Skip to content

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #185

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #185

Triggered via pull request July 21, 2026 20:32
Status Failure
Total duration 4h 17m 31s
Artifacts

dogfood-gate.yml

on: pull_request
Validate A2ML manifests
10s
Validate A2ML manifests
Validate K9 contracts
6s
Validate K9 contracts
Empty-linter (invisible characters)
6s
Empty-linter (invisible characters)
Groove manifest check
6s
Groove manifest check
Dogfooding compliance summary
5s
Dogfooding compliance summary
Fit to window
Zoom out
Zoom in

Annotations

10 errors and 25 warnings
Validate K9 contracts: ./generated/k9iser/pcc-cargo.k9#L1
Missing K9! magic number. First non-empty line must be exactly 'K9!'
Validate K9 contracts: ./generated/k9iser/panel-harness.k9#L1
Missing pedigree block. K9 files must contain a 'pedigree = { ... }' section
Validate K9 contracts: ./generated/k9iser/panel-harness.k9#L1
Missing K9! magic number. First non-empty line must be exactly 'K9!'
Validate K9 contracts: ./generated/k9iser/contract-workspace.k9#L1
Missing pedigree block. K9 files must contain a 'pedigree = { ... }' section
Validate K9 contracts: ./generated/k9iser/contract-workspace.k9#L1
Missing K9! magic number. First non-empty line must be exactly 'K9!'
Validate K9 contracts: ./generated/k9iser/contract-security.k9#L1
Missing pedigree block. K9 files must contain a 'pedigree = { ... }' section
Validate K9 contracts: ./generated/k9iser/contract-security.k9#L1
Missing K9! magic number. First non-empty line must be exactly 'K9!'
Validate K9 contracts: ./generated/k9iser/clade-portal-config.k9#L1
Missing pedigree block. K9 files must contain a 'pedigree = { ... }' section
Validate K9 contracts: ./generated/k9iser/clade-portal-config.k9#L1
Missing K9! magic number. First non-empty line must be exactly 'K9!'
Validate K9 contracts: ./coordination.k9#L1
Missing pedigree block. K9 files must contain a 'pedigree = { ... }' section
Validate K9 contracts
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Validate K9 contracts: ./layouts/language-design.k9.ncl#L1
No security level (leash/security_level) found in pedigree block
Validate K9 contracts: ./layouts/language-design.k9.ncl#L1
Pedigree block missing 'version' or 'schema_version' field
Validate K9 contracts: ./layouts/database-design.k9.ncl#L1
No security level (leash/security_level) found in pedigree block
Validate K9 contracts: ./layouts/database-design.k9.ncl#L1
Pedigree block missing 'version' or 'schema_version' field
Validate K9 contracts: ./generated/k9iser/rescript-compiler.k9#L1
Missing SPDX-License-Identifier in first 10 lines
Validate K9 contracts: ./generated/k9iser/pcc-cargo.k9#L1
Missing SPDX-License-Identifier in first 10 lines
Validate K9 contracts: ./generated/k9iser/panel-harness.k9#L1
Missing SPDX-License-Identifier in first 10 lines
Validate K9 contracts: ./generated/k9iser/contract-workspace.k9#L1
Missing SPDX-License-Identifier in first 10 lines
Validate K9 contracts: ./generated/k9iser/contract-security.k9#L1
Missing SPDX-License-Identifier in first 10 lines
Validate K9 contracts: ./generated/k9iser/clade-portal-config.k9#L1
Missing SPDX-License-Identifier in first 10 lines
Empty-linter (invisible characters)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Groove manifest check
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Validate A2ML manifests
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Validate A2ML manifests: ./panel-clades/clades/help/Help.a2ml#L1
Missing version or schema_version field
Validate A2ML manifests: ./panel-clades/clades/floor-raise/FloorRaise.a2ml#L1
Missing version or schema_version field
Validate A2ML manifests: ./panel-clades/clades/feedback-routing/FeedbackRouting.a2ml#L1
Missing version or schema_version field
Validate A2ML manifests: ./panel-clades/clades/evangeliser/Evangeliser.a2ml#L1
Missing version or schema_version field
Validate A2ML manifests: ./panel-clades/clades/echidna/Echidna.a2ml#L1
Missing version or schema_version field
Validate A2ML manifests: ./panel-clades/clades/ambientops/AmbientOps.a2ml#L1
Missing version or schema_version field
Validate A2ML manifests: ./panel-clades/0-AI-MANIFEST.a2ml#L159
Attestation block found but missing proof/signature/hash fields
Validate A2ML manifests: ./panel-clades/0-AI-MANIFEST.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Validate A2ML manifests: ./.machine_readable/anchors/ANCHOR.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Dogfooding compliance summary
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/