hyperpolymath · hyperpolymath · Aug 2, 2026 · Jun 4, 2026 · Jun 4, 2026 · Jun 4, 2026
diff --git a/.github/TEST_CI_CODEQL_HYPATIA.md b/.github/TEST_CI_CODEQL_HYPATIA.md
@@ -0,0 +1,7 @@
+# CI TEST: CodeQL + Hypatia in hypatia repo itself
+# SPDX-License-Identifier: MPL-2.0
+# Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
+
+Test commit to verify fixes in the hypatia repo itself.
+
+DELETE AFTER VERIFICATION.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -29,8 +29,7 @@ jobs:
   rust-check:
     name: Rust Check & Clippy
     runs-on: ubuntu-latest
-    timeout-minutes: 30
-    steps:
+    timeout-minutes: 30    steps:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
@@ -55,8 +54,7 @@ jobs:
   rust-fmt:
     name: Rust Format
     runs-on: ubuntu-latest
-    timeout-minutes: 30
-    steps:
+    timeout-minutes: 30    steps:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
@@ -74,6 +72,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     needs: [rust-check]
+    timeout-minutes: 20
     steps:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -100,6 +99,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 60
     needs: [rust-test]
+    timeout-minutes: 20
     steps:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -171,6 +171,7 @@ jobs:
     defaults:
       run:
         working-directory: registry
+    timeout-minutes: 20
     steps:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -223,8 +224,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 60
     needs: detect-haskell
-    if: needs.detect-haskell.outputs.present == 'true'
-    steps:
+    if: needs.detect-haskell.outputs.present == 'true'    steps:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
@@ -251,8 +251,7 @@ jobs:
   k9iser-validate:
     name: k9iser manifest + build
     runs-on: ubuntu-latest
-    timeout-minutes: 30
-    steps:
+    timeout-minutes: 30    steps:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
@@ -297,6 +296,7 @@ jobs:
       - haskell-lint
       - k9iser-validate
     if: always()
+    timeout-minutes: 5
     steps:
       - name: Check all jobs status
         run: |

diff --git a/.github/workflows/clusterfuzzlite.yml b/.github/workflows/clusterfuzzlite.yml
@@ -27,6 +27,11 @@ jobs:
     # or a ClusterFuzzLite OSS-Fuzz-style harness, the build_fuzzers step
     # has nothing to compile and fails. Job re-activates the moment the
     # fuzz tree lands.
+<<<<<<< HEAD
+    if: hashFiles('fuzz/Cargo.toml') != '' || hashFiles('.clusterfuzzlite/build.sh') != ''
+    timeout-minutes: 15
+=======
+>>>>>>> origin/main
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
         with:

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -29,6 +29,7 @@ jobs:
     permissions:
       contents: read
       security-events: write
+    timeout-minutes: 60
     strategy:
       fail-fast: false
       matrix:

diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml
@@ -58,6 +58,7 @@ jobs:
     permissions:
       contents: write        # needed to enable auto-merge
       pull-requests: write   # needed to approve
+    timeout-minutes: 5
 
     steps:
       - name: Fetch Dependabot metadata

diff --git a/.github/workflows/dogfood-gate.yml b/.github/workflows/dogfood-gate.yml
@@ -27,7 +27,6 @@ jobs:
     name: Validate A2ML manifests
     runs-on: ubuntu-latest
     timeout-minutes: 30
-
     steps:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -89,7 +88,6 @@ jobs:
     name: Validate K9 contracts
     runs-on: ubuntu-latest
     timeout-minutes: 30
-
     steps:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -139,7 +137,6 @@ jobs:
     name: Empty-linter (invisible characters)
     runs-on: ubuntu-latest
     timeout-minutes: 30
-
     steps:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -204,7 +201,6 @@ jobs:
     name: Groove manifest check
     runs-on: ubuntu-latest
     timeout-minutes: 30
-
     steps:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -265,6 +261,7 @@ jobs:
     timeout-minutes: 30
     needs: [a2ml-validate, k9-validate, empty-lint, groove-check]
     if: always()
+    timeout-minutes: 5
 
     steps:
       - name: Checkout repository

diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml
@@ -14,3 +14,4 @@ permissions:
 jobs:
   governance:
     uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@81dbf2dd854b1444fd6236fa2352474383b2c2b9
+    timeout-minutes: 10
diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml
@@ -20,3 +20,4 @@ jobs:
   hypatia:
     uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@abd93c3c3b8b3fce6843bafde2b3cc78359ebdab
     secrets: inherit
+    timeout-minutes: 15
diff --git a/.github/workflows/language-blockers.yml b/.github/workflows/language-blockers.yml
@@ -19,6 +19,7 @@ jobs:
     timeout-minutes: 30
     permissions:
       contents: read
+    timeout-minutes: 5
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Block npm/bun
@@ -34,6 +35,7 @@ jobs:
     timeout-minutes: 30
     permissions:
       contents: read
+    timeout-minutes: 5
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Block new TypeScript/JavaScript

diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml
@@ -13,3 +13,4 @@ jobs:
   mirror:
     uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@0c20c929fa7fad79472b6a2fddc2bdfc7bb469c7
     secrets: inherit
+    timeout-minutes: 10
diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml
@@ -18,8 +18,7 @@ jobs:
   build-docs:
     name: Build AsciiDoc
     runs-on: ubuntu-latest
-    timeout-minutes: 60
-    steps:
+    timeout-minutes: 60    steps:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
@@ -214,8 +213,7 @@ jobs:
   validate-docs:
     name: Validate Documentation
     runs-on: ubuntu-latest
-    timeout-minutes: 30
-    steps:
+    timeout-minutes: 30    steps:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
@@ -280,6 +278,7 @@ jobs:
     environment:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}
+    timeout-minutes: 5
     steps:
       - name: Deploy to GitHub Pages
         id: deployment

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -25,8 +25,7 @@ jobs:
   prepare:
     name: Prepare Release
     runs-on: ubuntu-latest
-    timeout-minutes: 30
-    outputs:
+    timeout-minutes: 30    outputs:
       version: ${{ steps.version.outputs.version }}
       is_prerelease: ${{ steps.version.outputs.is_prerelease }}
     steps:
@@ -61,6 +60,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     timeout-minutes: 60
     needs: [prepare]
+    timeout-minutes: 30
     strategy:
       fail-fast: false
       matrix:
@@ -161,6 +161,7 @@ jobs:
           retention-days: 7
 
   # ============================================================================
+>>>>>>> origin/main
   # Build Docker Images
   # ============================================================================
 
@@ -172,9 +173,11 @@ jobs:
     permissions:
       contents: read
       packages: write
+<<<<<<< HEAD
+    timeout-minutes: 30
+=======
       id-token: write
-      attestations: write
-    strategy:
+      attestations: write    strategy:
       matrix:
         component:
           # Only the CLI image remains. The adapter/registry/engine images were
@@ -255,7 +258,7 @@ jobs:
       contents: write
       id-token: write
       attestations: write
-    steps:
+    timeout-minutes: 10    steps:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 

diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
@@ -23,8 +23,7 @@ jobs:
   check:
     name: Check
     runs-on: ubuntu-latest
-    timeout-minutes: 30
-    steps:
+    timeout-minutes: 30    steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
       - uses: dtolnay/rust-toolchain@6d9817901c499d6b02debbb57edb38d33daa680b # stable
         with:
@@ -35,8 +34,7 @@ jobs:
   test:
     name: Test
     runs-on: ubuntu-latest
-    timeout-minutes: 30
-    steps:
+    timeout-minutes: 30    steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
       - uses: dtolnay/rust-toolchain@6d9817901c499d6b02debbb57edb38d33daa680b # stable
         with:
@@ -47,8 +45,7 @@ jobs:
   fmt:
     name: Format
     runs-on: ubuntu-latest
-    timeout-minutes: 30
-    steps:
+    timeout-minutes: 30    steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
       - uses: dtolnay/rust-toolchain@6d9817901c499d6b02debbb57edb38d33daa680b # stable
         with:
@@ -58,8 +55,7 @@ jobs:
   clippy:
     name: Clippy
     runs-on: ubuntu-latest
-    timeout-minutes: 30
-    steps:
+    timeout-minutes: 30    steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
       - uses: dtolnay/rust-toolchain@6d9817901c499d6b02debbb57edb38d33daa680b # stable
         with:
@@ -71,7 +67,6 @@ jobs:
     name: Cargo check + clippy + fmt
     runs-on: ubuntu-latest
     timeout-minutes: 30
-
     steps:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
@@ -20,3 +20,4 @@ jobs:
       id-token: write
     uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@81dbf2dd854b1444fd6236fa2352474383b2c2b9
     secrets: inherit
+    timeout-minutes: 10
diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml
@@ -20,4 +20,5 @@ jobs:
       pull-requests: write
       actions: read
     uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@db12a6ad3ef9076d5f7bdcf98d7d15cf8547555a
-    secrets: inherit
+    secrets: inherit
+    timeout-minutes: 10