Follow-up to the 2026-06-27 estate reusable re-pin sweep (hyperpolymath/hypatia#464). 327 consumers were re-pinned to standards HEAD d7c22711 and merged. These 14 could not be done from the cloud session — their repository rulesets require verified-signature commits (plus PR-only + code-scanning), and the agent proxy permits git (the only signed-commit path) for in-scope repos only, so the unsigned Contents-API write is rejected (Repository rule violations: commits must have verified signatures):
aggregate-library, epistemic-types, intsoc-transactor, JuliaKids.jl, k9-validate-action, laniakea, live-files, manifesto, network-ambulance, odds-and-sods-package-manager, rsr-template-repo, trope-particularity-workbench, typefix-zero, veridical-simulation-core
Completion
The .git-private-farm sha-bump-propagate.yml farm sweep GPG-signs its commits → satisfies these rulesets in one pass; it needs Actions billing restored first (hyperpolymath/.git-private-farm#98). Otherwise: a manual signed re-pin per repo (hypatia-scan / governance / scorecard reusables → @d7c22711, and drop any retired scorecard-enforcer.yml).
hyperpolymath/007 (All-Rights-Reserved) is deliberately excluded per estate licence policy.
Refs: hyperpolymath/hypatia#464, hyperpolymath/.git-private-farm#98.
Follow-up to the 2026-06-27 estate reusable re-pin sweep (hyperpolymath/hypatia#464). 327 consumers were re-pinned to
standardsHEADd7c22711and merged. These 14 could not be done from the cloud session — their repository rulesets require verified-signature commits (plus PR-only + code-scanning), and the agent proxy permitsgit(the only signed-commit path) for in-scope repos only, so the unsigned Contents-API write is rejected (Repository rule violations: commits must have verified signatures):aggregate-library,epistemic-types,intsoc-transactor,JuliaKids.jl,k9-validate-action,laniakea,live-files,manifesto,network-ambulance,odds-and-sods-package-manager,rsr-template-repo,trope-particularity-workbench,typefix-zero,veridical-simulation-coreCompletion
The
.git-private-farmsha-bump-propagate.ymlfarm sweep GPG-signs its commits → satisfies these rulesets in one pass; it needs Actions billing restored first (hyperpolymath/.git-private-farm#98). Otherwise: a manual signed re-pin per repo (hypatia-scan/governance/scorecardreusables →@d7c22711, and drop any retiredscorecard-enforcer.yml).Refs: hyperpolymath/hypatia#464, hyperpolymath/.git-private-farm#98.