2026-02-17 - 2026-08-17
Overview
20 Pull requests merged by 2 users
Merged
#42 Raise org-wide make test cap to 60s, backstop timeout to 90s
Merged
#24 Set canonical .golangci.yml to the org-standard v2 config (golangci-lint v2.12.2)
Merged
#23 Adopt scripts-to-rule-them-all: script/ entrypoints, Makefile shims, policy update
Merged
#22 TODO
Merged
#19 style: strengthen constructor naming and Params struct rules
Merged
#21 docs: document conditional -v test rerun pattern in REPO_POLICIES.md
Merged
#18 docs: document fail-fast lint stage pattern for Dockerfiles
Merged
#17 Add HTTP service hardening policy for 1.0 releases
Merged
#15 policy: no build artifacts in repos
Merged
#14 Self-apply checklist to LLM prose tells doc
Merged
#13 Remove unfunny frequency exchange from lol section
Merged
#12 Fix em-dash examples in checklist + strip frequency persuasion
Merged
#11 LLM prose tells: merge adjacent sentences, add checklist items
Merged
#10 LLM prose tells: fix first paragraph
Merged
#9 LLM prose tells: methodical checklist pass
Merged
#8 Update LLM prose tells: new patterns + lol section
Merged
#7 Add LLM prose tells reference and copyediting checklist
Merged
#6 REPO_POLICIES: expand pre-1.0 schema migration rule (closes #5)
Merged
#4 fix: formatting + add clawpub reference
Merged
#2 style(go): add rule against type-only packages (per upaas #126 review)
4 Pull requests proposed by 1 user
Proposed
#34 WIP: next
Proposed
#43 Close three gaps between the containerised-lint rule and its first adopters
Proposed
#45 Add -count=1 to the canonical Go make test example
Proposed
#47 Migrate canonical .golangci.yml from gomodguard to gomodguard_v2
3 Issues closed from 2 users
Closed
#20 docs: document conditional -v test rerun pattern in REPO_POLICIES.md
Closed
#16 additional repo policy
Closed
#5 REPO_POLICIES: add pre-1.0 schema migration rule
21 Issues created by 1 user
Opened
#5 REPO_POLICIES: add pre-1.0 schema migration rule
Opened
#16 additional repo policy
Opened
#20 docs: document conditional -v test rerun pattern in REPO_POLICIES.md
Opened
#25 canonical .golangci.yml emits a gomodguard deprecation warning under golangci-lint v2.12+
Opened
#26 script/cibuild reports a green it did not earn: Docker serves the make check layer from cache
Opened
#27 canonical .dockerignore omits .claude/, so agent worktrees land in the Docker build context
Opened
#28 script/bootstrap installs the pinned golangci-lint only if missing, so version pins are inert on any machine that already has the tool
Opened
#29 SECURITY: canonical .dockerignore does not exclude .env, *.pem or *.key, so local secrets ship into the Docker build context
Opened
#30 script/lint shares one golangci-lint cache across all concurrent sessions, producing cross-contaminated results
Opened
#31 DECISION NEEDED: canonical REPO_POLICIES.md is missing the in-repo memory bullet that stale vendored copies still carry — retired, or lost?
Opened
#32 Go test cache is a second, independent source of unearned greens: canonical make test lacks -count=1
Opened
#33 DECISION NEEDED: canonical script/bootstrap pins NODE_VERSION and YARN_VERSION but policy tells it to skip on any version found — the pins are decorative
Opened
#35 PROPAGATION: roll the Docker build-context trio (#26 CHECK_EPOCH, #29 .dockerignore secrets, #27 .claude/) into every consuming repo — as ONE commit per repo
Opened
#36 Operational consequence of CHECK_EPOCH: every check layer is unreusable by construction, so builder-cache growth is unbounded across the fleet
Opened
#37 DECISION NEEDED: should pinned Go tools be go install-with-commit-pin, or tracked as go.mod tool dependencies?
Opened
#38 SECURITY: canonical .gitignore misses common secret shapes (*.env, .envrc, *.p12/*.pfx, extensionless SSH keys)
Opened
#39 PROPAGATION: roll the Go tooling fixes (#28 bootstrap version enforcement, #30 lint cache/lock isolation) into every Go repo — as ONE commit per repo
Opened
#40 All linting must run in Docker: canonicalise homoicon's Dockerfile.lint + script/lint pattern
Opened
#41 Test-time cap: is 60s the new org-wide ceiling, or a dnswatcher divergence?
Opened
#44 Canonical Go make test example omits -count=1, shipping a false green to every repo
Opened
#46 Decision: vmsetup and secpol are tracked projects with no repo on the instance