried a pre-PR#22 copy of that drift recipe.

Removes the "Generate a V-lang connector scaffold from the Groove
manifest" Justfile recipe and its full body (the connectors/v-*/
generator and embedded main.v heredoc).

V-lang ban-enforcement assets (check-no-vlang.sh, estate-rules
workflow, 6a2/PLAYBOOK.a2ml) are intentionally left untouched: they
contain the gen-v-connector/vlang string as a detection pattern.
The legitimate groove-setup and verify-template recipes and the
GROOVE & V-TRIPLE SETUP section header are unchanged.
@github-actions
Copy link
Copy Markdown

🔍 Hypatia Security Scan

Findings: 12 issues detected

Severity Count
🔴 Critical 5
🟠 High 2
🟡 Medium 5

⚠️ Action Required: Critical security issues found!

View findings
[
  {
    "reason": "Action actions/upload-artifact@v4 needs attention",
    "type": "unpinned_action",
    "file": "release.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action actions/download-artifact@v4 needs attention",
    "type": "unpinned_action",
    "file": "release.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Admitted leaves proof hole (1 occurrences, CWE-704)",
    "type": "admitted",
    "file": "/home/runner/work/affinescript-vite/affinescript-vite/verification/proofs/coq/TypeSafety.v",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  },
  {
    "reason": "Shell execution -- validate input before passing to shell (1 occurrences, CWE-78)",
    "type": "js_exec_sync",
    "file": "/home/runner/work/affinescript-vite/affinescript-vite/src/affine-plugin-improved.js",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "Download-and-execute pattern (curl|wget pipe to shell) -- verify integrity before execution (1 occurrences, CWE-494)",
    "type": "shell_download_then_run",
    "file": "/home/runner/work/affinescript-vite/affinescript-vite/setup.sh",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "line": 24,
    "reason": "Secret found: Generic API key",
    "type": "secret_detected",
    "file": "/home/runner/work/affinescript-vite/affinescript-vite/.envrc",
    "action": "revoke_rotate_and_purge",
    "rule_module": "security_errors",
    "severity": "critical"
  },
  {
    "reason": "1 workflow(s) with tag-pinned (not SHA-pinned) actions in affinescript-vite",
    "type": "DependencyPinning",
    "file": "/home/runner/work/affinescript-vite/affinescript-vite",
    "action": "auto_fix",
    "rule_module": "scorecard",
    "severity": "medium",
    "remediation": "Pin GitHub Actions and Docker base images by SHA hash.",
    "scorecard_check": "Pinned-Dependencies"
  },
  {
    "reason": "Repository has 2 non-main remote branch(es). Policy: single main branch only.",
    "type": "GS007",
    "file": ".",
    "action": "delete_remote_branches",
    "rule_module": "git_state",
    "severity": "medium"
  },
  {
    "reason": "6a2ml file outside canonical location -- must be in .machine_readable/6a2/",
    "type": "SD004",
    "file": ".machine_readable/STATE.a2ml",
    "action": "move",
    "rule_module": "structural_drift",
    "severity": "critical"
  },
  {
    "reason": "6a2ml file outside canonical location -- must be in .machine_readable/6a2/",
    "type": "SD004",
    "file": ".machine_readable/META.a2ml",
    "action": "move",
    "rule_module": "structural_drift",
    "severity": "critical"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence

@hyperpolymath hyperpolymath merged commit d416592 into main May 16, 2026
21 of 22 checks passed
@hyperpolymath hyperpolymath deleted the fix/remove-banned-v-lang-recipe branch May 16, 2026 14:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant