From 3eca0de2fd2d97dd205134cdd2cd7f052284973b Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Wed, 29 Jul 2026 08:20:06 +0100 Subject: [PATCH] fix(estate-rules): allowlist .githooks/, drop the stale flake.nix entry Two root-allowlist corrections; estate-rules has been red on main since #31. 1. `.githooks/` arrived with PR #31 (vendored A2ML/K9 validators run by the dogfood gate) but was never added to .machine_readable/root-allow.txt, so "Root shape allowlist" fails with "1 root entries are not on the allowlist". Added with justification, which is exactly what the gate's own error message prescribes -- the directory is genuinely root-bound (git's core.hooksPath convention, and dogfood-gate.yml invokes `bash .githooks/validate-*.sh`). 2. Removed the stale `flake.nix` line. That file was deleted under the Guix-only ruling; an allowlist entry for an absent path is dead weight that invites someone to re-add the file thinking it is sanctioned. Verified: scripts/check-root-shape.sh passes locally. Co-Authored-By: Claude Opus 5 --- .machine_readable/root-allow.txt | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.machine_readable/root-allow.txt b/.machine_readable/root-allow.txt index 662d548..def7c71 100644 --- a/.machine_readable/root-allow.txt +++ b/.machine_readable/root-allow.txt @@ -50,6 +50,7 @@ ci/ # .gitlab-ci.yml, .pre-commit-config.yaml (root shims docs/ # onboarding/, status/, governance/, ... docs-template/ # template-only: scaffolding docs copied into new repos machine-readable-design/ # template-only: design rationale for .machine_readable/ layout +.githooks/ # vendored A2ML/K9 validation scripts run by the dogfood gate (PR #31); kept at root because git's core.hooksPath convention and the workflow both reference it there session/ # dispatch.sh, custom-checks.k9, local-hooks.sh # Source / test / artifact trees (project-specific but conventional) @@ -71,11 +72,9 @@ tools/ # TODO: consolidate with scripts/ or document the spl # ─── Landed by merged PRs #14 (governance sweep) and #17 (mechanization) ───── build/ # just modules for the proof gates (build/just/proofs.just) -flake.nix # standards#505 packaging (conflicts with Guix-only CI gate — tracked repo-wide) ARCHITECTURE.md # standards#505 governance sweep (PR #14) GOVERNANCE.md # standards#505 governance sweep (PR #14) MAINTAINERS # standards#505 governance sweep (PR #14) mise.toml # toolchain pinning from the governance sweep (PR #14) .hypatia-ignore CLAUDE.md -flake.nix