Issues

• TEMPLATE-APPLICABILITY-POLICY baseline still requires 0-AI-MANIFEST.a2ml while the template retires .a2ml (rsr-template-repo#209)

  governancerefactorscaffolding
  hyperpolymath/standards#1229 · Filter by author hyperpolymath opened on Oct 11, 2026

• [gates] src/**/*.rs is root-anchored; cargo workspaces can never satisfy it

  hyperpolymath/standards#1228 · Filter by author hyperpolymath opened on Oct 11, 2026

• check-rsr-profile.sh never evaluates [baseline]; and its .well-known/ row predates the www/ migration

  hyperpolymath/standards#1227 · Filter by author hyperpolymath opened on Oct 11, 2026

• Ruling needed: per-app launcher praxis field vocabulary before the 21-descriptor migration

  decision
  hyperpolymath/standards#1226 · Filter by author hyperpolymath opened on Oct 10, 2026

• Ruling needed: canonical launcher metadata domains/encoding and offline fallback authority (#41/#65)

  decision
  hyperpolymath/standards#1225 · Filter by author hyperpolymath opened on Oct 10, 2026

• Problem

  hyperpolymath/standards#1224 · Filter by author hyperpolymath opened on Oct 9, 2026

• Problem

  hyperpolymath/standards#1223 · Filter by author hyperpolymath opened on Oct 9, 2026

• Problem

  hyperpolymath/standards#1222 · Filter by author hyperpolymath opened on Oct 9, 2026

• Problem

  hyperpolymath/standards#1221 · Filter by author hyperpolymath opened on Oct 9, 2026

• Problem

  hyperpolymath/standards#1220 · Filter by author hyperpolymath opened on Oct 9, 2026

• Problem

  hyperpolymath/standards#1219 · Filter by author hyperpolymath opened on Oct 9, 2026

• Self Test red on main: direct push 5b56aec0 overwrote kyaml-format.sh with a different exit contract

  testing
  hyperpolymath/standards#1174 · Filter by author hyperpolymath opened on Oct 6, 2026

• Hypatia baseline and scan red on main: 12 new findings since #1143

  hyperpolymath/standards#1173 · Filter by author hyperpolymath opened on Oct 6, 2026

• Allowlist Preflight red on main: check-allowed-actions.sh compares owner/repo case-sensitively

  hyperpolymath/standards#1172 · Filter by author hyperpolymath opened on Oct 6, 2026

• fix(ci): replace the three actions the estate policy rejects at start-up (editorconfig-checker, webfactory/ssh-agent, dtolnay/rust-toolchain)

  buggovernance
  hyperpolymath/standards#1147 · Filter by author hyperpolymath opened on Oct 4, 2026

• Reusable workflows reference secrets without declaring them, so callers cannot forward least-privilege names (WH008 is unsatisfiable fleet-wide)

  hyperpolymath/standards#1141 · Filter by author hyperpolymath opened on Oct 3, 2026

• UUID v7 checker needs an explicit legacy/external identity preservation contract

  hyperpolymath/standards#1140 · Filter by author hyperpolymath opened on Oct 3, 2026

• Workflow security linter: duplicate-key checker false-positives on KYAML flow sequences (red on main since #1133)

  hyperpolymath/standards#1137 · Filter by author hyperpolymath opened on Oct 2, 2026

• canon: template-capability-gates.toml still counts flake.nix as reproducible-build (Nix retired)

  packagingrefactorscaffolding
  hyperpolymath/standards#1125 · Filter by author hyperpolymath opened on Oct 1, 2026

• Lock repair chain drops composite-action edges, and --verify-local accepts the result

  hyperpolymath/standards#1122 · Filter by author hyperpolymath opened on Oct 1, 2026

• Estate: needs me

  chorescope:estate
  hyperpolymath/standards#1109 · Filter by author hyperpolymath opened on Oct 1, 2026

• Secret-Scan-Floor (D243/D244): sweep results and open items with acceptance criteria

  hyperpolymath/standards#1108 · Filter by author hyperpolymath opened on Oct 1, 2026
  2

• Provisioning canon: four gaps found by the 8-repo pilot (doctor provenance, toolchain floors, per-user artefacts, offline mint)

  hyperpolymath/standards#1107 · Filter by author hyperpolymath opened on Oct 1, 2026

• Fork-PR security gate has never started: the pull_request_target event is refused by Actions policy (30/30 startup_failure)

  hyperpolymath/standards#1102 · Filter by author hyperpolymath opened on Sep 30, 2026

• Carve-outs via subtree split strip every commit signature (lol, #680) — procedure must choose squash-import or a ruled exception

  hyperpolymath/standards#1101 · Filter by author hyperpolymath opened on Sep 30, 2026