Skip to content

Feat/sha bump propagation rule 418 - #665

Open
hyperpolymath wants to merge 2 commits into
mainfrom
feat/sha-bump-propagation-rule-418
Open

Feat/sha bump propagation rule 418#665
hyperpolymath wants to merge 2 commits into
mainfrom
feat/sha-bump-propagation-rule-418

Conversation

@hyperpolymath

@hyperpolymath hyperpolymath commented Jul 29, 2026 •
edited by gitar-bot Bot
Loading

Copy link
Copy Markdown
Owner

Summary

Closes #

Type of change

  • 🐛 Bug fix (non-breaking change that fixes an issue)
  • ✨ New feature (non-breaking change that adds functionality)
  • 💥 Breaking change (would change existing behaviour)
  • 🕳️ Soundness fix (fixes a checker/proof false-negative)
  • 📖 Documentation
  • 🧹 Refactor / tech debt (behaviour-preserving)
  • ⚡ Performance
  • 🔧 Build / CI / tooling

How has this been verified?

Checklist

  • My commits are signed (git commit -S).
  • I ran the project's own checks/tests locally and they pass.
  • New files carry the correct SPDX-License-Identifier (code/config MPL-2.0,
    prose CC-BY-SA-4.0); I did not relicense existing files.
  • Docs are updated, and no public claim now overstates what the code does.
  • I have not introduced a soundness hole (or I have flagged where I might have).

Notes for reviewers

Summary by Gitar

  • CI/CD Workflows:
    • Added inbox-steward-intake.yml workflow for processing gitbot-fleet reports and updating rules

This will update automatically on new commits.

hyperpolymath and others added 2 commits June 2, 2026 16:50
@hyperpolymath @claude
feat(rules): ShaBumpPropagation — detection rule for estate reusable …
77171ac 
…SHA bumps (#418)

Detection-half of the three-system propagation architecture:
  hypatia (this commit) -> gitbot-fleet -> .git-private-farm

Pure-data rule consuming a PR-merge event, returning a finding per
matched estate reusable workflow / composite action. Strategy
`:review` (flag-only); title-keyword exclusion stays in actuation
per feedback_pr_sweep_title_keyword_exclusion.

- lib/rules/sha_bump_propagation.ex — module + known_reusables registry
  (10 standards reusables + a2ml-validate-action composite). Accepts
  both atom- and binary-keyed event maps (webhook-friendly).
- test/rules/sha_bump_propagation_test.exs — sensitivity + specificity
  oracle suite; pr_title carried verbatim; malformed-event safety.

Local mix can't run tests (elixir 1.14 vs phoenix 1.15+); a standalone
runner exercised every assertion before commit. CI will run the
ExUnit module via the project's normal pipeline.

Origin trace: .git-private-farm#66 (propagation primitive) +
standards#341 + neurophone#107 (both closed redundant).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@hyperpolymath @mistral-vibe
feat(inbox-steward): add intake workflow and update ruleset
7333516 
Adds Inbox Steward Intake workflow that:
- Receives reports from gitbot-fleet inbox-steward
- Analyzes patterns from auto-merged PRs
- Updates Hypatia ruleset based on lessons learned
- Dispatches updated rules to .git-private-farm for fleet-wide application

Updates .hypatia-baseline.json with new inbox automation rules (IA001-IA007):
- inbox_steward_missing: requires inbox-steward.yml
- inbox_steward_intake_missing: requires inbox-steward-intake.yml
- IA001-IA004: enable auto-merge with required checks
- IA005: trusted contributors list
- IA006: propagate rules across fleet
- IA007: monitor application

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
@gitar-bot

gitar-bot Bot commented Jul 29, 2026

Copy link
Copy Markdown

Note

Automatic reviews are paused because your trial's included automatic processing has been used for this period. Upgrade now, or comment "Gitar review" to run a review anytime.
Learn more

Code Review ✅ Approved

Adds the ShaBumpPropagation detection rule for estate reusable SHA bumps alongside an inbox-steward intake workflow. No issues found.

Auto-approved and auto-merge armed: No blocking issues found.
Please see Auto-approve Docs for details on setting custom approval criteria. — merges when pipeline and required approvals pass.

Options

Display: compact → Showing less information.

Comment with these commands to change the behavior for this request:

Compact 
gitar display:verbose

Was this helpful? React with 👍 / 👎 | Gitar

@gitar-bot

gitar-bot Bot commented Jul 29, 2026

Copy link
Copy Markdown

⚠️ Gitar auto-approved this PR but could not enable auto-merge: auto-merge is disabled for this repository — enable "Allow auto-merge" in the repository settings.

@gitar-bot gitar-bot Bot added the gitar-approved Added by Gitar label Jul 29, 2026
gitar-bot[bot]
gitar-bot Bot approved these changes Jul 29, 2026
View reviewed changes

@gitar-bot gitar-bot Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Gitar has auto-approved this PR and enabled auto-merge (configure)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@gitar-bot gitar-bot[bot] gitar-bot[bot] approved these changes

Assignees

No one assigned

Labels

gitar-approved Added by Gitar

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@hyperpolymath