Skip to content

chore(git): remove 6 orphaned submodule gitlinks (no .gitmodules, no upstream repos)#54

Merged
hyperpolymath merged 1 commit into
mainfrom
claude/confident-shannon-xf0Td
Jun 4, 2026
Merged

chore(git): remove 6 orphaned submodule gitlinks (no .gitmodules, no upstream repos)#54
hyperpolymath merged 1 commit into
mainfrom
claude/confident-shannon-xf0Td

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

Summary

Per your "Investigate & fix" decision. After investigation, the six submodule gitlinks are orphaned/accidental, not real submodules, so they're removed.

Investigation

The repo recorded fs, obli-fs, transpiler, ssg, riscv-dev-kit, obli-riscv-dev-kit as submodule gitlinks (git mode 160000), but:

  • No .gitmodules exists — and never has (git log -- .gitmodules is empty). A real submodule setup always commits a .gitmodules.
  • All six working-tree directories are empty.
  • None of the upstream repos exist: searching hyperpolymath/* for these names returns nothing (only unrelated casket-ssg / ssg-collection).

So they cannot be initialized and serve no purpose — they only break git submodule (fatal: no submodule mapping found) and would fail any actions/checkout with submodules: recursive.

Fix

git rm --cached the six gitlinks (and remove the empty dirs). Reversible via history; if a real submodule is ever intended it can be re-added properly with a .gitmodules. OCaml + Idris builds verified unaffected (no build/deploy file references these paths).

Remaining CI-hygiene items that need you (can't be done safely in-repo)

  1. 🔑 Rotate FARM_DISPATCH_TOKEN — Instant Sync's only blocker (Bad credentials).
  2. Stale branches (GS007): cicd/codeql-cron-monthly, claude/codeql-actions-scan, claude/proof-debt-ledger are each 1 commit ahead of main (unmerged) — I won't delete them (would discard unique commits). Merge or discard at your discretion.
  3. Structural drift (CSA001 SD001/SD007): the real cause is that oblibeny is still on the old metadata convention (.machine_readable/*.scm + a 22-line manifest) while the estate moved to .machine_readable/6a2/*.a2ml + a richer 0-AI-MANIFEST.a2ml (e.g. januskey's is 116 lines). Aligning is a repo-wide metadata migration — significant enough that it should be your call, not an unprompted change.

🤖 Draft — opened for review.

https://claude.ai/code/session_01GJatEm2TVFSTBEkKXmserJ


Generated by Claude Code

…upstream repos)

The repo recorded fs, obli-fs, transpiler, ssg, riscv-dev-kit, and
obli-riscv-dev-kit as submodule gitlinks (git mode 160000) but:
  - there is, and has only ever been, NO .gitmodules mapping for any of them;
  - all six working-tree directories are empty;
  - none of hyperpolymath/{fs,obli-fs,transpiler,ssg,riscv-dev-kit,
    obli-riscv-dev-kit} exist as repositories.

They are therefore orphaned/accidental gitlinks, not real submodules. They
break `git submodule` (fatal: no submodule mapping found) and would fail any
`actions/checkout` run with `submodules: recursive`. Remove them from the
index (reversible via history; re-add properly with a .gitmodules if a real
submodule is ever intended). OCaml + Idris builds are unaffected (verified).

Resolves the Hypatia git_state (GS-submodule) finding.

https://claude.ai/code/session_01GJatEm2TVFSTBEkKXmserJ
@github-actions

github-actions Bot commented Jun 4, 2026

Copy link
Copy Markdown

🔍 Hypatia Security Scan

Findings: 53 issues detected

Severity Count
🔴 Critical 6
🟠 High 3
🟡 Medium 44

⚠️ Action Required: Critical security issues found!

View findings
[
  {
    "reason": "Issue in governance.yml",
    "type": "missing_timeout_minutes",
    "file": "governance.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in hypatia-scan.yml",
    "type": "missing_timeout_minutes",
    "file": "hypatia-scan.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in mirror.yml",
    "type": "missing_timeout_minutes",
    "file": "mirror.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in scorecard.yml",
    "type": "missing_timeout_minutes",
    "file": "scorecard.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in secret-scanner.yml",
    "type": "missing_timeout_minutes",
    "file": "secret-scanner.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in instant-sync.yml",
    "type": "secret_action_without_presence_gate",
    "file": "instant-sync.yml",
    "action": "peter-evans/repository-dispatch",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Repository has 5 non-main remote branch(es). Policy: single main branch only.",
    "type": "GS007",
    "file": ".",
    "action": "delete_remote_branches",
    "rule_module": "git_state",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD007 -- Hypatia structural_drift: SD007 -- 0 day(s) old",
    "type": "CSA001",
    "file": "0-AI-MANIFEST.a2ml",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD007 -- Hypatia structural_drift: SD007 -- 0 day(s) old",
    "type": "CSA001",
    "file": "0-AI-MANIFEST.a2ml",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD007 -- Hypatia structural_drift: SD007 -- 0 day(s) old",
    "type": "CSA001",
    "file": "0-AI-MANIFEST.a2ml",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence

@hyperpolymath hyperpolymath marked this pull request as ready for review June 4, 2026 02:42
@hyperpolymath hyperpolymath merged commit 526610a into main Jun 4, 2026
21 checks passed
@hyperpolymath hyperpolymath deleted the claude/confident-shannon-xf0Td branch June 4, 2026 02:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants