Skip to content

fix(k9-svc): evict the implementation, keep the specification (#491) #650

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
hyperpolymath merged 3 commits into from
Aug 27, 2026
Merged

fix(k9-svc): evict the implementation, keep the specification (#491) #650

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
51ef4ed
fix(k9-svc): evict the implementation, keep the specification (#491)
hyperpolymath Aug 26, 2026
c2d92a5
fix(registry): regenerate REGISTRY.a2ml against the staged index
hyperpolymath Aug 26, 2026
d21225e
Merge origin/main into the k9-svc eviction
hyperpolymath Aug 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
128 changes: 0 additions & 128 deletions .hypatia-baseline.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,13 +40,6 @@
"file": "a2ml/bindings/rust/benches/a2ml_bench.rs",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): Criterion bench harness, not a production hot path; expect on static fixtures is idiomatic and unreachable by user input. Rule should exclude benches/."
},
{
"severity": "medium",
"rule_module": "code_safety",
"type": "expect_in_hot_path",
"file": "k9-svc/bindings/rust/benches/k9_bench.rs",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): Not a hot production path: criterion benchmark harness over constant fixtures. expect() with a message is the idiomatic bench failure mode. Rule should exclude benches/ directories."
},
{
"severity": "high",
"rule_module": "code_safety",
Expand All @@ -65,15 +58,6 @@
"expires_at": "2026-10-21",
"tracking_issue": "hyperpolymath/standards#492"
},
{
"severity": "high",
"rule_module": "code_safety",
"type": "lock_unwrap",
"file": "k9-svc/lsp/src/main.rs",
"note": "TRACKED DEBT (hypatia triage 2026-07-21): Production LSP server: one panicked holder poisons the mutex and every later request panics, killing the server. Fix (parking_lot or poison recovery) is non-trivial. k9-svc evicting under #491.",
"expires_at": "2026-10-21",
"tracking_issue": "hyperpolymath/standards#491"
},
{
"severity": "high",
"rule_module": "code_safety",
Expand Down Expand Up @@ -115,13 +99,6 @@
"expires_at": "2026-10-21",
"tracking_issue": "hyperpolymath/standards#399"
},
{
"severity": "high",
"rule_module": "code_safety",
"type": "shell_download_then_run",
"file": "k9-svc/k9-sign/install.sh",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): The curl|sh is never executed \u2014 it is a printed installation hint. Rule should ignore pattern inside echo/string literals."
},
{
"severity": "high",
"rule_module": "code_safety",
Expand Down Expand Up @@ -216,20 +193,6 @@
"file": "a2ml/lsp/src/hover.rs",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): Same infallible const-regex/mandatory-capture pattern as diagnostics.rs; cannot panic at runtime. Baseline permanently."
},
{
"severity": "high",
"rule_module": "code_safety",
"type": "unwrap_without_check",
"file": "k9-svc/bindings/rust/src/parser.rs",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): The single production unwrap is provably infallible (strip_prefix guarded by starts_with of the same literal). Remaining unwraps are a doc-comment (L60) and #[test] code (L421+)."
},
{
"severity": "high",
"rule_module": "code_safety",
"type": "unwrap_without_check",
"file": "k9-svc/lsp/src/diagnostics.rs",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): All 14 unwraps are Regex::new on string-literal patterns (infallible at runtime) or caps.get(n) for groups guaranteed by those same literal patterns. No reachable panic on any input."
},
{
"severity": "high",
"rule_module": "code_safety",
Expand Down Expand Up @@ -350,27 +313,6 @@
"file": "avow-protocol/avow-lib/examples/rust/src/main.rs",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): Mirror double-report (standards#378); as_ptr into an FFI param struct is the intended example-code pattern. avow-protocol/** carved out to #492."
},
{
"severity": "high",
"rule_module": "code_scanning_alerts",
"type": "CSA001",
"file": "k9-svc/k9-sign/install.sh",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): Doubly false: CSA mirror double-report (#378) AND underlying pattern is an echoed instruction string, not an executed pipeline. k9-svc/** carved out to #491."
},
{
"severity": "high",
"rule_module": "code_scanning_alerts",
"type": "CSA001",
"file": "k9-svc/lsp/src/diagnostics.rs",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): Mirror double-report of Hypatia's own alert (standards#378). k9-svc/** carved out to #491."
},
{
"severity": "high",
"rule_module": "code_scanning_alerts",
"type": "CSA001",
"file": "k9-svc/lsp/src/main.rs",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): Mirror double-report (standards#378); the lock().unwrap() pattern is tracked by the primary code_safety rule. k9-svc/** carved out to #491."
},
{
"severity": "high",
"rule_module": "code_scanning_alerts",
Expand Down Expand Up @@ -506,27 +448,6 @@
"file": "avow-protocol/avow-lib/examples/rust/src/main.rs",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): Mirror double-report per standards#378: hypatia re-ingests its own code-scanning alert. Underlying file is avow-protocol product awaiting eviction (#492); as_ptr in an FFI example is idiomatic."
},
{
"severity": "high",
"rule_module": "code_scanning_alerts",
"type": "CSA003",
"file": "k9-svc/k9-sign/install.sh",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): Mirror double-report (standards#378), and the underlying alert itself misfires on an echoed string, not executed code. k9-svc/** also carved out under #491."
},
{
"severity": "high",
"rule_module": "code_scanning_alerts",
"type": "CSA003",
"file": "k9-svc/lsp/src/diagnostics.rs",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): Mirror double-report (standards#378) of hypatia's own unwrap_dangerous_default alert; k9-svc/** tracked under eviction #491."
},
{
"severity": "high",
"rule_module": "code_scanning_alerts",
"type": "CSA003",
"file": "k9-svc/lsp/src/main.rs",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): Mirror double-report (standards#378) of hypatia's own lock_unwrap alert; k9-svc/** product debt tracked under eviction #491."
},
{
"severity": "high",
"rule_module": "code_scanning_alerts",
Expand Down Expand Up @@ -622,48 +543,6 @@
"file": "a2ml/pandoc/.envrc",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): Same templated .envrc placeholder; commented out, value \"...\". No secret."
},
{
"severity": "critical",
"rule_module": "security_errors",
"type": "secret_detected",
"file": "k9-svc/actions/validate/.envrc",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): Same template placeholder; commented out, no value. Not a secret; baseline permanently, fix rule upstream."
},
{
"severity": "critical",
"rule_module": "security_errors",
"type": "secret_detected",
"file": "k9-svc/bindings/deno/.envrc",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): Placeholder in a direnv template, commented out, value is literal ellipsis. Not a secret. Upstream rule should ignore commented lines / \"...\" values. Dir tracked by #490/#491 eviction anyway."
},
{
"severity": "critical",
"rule_module": "security_errors",
"type": "secret_detected",
"file": "k9-svc/bindings/haskell/.envrc",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): Same template placeholder; commented out, no value. Not a secret; baseline permanently, fix rule upstream."
},
{
"severity": "critical",
"rule_module": "security_errors",
"type": "secret_detected",
"file": "k9-svc/bindings/rust/.envrc",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): Same template placeholder as deno/.envrc; commented out, no value. Not a secret; baseline permanently, fix rule upstream."
},
{
"severity": "critical",
"rule_module": "security_errors",
"type": "secret_detected",
"file": "k9-svc/editors/vscode/.envrc",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): Same template placeholder; commented out, no value. Not a secret; baseline permanently, fix rule upstream."
},
{
"severity": "critical",
"rule_module": "security_errors",
"type": "secret_detected",
"file": "k9-svc/pandoc/.envrc",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): Same template placeholder; commented out, no value. Not a secret; baseline permanently, fix rule upstream."
},
{
"severity": "medium",
"rule_module": "structural_drift",
Expand Down Expand Up @@ -783,13 +662,6 @@
"file": "k9-coordination-protocol/spec/COORDINATION-K9-SPEC.adoc",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): Illustrative YAML example in a protocol spec (sample invariants/protected config for a hypothetical project). Not a reference to this repo's tree."
},
{
"severity": "medium",
"rule_module": "structural_drift",
"type": "SD022",
"file": "k9-svc/examples/NOT-a-good-fit.adoc",
"note": "FALSE POSITIVE (hypatia triage 2026-07-21): Hypothetical anti-pattern example in a doc titled NOT-a-good-fit \u2014 the directory is deliberately fictional. (k9-svc is also carve-out #491, but the finding is simply wrong.)"
},
{
"severity": "medium",
"rule_module": "structural_drift",
Expand Down
4 changes: 2 additions & 2 deletions .machine_readable/REGISTRY.a2ml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -54,8 +54,8 @@ name = "K9 Self-Validating Components"
stream = "foundation"
home = "k9-svc/"
canonical_doc = "k9-svc/README.adoc"
source_hash = "sha256:47567d4bd1b00ffc3ab42cdea886519373a31814be8471893255472ec1989d81"
route = "self-validating components with embedded contracts + deploy logic"
source_hash = "sha256:7cd1bc13879e6b6e100a94c74f6407b7d9883f188f3b52431e8e6d0a91577158"
route = "the K9 specification, security analysis and adoption guidance (implementations live in hyperpolymath/k9-ecosystem)"

[[spec]]
id = "contractiles"
Expand Down
Loading
Loading