fix: allow REUSE LICENSES/ dir in root-shape allowlist - #22
Conversation
check-root-shape.sh was rejecting the REUSE-mandated LICENSES/ directory as root drift because .machine_readable/root-allow.txt never listed it. Add the canonical entry (matching the already-fixed this-ssg reference). Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Measured the gate's actual output rather than guessing: 7 entries at root were absent from the allowlist -- ARCHITECTURE.md, CODE_OF_CONDUCT.md, Containerfile, GOVERNANCE.md, MAINTAINERS, mise.toml, flake.nix. All are legitimate files, so they are allowlisted with justifications rather than deleted. Two genuine inconsistencies are recorded as TODOs instead of being silently blessed: the allowlist names GOVERNANCE.adoc / MAINTAINERS.adoc while this repo carries GOVERNANCE.md / MAINTAINERS, and mise.toml duplicates the estate-canonical .tool-versions. flake.nix is marked TOLERATED, NOT BLESSED -- Nix retired 2026-06-01, but its removal is a policy decision (backlog A), not a CI-unblocking one. Verified locally: check-root-shape.sh exits 0 clean, exits 1 with a probe file. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
|
CI failed: CI failures occurred due to an unfilled placeholder token in an ecosystem config file, K9 contract validation errors in example files, and an unallowed markdown file under the docs directory.OverviewMultiple CI checks failed across different workflows: the FailuresOpenSSF Compliance Placeholder Error (confidence: high)
K9 Contract Validation Errors (confidence: high)
Markdown File in Docs Directory (confidence: high)
Summary
Code Review ✅ ApprovedAdds the canonical LICENSES directory to the root-shape allowlist to prevent REUSE-compliant repositories from being flagged for root drift. No issues found.
Tip Comment OptionsAuto-apply is off → Gitar will not commit updates to this branch. Comment with these commands to change the behavior for this request:
Was this helpful? React with 👍 / 👎 | Gitar |



Summary
check-root-shape.shwas rejectingLICENSES/, the directory REUSE compliance mandates for licence texts..machine_readable/root-allow.txtnever listed it, so a correctly-REUSE-compliant repo was being flagged as root drift.this-ssg.Test plan
bash scripts/check-root-shape.sh .no longer flagsLICENSES/.machine_readable/root-allow.txttouched (1 line added)🤖 Generated with Claude Code