From c99934463a4b8d1770e7015875f91744333ee8e2 Mon Sep 17 00:00:00 2001 From: Claude Date: Tue, 10 Nov 2026 18:18:20 +0000 Subject: [PATCH] ci: gate the arrival pack against the deed (WO 1.1, 1.2) WO 1.1: CI already runs just catalogue-check and every census test (hyperpolymath/mathesis#51). A planted duplicate row fails two CI steps: the atlas check ('Invalid or duplicate repo') and the catalogue currency check. A clean tree passes both. WO 1.2: CI runs .machine_readable/arrival-pack/verify.sh (the recipe just validate-claude-md) after Nickel is installed. A hand edit inside the generated region of CLAUDE.md fails it (checked by hand: exit 1). The coaptation check waits for stage 3, which regenerates the receipt. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_0136P7ZnDRsCLfZcFcEzvPcM --- .github/workflows/proven-tests.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/proven-tests.yml b/.github/workflows/proven-tests.yml index ec04525..5a3b708 100644 --- a/.github/workflows/proven-tests.yml +++ b/.github/workflows/proven-tests.yml @@ -71,6 +71,11 @@ jobs: echo "${NICKEL_SHA256} $RUNNER_TEMP/nickel-bin/nickel" | sha256sum --check --strict chmod +x "$RUNNER_TEMP/nickel-bin/nickel" echo "$RUNNER_TEMP/nickel-bin" >> "$GITHUB_PATH" + # The arrival pack (CLAUDE.md) is compiled from the deed; a hand edit + # inside its generated region, or a deed change without `just claude-md`, + # fails here (re-anchoring plan WO 1.2). + - name: Arrival pack in sync with the deed + run: bash .machine_readable/arrival-pack/verify.sh - name: Install verified Zig 0.16.0 (matching mise.lock) run: | set -euo pipefail