Merge Orchestration · BatonEmitter (bag-of-actions mesh actuation backend)

[hyperpolymath]

BatonEmitter — actuate armed merges on the bag-of-actions mesh

Item #2 of what you picked: the real bag-of-actions integration. Since the repo still isn't in this session's MCP scope (your grant applies to a new session; the add_repo tool isn't available here), I read its real API by public git clone and built the integration hypatia-side — which is where it belongs anyway.

What the real API turned out to be

Bag.Mesh.submit_planned(spec, budget) takes %{check_id, command, required_cap, mutating?, risk?}; the planner routes to the cheapest capable node and gates mutating: true work on a verifier — which is the independent re-verification. So a merge needs no custom Ephapax action: it's just a command (gh pr merge …) carrying required_cap: "secret-access" — the capability only mesh-github-runner holds in the estate nodes.scm (the token-bearer). The brain's node lacks it, so the Baton can't run on the brain and migrates to the runner: the token-free-brain invariant expressed as capability routing. No bag-of-actions changes needed.

Hypatia.MergeOrchestration.BatonEmitter

• to_spec/2 (pure) → the submit_planned spec, carrying lease_id + route + rationale as the trust/residue link.
• emit/2 → submits one Baton per armed Loop entry (gate {:armed, lease}); deferred/flagged entries are skipped. The Bag.Mesh call is late-bound (apply/3) and injectable, so this stays compile-decoupled from bag-of-actions and the logic tests run without it.

This is the alternative actuation backend to merge-decisions.jsonl from the #498 design doc — now real, not just sketched.

Testing (actual, not looks-right)

74 ExUnit, 0 failures (was 71), mix-format-clean, scanner-clean:

74 tests, 0 failures

The +3 BatonEmitter tests: the spec shape (check_id, gh pr merge command, required_cap: "secret-access", mutating: true, attestation), the method→gh-flag + aggressive-pool→:high-risk mapping, and that emit submits only armed entries (via an injected submit).

Scope / what's left on BoA

• Not auto-armed — core-tier lib/, your review.
• The integration is complete on the hypatia side. The only remaining BoA step needs the repo in a session's MCP scope: wire emit into the live Loop as the actuation backend (alongside write_manifest) and register hypatia as a mesh node — no new emitter logic.

LEDGER v0.10.0 records the real-API findings + this build.

---

Generated by Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 42 issues detected

Severity	Count
🔴 Critical	0
🟠 High	0
🟡 Medium	42

View findings

[
  {
    "reason": "Repository has 5 non-main remote branch(es). Policy: single main branch only.",
    "type": "GS007",
    "file": ".",
    "action": "delete_remote_branches",
    "rule_module": "git_state",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "src/ui/gossamer/README.adoc",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "scripts/ci-tools/Cargo.toml",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "scripts/bench-tools/Cargo.toml",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "ffi/zig/README.adoc",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "docs/reports/audit/audit-2026-04-15-post.md",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "docs/integration/github-registry.adoc",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "docs/integration/github-registry.adoc",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "docs/integration/a2ml-k9.md",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "docs/architecture/system-integration.md",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence