docs(exceptions): add EX-0009 to EX-0012 from the repository audit #37

2026-10-12T11:05:50Z

KofTwentyTwo commented

2026-10-12 11:05:50 +00:00

(Migrated from github.com)

Adds four exception-register entries for standing deviations found by the 2026-10-12 repository audit:

EX-0009: GitFlow with merge commits (K22-REPO-20 linear history, K22-REPO-22 squash only) for Website-Backend, Website-Frontend, Munitor and cluster-gitops. Munitor's release and deploy pipeline depends on develop/main ancestry. cluster-gitops image bumps are now GitHub-signed GraphQL commits with no ruleset bypass actor.
EX-0010: CircleCI (Munitor orb) instead of the GitHub Actions reusable-workflow gates (K22-CI-01, 10-24, 30) for Website-Backend, Website-Frontend and Munitor. The CircleCI checks are required by rulesets.
EX-0011: 2-space formatting (K22-CODE-TS-01, K22-CODE-SH-02) in Website-Frontend (Prettier + eslint-config-next) and Munitor (Bash). A reformat would trigger releases; the repositories' .editorconfig cites this ID.
EX-0012: Praetor commits git-crypt-encrypted local OpenTofu state and tfvars (K22-CODE-TF-04/05). This is the bootstrap/recovery path for the infrastructure that would host a remote backend.

No exception is needed for the munitor-ci bot's unsigned pushes, because that is fixed: Munitor now commits through createCommitOnBranch, so the commits are signed.

AI disclosure: drafted by Claude Code (Claude Opus 5.5) at the maintainer's direction.

Generated with Claude Code

Adds four exception-register entries for standing deviations found by the 2026-10-12 repository audit: - **EX-0009**: GitFlow with merge commits (K22-REPO-20 linear history, K22-REPO-22 squash only) for Website-Backend, Website-Frontend, Munitor and cluster-gitops. Munitor's release and deploy pipeline depends on develop/main ancestry. cluster-gitops image bumps are now GitHub-signed GraphQL commits with no ruleset bypass actor. - **EX-0010**: CircleCI (Munitor orb) instead of the GitHub Actions reusable-workflow gates (K22-CI-01, 10-24, 30) for Website-Backend, Website-Frontend and Munitor. The CircleCI checks are required by rulesets. - **EX-0011**: 2-space formatting (K22-CODE-TS-01, K22-CODE-SH-02) in Website-Frontend (Prettier + eslint-config-next) and Munitor (Bash). A reformat would trigger releases; the repositories' `.editorconfig` cites this ID. - **EX-0012**: Praetor commits git-crypt-encrypted local OpenTofu state and tfvars (K22-CODE-TF-04/05). This is the bootstrap/recovery path for the infrastructure that would host a remote backend. No exception is needed for the munitor-ci bot's unsigned pushes, because that is fixed: Munitor now commits through `createCommitOnBranch`, so the commits are signed. AI disclosure: drafted by Claude Code (Claude Opus 5.5) at the maintainer's direction. Generated with [Claude Code](https://claude.com/claude-code)

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: KofTwentyTwo/standards#37