docs: draft AFFIRMATION at eb8e1d0 (owner signs on merge)

[hyperpolymath]

Summary

Adds a draft Profile A AFFIRMATION.adoc (per standards/docs/AFFIRMATION-STANDARD.adoc), anchored to main@eb8e1d0d8772ff10953d1198b8e44e7dad7c46bc, the parent of this PR's commit. Every claim in it is drawn from a command run in-session on 2026-10-07. It becomes the affirmation when the owner merges it with a signed merge. Not merged by the agent, and automerge is not armed. Merging is Jonathan's.

What it affirms and what it refutes, in short:

• Affirmed:
  • The Agda proofs type-check.
  • The trust-base audit passes: 5 quarantined postulates.
  • The 1000Langs attribution files are present.
• Refuted:
  • nickel export config/main.ncl fails.
  • reuse lint fails.
• Refuted: that the source is AffineScript. 16 of the 21 .affine files still contain ReScript syntax, and none of the 21 parse.
• Unrunnable: every Justfile build, test and lint recipe calls Deno or ReScript.

No issue closed.

Type of change

• 🐛 Bug fix: no code changes.
• ✨ New feature: no code changes.
• 💥 Breaking change: no code changes.
• 🕳️ Soundness fix: no checker or proof is touched.
• 📖 Documentation
• 🧹 Refactor: no code changes.
• ⚡ Performance: no code changes.
• 🔧 Build / CI / tooling: none touched.

📌 New pins

Head SHA: cc76dce. No pins added or changed: no uses:, lockfile or digest edits.

How has this been verified?

Run at the anchor in a clean worktree (git status --porcelain empty):

• sh scripts/audit-trust-base.sh exited 0: trust-base audit: OK — 5 postulate(s) in quarantine (conjecture=2 ffi-fact=3 ), 1 safe module(s), 3 .agda file(s) total.
• HOME=<scratch> AGDA_STDLIB_DIR=/usr/share/agda-stdlib/src sh scripts/prove-agda.sh exited 0: All Agda proofs type-checked cleanly under the enforced flags. Agda 2.7.0.1, agda-stdlib 2.1.
  • As shipped with the real HOME, it exits 1 (mkdir: … ~/.agda/libraries: File exists).
  • With no AGDA_STDLIB_DIR set, it exits 1 because the stdlib is not found.
  • Both failures are recorded in the file.
• nickel export config/main.ncl exited 1: error: missing definition for 'environment'.
• reuse lint exited 1. Licence texts are missing for MPL-2.0, CC-BY-SA-4.0, MIT and LicenseRef-Palimpsest-0.8; 106 of 349 files carry copyright information.
• affinescript check (0.1.1, local build) exited 124 on all 21 .affine files. The reported location (the module X; line) is misattributed; the real cause is ReScript syntax such as module Fetch = { and @val external.
  • Positive control: a minimal valid module Foo; file passes, and the same file plus one ReScript module block fails at the same misattributed location.
  • The first commit (6c03172) had called this inconclusive. The second commit corrects that.
• asciidoctor --failure-level=WARN AFFIRMATION.adoc passed with no warnings.

Checklist

• My commits are signed (git commit -S). git log --format=%G? shows G.
• I ran the project's own checks/tests locally and they pass. They do not all pass: the just recipes need Deno or ReScript (banned), and nickel and reuse fail on main. The file reports this rather than hiding it.
• New files carry the correct SPDX-License-Identifier: AFFIRMATION.adoc is prose, CC-BY-SA-4.0.
• Docs are updated, and no public claim now overstates what the code does. The file exists to state the gaps. It notes that EXPLAINME.adoc:38 is stale, since the header fix landed in chore(licensing): correct 1000Langs attribution, add Apache-2.0 NOTICE for meta/ #21, but does not edit EXPLAINME.
• I have not introduced a soundness hole: documentation only.

Notes for reviewers

• Signing: the agent's commit is signed with the owner's SSH key on this machine, so it is not an independent signature. The attestation is the owner's signed merge. Until then the file is a draft, as its last line says.
• Anchor drift: if main moves before merge, the anchor is no longer this commit's parent. The file then reads as a draft, and the checks should be re-run with the anchor bumped.
• Follow-ups, logged to the owner's findings inbox rather than filed as issues:
  • the prove-agda.sh ~/.agda/libraries bug;
  • the Justfile still uses Deno and npx/ReScript;
  • the unconverted ReScript in the .affine files, and the misleading parse-error location.

Deferred red checks (pre-existing on main@eb8e1d0, none required)

• build (×2) deferred to CI: 7 non-required checks red on main (build, 5× governance) #24
• governance / Licence consistency deferred to CI: 7 non-required checks red on main (build, 5× governance) #24
• governance / Workflow security linter deferred to CI: 7 non-required checks red on main (build, 5× governance) #24
• governance / Actions lockfile verify deferred to CI: 7 non-required checks red on main (build, 5× governance) #24
• governance / Check Workflow Staleness deferred to CI: 7 non-required checks red on main (build, 5× governance) #24
• governance / Well-Known (RFC 9116 + RSR) deferred to CI: 7 non-required checks red on main (build, 5× governance) #24

The one required context, scan / gitleaks, passes on this head.

🤖 Generated with Claude Code

https://claude.ai/code/session_01V5oTR3UPaBfCsjErogrM7E

[coderabbitai]

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 4b8590c3-282f-4acc-82ea-961f616e9731

📥 Commits

Reviewing files that changed from the base of the PR and between eb8e1d0 and cc76dce.

📒 Files selected for processing (1)

• AFFIRMATION.adoc

 _______________________________
< Copilot: Off. CodeRabbit: On. >
 -------------------------------
  \
   \   \
        \ /\
        ( )
      .( o ).

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud