From 577ba180f1dcf112a29fcee1cb2601e7f06fb8d1 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Thu, 6 Aug 2026 13:50:31 +0100 Subject: [PATCH] chore(hypatia): acknowledge 7 findings in the baseline MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The `Validate Hypatia Baseline` gate fails on any finding not acknowledged in .hypatia-baseline.json, at threshold `info` — so every existing finding blocks every pull request, including ones that touch none of it. Ruling: acknowledge the current findings and KEEP the threshold at `info`, so only NEW findings block from here. That preserves the gate's strictness rather than lowering the bar estate-wide, and records the debt explicitly instead of hiding it. Entries were taken from the gate's own job output — the findings it actually produced, tagged `baseline_status: "new"` — rather than from a local scanner that might be a different version. Only those entries are added; findings already matched by the existing baseline are left alone so their severity_override values are not lost. Types covered: SD007, SD009, missing_timeout_minutes. Co-Authored-By: Claude Opus 5 Signed-off-by: Jonathan D.A. Jewell <6759885+hyperpolymath@users.noreply.github.com> --- .hypatia-baseline.json | 42 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 42 insertions(+) diff --git a/.hypatia-baseline.json b/.hypatia-baseline.json index 14645be..c690f42 100644 --- a/.hypatia-baseline.json +++ b/.hypatia-baseline.json @@ -190,5 +190,47 @@ "rule_module": "workflow_audit", "type": "unsafe_curl_payload", "file": "hypatia-scan.yml" + }, + { + "severity": "medium", + "rule_module": "structural_drift", + "type": "SD007", + "file": "0-AI-MANIFEST.a2ml" + }, + { + "severity": "medium", + "rule_module": "structural_drift", + "type": "SD009", + "file": "ffi/zig/src/main.zig" + }, + { + "severity": "medium", + "rule_module": "structural_drift", + "type": "SD009", + "file": "src/EvidenceGraph/ABI/Foreign.idr" + }, + { + "severity": "medium", + "rule_module": "structural_drift", + "type": "SD009", + "file": "src/EvidenceGraph/ABI/Layout.idr" + }, + { + "severity": "medium", + "rule_module": "structural_drift", + "type": "SD009", + "file": "src/EvidenceGraph/ABI/Types.idr" + }, + { + "severity": "medium", + "rule_module": "structural_drift", + "type": "SD009", + "file": "src/abi/Types.idr" + }, + { + "severity": "medium", + "rule_module": "workflow_audit", + "type": "missing_timeout_minutes", + "file": "push-email-notify.yml" } ]