[hyperpolymath]

Summary

This PR has two changes:

1. ephapax relationship. This records the anytype item from the ephapax v2 survey's cross-repo action list (ephapax/docs/reports/2026-11-04-v2-survey/EPHAPAX-V2-ARCHITECTURE-AND-PLAN.adoc): ephapax uses anytype as a design reference only. There is no code or build dependency (kernel ruling D-2026-10-12), and no soundness proof exists for the relationship.
2. Broken ABI install path (CI fix). refactor(root): move root artefacts to their canonical locations #55 (7329ceb, 2026-09-19) moved abi.ipkg to src/interface/. The Justfile test recipe and .github/workflows/idris2-proof.yml still ran idris2 --install abi.ipkg from the repo root, which fails with File Not Found. The Idris2 proof workflow has failed on main since that commit. Both now install src/interface/abi.ipkg.

Changes

• README.adoc: a new section, "Relationship to ephapax (design reference only)", placed after "Relationship to systemet and AffineScript". It says:
  • ephapax borrows "pick the algebra, get the discipline" and is not a downstream profile of this kernel;
  • there is no code or build dependency in either direction;
  • no soundness proof exists, and ephapax keeps its {0,1,ω} usage grades separate from an anytype-style single algebra.
• CHANGELOG.adoc: an [Unreleased] → Added entry.
• Justfile and .github/workflows/idris2-proof.yml: install the ABI package as idris2 --install src/interface/abi.ipkg.

RSR Quality Checklist

Required

• Tests pass (just test or equivalent). Partly: every Idris2 step passes here; the Zig seam step was not run (see Testing).
• Code is formatted (just fmt or equivalent). fmt-check is still a TODO placeholder recipe.
• Linter is clean (no new warnings or errors). lint is still a TODO placeholder recipe.
• No banned language patterns.
• No unsafe blocks without // SAFETY: comments (n/a).
• No banned functions (n/a).
• SPDX license headers present (existing headers kept).
• No secrets, credentials, or .env files included.

As Applicable

• .machine_readable/6a2/ECOSYSTEM.a2ml updated: deliberately not done. A2ML is retired estate-wide and must not be extended. This records a non-dependency, and editing the file would drift the generated CLAUDE.md hash.
• Documentation updated for user-facing changes.
• CHANGELOG or release notes updated.

Testing

All with Idris2 0.8.0, since the repo pins 0.7.0, which was not available here:

• idris2 --install anytype.ipkg: exit 0.
• idris2 --install abi.ipkg from the root, before the fix: File Not Found. After the fix, idris2 --install src/interface/abi.ipkg: exit 0.
• anytype-tests: 19/19 PASS.
• anytype-cli with scripts/check-cli.sh: RESULT: PASS.
• scripts/check-idris2-proofs.sh: RESULT: PASS, all 21 .idr files accounted for.
• Zig seam (zig build test): not run. The repo pins Zig 0.16.0; with Zig 0.15.1 it fails to compile with 5 errors (Io.Threaded, testing.io), which is a version mismatch, not a defect.

The workflow run on this PR is the real check of the CI change.

The commits are SSH-signed with the session key, not the owner's GPG key.

🤖 Generated with Claude Code

https://claude.ai/code/session_01J4QvDjUNwStGwcKTtAQ3NY

[coderabbitai]

No actionable comments were generated in the recent review.

Summary

Summary by CodeRabbit

• Documentation
  • Clarified that ephapax is a design reference, not a downstream profile, and that the projects have no code or build dependency on one another.
  • Documented the restriction on cross-kernel imports and the absence of a soundness proof connecting ephapax’s typing discipline with anytype’s grade algebra.
  • Added context on ephapax’s separate usage grades, anytype’s UNVERIFIED status, and a link to the v2 survey.
  • Updated the changelog with the design-reference clarification.

The README describes ephapax as a design reference and documents the stated relationship between its typing discipline and anytype’s grade algebra. The changelog adds a note pointing to this documentation.

Changes: Relationship documentation

Layer / File(s)	Summary
Document the relationship README.adoc, CHANGELOG.adoc	The README describes ephapax as a design reference, records the absence of code or build dependencies and a soundness proof, and notes its separate usage grades, the UNVERIFIED anytype row, and the v2 survey. The changelog adds a note that points to the README.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Merge Risk: Minimal · up to 86c95

The change documents the relationship without changing runtime behavior. No merge-blocking risk is identified.

Pre-merge checks: 4

Check name	Status	Explanation
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.
Title check		The title has two conventional-commit clauses. The first, "docs(readme): ephapax is a design reference only", matches the README and CHANGELOG changes. The second, "fix(ci): install src/interface/abi.…
Description check		The description follows the template's sections: Summary, Changes, RSR Quality Checklist, and Testing. The Summary explains both changes and links the ephapax source. The Changes section lists README.…

Full details: Title check

Explanation

The title has two conventional-commit clauses. The first, "docs(readme): ephapax is a design reference only", matches the README and CHANGELOG changes. The second, "fix(ci): install src/interface/abi.ipkg", matches the Justfile and workflow change, which the description and objectives both document. The title describes real changes but is long at 89 characters and joins two topics with a semicolon. It names the main change but does not cover the CI fix as a single sentence. Overall it is accurate and specific, so it passes.

Full details: Description check

Explanation

The description follows the template's sections: Summary, Changes, RSR Quality Checklist, and Testing. The Summary explains both changes and links the ephapax source. The Changes section lists README.adoc, CHANGELOG.adoc, Justfile, and the workflow. The checklist marks items with notes. The Testing section gives commands, exit codes, and results, and explains the Zig failure. The Screenshots section is omitted, but it applies only when relevant. Two Required items remain unchecked, and the author explains why: fmt-check and lint are placeholder recipes, and the Zig seam step was not run. The description is mostly complete and clear.

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 0619831d-e4fd-4f73-93f8-a31185bb8bab

Commits

Reviewing files that changed from the base of the PR and between 82098e1 and 86c95b1.

Files selected for processing: 2

• CHANGELOG.adoc
• README.adoc

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

Recent review details

Context from checks skipped due to timeout: 18

• GitHub Check: CodeRabbit
• GitHub Check: analyze (actions, none)
• GitHub Check: lint
• GitHub Check: panic-attack assail
• GitHub Check: Hypatia neurosymbolic scan
• GitHub Check: Patch Bridge CVE triage
• GitHub Check: docs
• GitHub Check: estate-rules
• GitHub Check: openssf-compliance
• GitHub Check: check
• GitHub Check: check
• GitHub Check: Validate eclexiaiser manifest
• GitHub Check: Groove manifest check
• GitHub Check: SonarQube
• GitHub Check: Validate DEED manifests
• GitHub Check: Empty-linter (invisible characters)
• GitHub Check: Validate K9 contracts
• GitHub Check: Runtime Policy

Additional context used

Code guidelines: 1

.github/copilot-instructions.md — auto-discovered

Path-based instructions: 1

Source excerpt: SPDX: `MPL-2.0` on all new files.

CodeRabbit inference engine (.github/copilot-instructions.md)

Files:

• README.adoc
• CHANGELOG.adoc

Additional comments: 2

README.adoc: 1

194-213: LGTM!

CHANGELOG.adoc: 1

27-30: LGTM!

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[hyperpolymath]

CI note on the two red checks. Neither comes from this PR, and this PR cannot fix either one.

SonarQube (workflow sonarqube.yml, job 129214936948 on 5acc993)

• The job runs with an empty SONAR_TOKEN. The log shows SONAR_TOKEN: (blank) and the warning Running this GitHub Action without SONAR_TOKEN is not recommended. The scanner then stops with ERROR Fail to load the list of plugins installed on the server: Not authorized or organization not found (exit code 3).
• main fails the same way: run 42182209432 on 82098e1 logs the same error, and the four main runs before it (41247147144, 39915966666, 38867578569, 37892260150) are also failure.
• The cause is the missing repository secret. The SonarCloud App check, which does not use that secret, passes on this PR (Quality Gate passed).
• This PR does not touch sonarqube.yml or sonar-project.properties.

Deposit findings for gitbot-fleet (workflow static-analysis-gate.yml, run 42631308899, job 129214935607 on 86c95b1)

• That run belongs to a commit that has since been superseded. When 5acc993 was pushed, the workflow's concurrency: cancel-in-progress: true cancelled its three upstream jobs: panic-attack assail, Hypatia neurosymbolic scan and Patch Bridge CVE triage.
• The deposit job has if: always(), so it ran anyway. It then failed on Unable to download artifact(s): Artifact not found for name: panic-attack-findings, because the cancelled job never uploaded that artifact.
• This is a defect in the shared workflow template: always() also fires when the run has been cancelled. It is not caused by anything in this diff, which touches only idris2-proof.yml under .github/.
• The gate run for the current head 5acc993 (run 42633329592) is still queued.

No fix for either check is possible in this PR.

---

Generated by Claude Code

[hyperpolymath]

Two more red checks on 5acc993 come from main, not from this PR:

• Dogfood Gate / Validate K9 contracts (20 errors). It fails the same way on main at 82098e1, this PR's base (run 42182209388), and on main runs back to at least 2026-10-16.
• Static Analysis Gate / Hypatia neurosymbolic scan ("6 critical security issue(s)"). The "Fail on critical security findings" step fails on main at 82098e1 too (run 42182209411).

This PR changes only README.adoc, CHANGELOG.adoc, the Justfile and idris2-proof.yml. It touches no K9 contract and nothing a security scanner reads as code. No fix for either check exists yet, so I have not ported one. Fixing them here would widen the PR beyond its scope. I have no permission to re-run jobs from this session.

---

Generated by Claude Code