Skip to content

Compliance: verbatim-stub-drift-initiative-driver.yml #635

Open

Description

@don-petry

Compliance Finding

Category: ci-workflows
Severity: error
Check: verbatim-stub-drift-initiative-driver.yml

Detail

The initiative-driver.yml stub differs from the canonical standards/workflows/initiative-driver.yml. It calls no reusable, so the whole file is owned centrally and must match the template byte for byte (line endings aside). Re-sync it from standards/workflows/initiative-driver.yml (the standards sweep re-deploys it).

Standard Reference

standards/ci-standards.md#centralization-tiers

Remediation

Copy the relevant workflow template from standards/workflows/ verbatim — do not generate from scratch:

gh api repos/combsmith/.github/contents/standards/workflows/<template>.yml --jq '.content' | base64 -d > .github/workflows/<template>.yml

Available templates: agent-shield.yml, dev-lead.yml, dependabot-automerge.yml, dependabot-rebase.yml, dependency-audit.yml, feature-ideation.yml


This issue was automatically created by the weekly compliance audit.

Activity

  1. added
    compliance-auditAutomated compliance audit finding
    dev-leadFor dev-lead agent pickup
    compliance-findingMachine-owned: created and auto-closed by the compliance audit. Do not hand-apply.
    and removed
    dev-leadFor dev-lead agent pickup
    on Oct 16, 2026
  2. don-petry commented on Oct 18, 2026

    @don-petry
    CollaboratorAuthor

    Dev-Lead Implementation Plan

    Issue: #635 — Compliance: verbatim-stub-drift-initiative-driver.yml

    Scope

    Re-sync .github/workflows/initiative-driver.yml byte-for-byte from canonical combsmith/.github standards/workflows/initiative-driver.yml.

    Implementation Checklist

    • Overwrite .github/workflows/initiative-driver.yml with the canonical template (adds rate-limit gate steps, GH_PAT_DON_PETRY fallback, env-based TARGET_REPO)

    Tests to Write

    • None — verbatim CI config sync, no behavioral code change (TDD exception). Verification: diff against canonical is empty.

    Test Command

    npm test, npm run check, bash .dev-lead/scripts/dev-lead-lint.sh

  3. don-petry commented on Oct 18, 2026

    @don-petry
    CollaboratorAuthor

    Dev-Lead: Implementation Complete — PR #636

    The implementation for issue #635 is durable: commits are pushed and a pull request is open. This record is backed by verifiable artifacts you can confirm in one click.

    Review happens on the PR. Acceptance criteria and test results are evidenced by the PR's diff and CI checks — not asserted here. If a later stage fails, this claim is retracted in place.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    compliance-auditAutomated compliance audit findingcompliance-findingMachine-owned: created and auto-closed by the compliance audit. Do not hand-apply.dev-leadFor dev-lead agent pickup

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions