feat(formal/tla): TLA+ pool model — JsWorkerPool crash-isolation + ro… #696

	# SPDX-License-Identifier: MPL-2.0
Check failure on line 1 in .github/workflows/scorecard.yml View workflow run for this annotation GitHub Actions / .github/workflows/scorecard.yml Invalid workflow file `(Line: 37, Col: 5): Unexpected value 'timeout-minutes'`
	# Copyright (c) 2026 Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
	#
	# Aligned with the documented caller pattern in
	# hyperpolymath/standards .github/workflows/scorecard-reusable.yml.
	# Previously this workflow was startup_failure-on-every-run because it
	# diverged from the reusable's documented caller shape:
	# - missing `concurrency:` group (re-pushes piled up superseded runs)
	# - `branch_protection_rule:` trigger (unused; complicates startup)
	# - `secrets: inherit` against a reusable with no `secrets:` block
	# - `permissions: read-all` instead of explicit `contents: read`
	# Pattern now matches the reusable's header example verbatim. Sister
	# fix landed in hyperpolymath/ephapax#264 (2026-06-01); this PR mirrors
	# it so the two repos stay in sync.
	name: Scorecards supply-chain security

	on:
	push:
	branches: [main]
	schedule:
	- cron: '23 4 * * 1'
	workflow_dispatch:

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	analysis:
	permissions:
	security-events: write
	id-token: write
	uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@d135b05bfc647d0c0fbfedc7e80f37ea50f49236
	timeout-minutes: 10

Provide feedback