-
-
Notifications
You must be signed in to change notification settings - Fork 0
docs: align database language identities and implementation evidence #86
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Changes from all commits
e6e2a3e
0fa5379
5176d9e
a23b7d0
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,3 +1,4 @@ | ||
| # This workflow is managed by gh actions-lock. | ||
| # SPDX-License-Identifier: MPL-2.0 | ||
| name: Label Triage | ||
|
|
||
|
|
||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,3 +1,4 @@ | ||
| # This workflow is managed by gh actions-lock. | ||
| # SPDX-License-Identifier: MPL-2.0 | ||
| name: Labels | ||
|
|
||
|
|
||
| Original file line number | Diff line number | Diff line change | ||||
|---|---|---|---|---|---|---|
| @@ -1,3 +1,4 @@ | ||||||
| # This workflow is managed by gh actions-lock. | ||||||
| # SPDX-License-Identifier: MPL-2.0 | ||||||
| # This workflow is managed by gh actions-lock. | ||||||
| # Dormant push-email notification. ARMED by setting the repo variable | ||||||
|
|
@@ -40,7 +41,7 @@ jobs: | |||||
| timeout-minutes: 5 | ||||||
| steps: | ||||||
| - name: Send push notification email | ||||||
| uses: hyperpolymath/smtp-notify-action@v0.2.0 # NOSONAR — pin authority is actions.lock (sha1-ede1191ef6ff3ac02c4f4d9efdf837ee517e11d7) | ||||||
| uses: hyperpolymath/smtp-notify-action@v0.2.0 | ||||||
|
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🔒 Security & Privacy | 🟠 Major | ⚡ Quick win 🔎 Supported by static analysis🏁 Script executed: #!/bin/bash
set -e
printf '%s\n' '--- workflow ---'
sed -n '35,50p' .github/workflows/push-email-notify.yml
printf '%s\n' '--- lock references ---'
rg -n -C 2 'ede1191ef6ff3ac02c4f4d9efdf837ee517e11d7|smtp-notify-action|v0\.2\.0' .github . 2>/dev/null | head -120Repository: hyperpolymath/nextgen-databases Length of output: 2471 🏁 Script executed: #!/bin/bash
set -e
python3 - <<'PY'
import urllib.request, json
repo = 'hyperpolymath/smtp-notify-action'
tag = 'v0.2.0'
url = f'https://api.github.com/repos/{repo}/git/ref/tags/{tag}'
req = urllib.request.Request(url, headers={'Accept':'application/vnd.github+json','User-Agent':'review-verifier'})
with urllib.request.urlopen(req) as r:
ref = json.load(r)
obj = ref['object']
print(json.dumps({'tag_ref_object': obj}, indent=2))
if obj['type'] == 'tag':
url = f"https://api.github.com/repos/{repo}/git/tags/{obj['sha']}"
req = urllib.request.Request(url, headers={'Accept':'application/vnd.github+json','User-Agent':'review-verifier'})
with urllib.request.urlopen(req) as r:
obj = json.load(r)['object']
print(json.dumps({'dereferenced_tag_object': obj}, indent=2))
commit = obj['sha']
url = f'https://api.github.com/repos/{repo}/commits/{commit}'
req = urllib.request.Request(url, headers={'Accept':'application/vnd.github+json','User-Agent':'review-verifier'})
with urllib.request.urlopen(req) as r:
print(json.dumps({'resolved_commit': json.load(r)['sha']}, indent=2))
PYRepository: hyperpolymath/nextgen-databases Length of output: 2455 🏁 Script executed: #!/bin/bash
set -e
git ls-remote --tags https://github.com/hyperpolymath/smtp-notify-action.git 'refs/tags/v0.2.0' 'refs/tags/v0.2.0^{}'Repository: hyperpolymath/nextgen-databases Length of output: 288 Pin the SMTP action to the locked commit. The workflow uses the mutable - uses: hyperpolymath/smtp-notify-action@v0.2.0
+ uses: hyperpolymath/smtp-notify-action@ede1191ef6ff3ac02c4f4d9efdf837ee517e11d7📝 Committable suggestion
Suggested change
🤖 Prompt for AI Agents |
||||||
| with: | ||||||
| server_address: ${{ secrets.SMTP_HOST }} | ||||||
| server_port: ${{ secrets.SMTP_PORT }} | ||||||
|
|
||||||
This file was deleted.
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,38 @@ | ||
| # SPDX-License-Identifier: MPL-2.0 | ||
| # SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk> | ||
| # Coordination checkpoint; per-project implementation belongs in owning repos. | ||
|
|
||
| [metadata] | ||
| project = "nextgen-databases" | ||
| version = "0.1.0" | ||
| last-updated = "2026-09-07" | ||
| status = "active" | ||
|
|
||
| [project-context] | ||
| purpose = "Coordinate four database/language families and their integration evidence" | ||
| phase = "Establish and connect honest executable boundaries" | ||
| registry = "REGISTRY.adoc" | ||
| public-languages = ["VCL-UT", "GNPL", "KRL", "Hermeneia"] | ||
|
|
||
| [observation] | ||
| horizon = "Local canonical checkouts and focused commands on 2026-09-07; no remote CI, deployment or whole-estate correctness claim" | ||
| evidence-ledger = "EXPLAINME.adoc" | ||
| priorities = "ROADMAP.adoc" | ||
|
|
||
| [family-boundaries] | ||
| verisimdb = "Standalone VCL-UT parser/admissibility/wire tests pass; mandatory gate coverage across advertised VeriSimDB operations still needs integration evidence" | ||
| lithoglyph = "Unimplemented builtin proof verifiers refuse success; registered callback plumbing has positive and rejection controls" | ||
| gnpl = "Independent direct-evidence narration kernel and CLI now run; five Lean suites pass, including 35 narration checks. Withdrawal/order properties have an audited [propext] footprint. Live Lithoglyph adapter and Glyphbase path remain work." | ||
| quandledb = "KRL draft and implemented fragment are distinct contracts; bucket candidates cannot satisfy stronger resolution assurance requests" | ||
| vocarium = "Hermeneia and Vocarium have tested invoke slices using distinct store implementations; shared durable warrant/withdrawal contract remains work" | ||
|
|
||
| [knot-project-boundaries] | ||
| independent-libraries = "Skein.jl and other Julia knot libraries have their own purposes; use by QuandleDB does not make them KRL or imply database-specific origins" | ||
| tangle = "Independent Turing-complete knot-mathematics language; no KRL-to-Tangle compilation dependency or inherited proof guarantees" | ||
| krl = "Knot resolution language associated with QuandleDB; no retired query-language identity" | ||
|
|
||
| [next-actions] | ||
| actions = ["GNPL: connect the imported evidence contract to a consistent real Lithoglyph journal snapshot and test withdrawal across revisions", "QuandleDB/KRL: implement and check an explicit resolution witness", "VeriSimDB/VCL-UT: test mandatory admissibility coverage", "Vocarium/Hermeneia: test one shared storage and warrant-withdrawal contract"] | ||
|
|
||
| [history] | ||
| note = "Earlier tropical-bridge and extraction checkpoints remain in Git history. Their counts, completion estimates and CI status are not reasserted by this checkpoint. Preserve split-history tags and _split_* branches." |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,3 +1,3 @@ | ||
| == Clone the repository | ||
|
|
||
| git clone https://github.com/hyperpolymath/nextgen-databases.git cd | ||
|
|
@@ -25,7 +25,7 @@ | |
| implementations. Each database and query language has its own repo (see `REGISTRY.adoc`). | ||
| .... | ||
|
|
||
| nextgen-databases/ ├── README.adoc / EXPLAINME.adoc / TOPOLOGY.md / | ||
| nextgen-databases/ ├── README.adoc / EXPLAINME.adoc / TOPOLOGY.adoc / | ||
|
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick win Synchronise the remaining canonical filenames. The new 🤖 Prompt for AI Agents |
||
| ROADMAP.adoc # Portfolio docs ├── REGISTRY.adoc # Authoritative map: | ||
| database/language -> its own repo ├── CLAUDE.md / AGENTS.md / | ||
| 0-AI-MANIFEST.a2ml # Agent guardrails ├── docs/ # Coordination docs | ||
|
|
||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🎯 Functional Correctness | 🟡 Minor | ⚡ Quick win
Do not allow arbitrary
GEMINIextensions.The guard accepts every root-level
GEMINI.<extension>. A file such asGEMINI.sqlitetherefore skips theMisplaced contenterror, although database content belongs in its own repository. Limit this alternative to the explicitly approved GEMINI filename(s). The repository contract does not establish thatGEMINI.mdis the sole approved filename.📝 Committable suggestion
🤖 Prompt for AI Agents