Repository navigation
attribution: run the report-only provenance sweep on current main and post its telemetry #9753
Description
Refs #3465. Slice 1 of 3 (runs first; nothing blocks it).
Problem
The only repo-wide provenance sweep on record ran on 2026-08-28 under the provenance plugin and copy rubric v2. Since then the plugin became attribution, the copy rubric is at version 5 (attribution 0.10.4, #6194), the sweep ledger machinery shipped (#5353), and the trigger-less-stamp check is live (87 findings on 2026-09-06). The disposition sweep (slice 2) and the convention entry (slice 3) need current telemetry and current adjudication candidates, and the stage-1 numbers no longer describe this tree.
Fix
Run /attribution:audit (the read-only audit action, never fix or sweep) over all tracked markdown on current main. Apply no disposition and edit no tracked file. Post one comment on #3465, headed ## Report-only sweep, <date>, <commit>, that carries:
- telemetry: files considered and declined, stamp candidates/parsed/declined, expired count, trigger-less-stamp findings, fetches attempted/succeeded/failed, 429 count, fingerprint comparisons, categorical carve-outs, per-instance suppressions accumulated;
- every finding with location, class and tier, and the rubric version it was graded under;
- adjudication candidates harvested for the golden set (not converted);
- an honest-limits section: files model-read versus only enumerated, nomination passes run, whether
judge_samplespanels were met.
The sweep ledger is checkout-local and gitignored, so the comment is the durable record; slices 2 and 3 read it.
Done when
-
gh issue view 3465 --comments --json comments --jq '[.comments[].body|select(startswith("## Report-only sweep"))]|length'prints at least1 - That comment contains the strings
per-instance suppressions,rubric, andfetches -
git diff --stat origin/main...HEADon the run's branch is empty (no tracked file edited; no PR is opened for this slice)
Activity
github-actions commentedon Oct 24, 2026
Proposed work class: work-class: read-only
Basis: automated intake triage; the lanes App applied this class.
Size: Small
Complexity: Medium
Uncertainty: Known
Flags: none
Blocked by: none
Understood: run the read-only
/attribution:auditaction over all tracked markdown on currentmain, with no dispositions and no file edits. Then post one## Report-only sweep, <date>, <commit>comment on #3465. It should carry the telemetry, every finding with its rubric version, the golden-set adjudication candidates, and an honest-limits section. Nothing is missing. The issue states the scope, the output and the done-when checks. The outcome is exact and needs no owner decision. Link fetches may be limited by the lane's web access, and the limits section should record that. I found no duplicate among the open issues.Automated triage, applied by the lanes App.
kyle-sexton commentedon Oct 25, 2026
Released for re-triage under the owner's 2026-10-24 rule: an issue stops for a person only for an intent or vision question, a security call, a host or attended run, or spend outside prepaid credit. The hold label came off and intake triage runs again now; it re-applies a hold, with a numbered question, when one of those applies.
To hold this issue again, add
needs-human(orstatus: needs-decision) and say why in a comment.1 remaining item
melodic-automation-lanes commentedon Oct 26, 2026
The token broker refused the work-resolve-issue run that
agent-readystarted because the lanes kill switch was on, so it did no work. work-unblock removed and addedagent-readyback to start a fresh run. A kill-switch refusal is no fault in this issue or the lanes, so it never counts against later re-fires; after limits.limit-stops-per-issue of them since a person last addedagent-readyor a run last reported, work-unblock waits longer before each one, up to 24 hours.melodic-automation-lanes commentedon Oct 26, 2026
The work-resolve-issue lane stopped partway through this issue and needs a person.
Why, in the run's own words:
What the run says it did not do:
Run: https://github.com/melodic-software/claude-code-plugins/actions/runs/40372903274
To retry, remove
needs-humanand addagent-readyagain.kyle-sexton commentedon Oct 28, 2026
Host run. I ran
/attribution:auditin its read-onlyauditaction over tracked markdown onmainat8dcdac6e8d93171f8642b44d9aaa5635491e6b46, with nofixand nosweep.The result is written up as the slice-1 comment for #3465.
What ran:
origin/main.list-corpus.sh: 3832 files considered, 235 declined (214 eval fixtures, 21 vendor), 3597 included.extract-breadcrumbs.sh --dirover all 1741 directories.check-stamps.sh --trigger-lessover all 3597 files: 3055 stamp candidates, 3031 parsed, 24 declined, 2 expired, 49 trigger-less (87 on 2026-09-06).docs/upstream/, the top 60 by external URLs, and a seeded random 20. They gave 862 nominated passages.fetch-docs.shthrough the docs lookup: 200 fetches attempted, 163 succeeded, 37 failed, one 429.fingerprint.mjswith--min-containment 0.3 --min-span-words 15: 609 comparisons, 104 firing pairs, 246 above-rule spans.Results:
fingerprint-confirmedfindings and nothing is fix-eligible.docs/upstream/aihero-shipping-course.md:268andplugins/machine-health/skills/audit/reference/windows/check-catalog.md:414. 1 more was refuted and 1 came back UNKNOWN; both stay on the human report.emit-findings.shto the gitignored.work/reviews/main/: 53 rows, 2 withheld.Done-when, against #9753:
## Report-only sweep, 2026-10-28, 8dcdac6e8d93171f8642b44d9aaa5635491e6b46and containsper-instance suppressions,rubricandfetches. Criterion (1) is met once it is posted.git status --porcelainandgit diff --stat origin/main...HEADin the run's worktree are both empty. No tracked file was edited and no PR was opened.Honest limits: 118 of 3597 files were model-read. 217 above-rule spans and 186 strong restated-fact candidates were not judged. The comment on #3465 lists every limit.
Target labels: add none; remove host-run.
kyle-sexton commentedon Oct 29, 2026
Re-triage: closing. All three Done-when checks hold.
gh issue view 3465 --comments ... select(startswith("## Report-only sweep")) | length) prints1. The comment is #3465 issuecomment-6467462271, posted 2026-10-28T11:10:55Z and headed## Report-only sweep, 2026-10-28, 8dcdac6e8d93171f8642b44d9aaa5635491e6b46.per-instance suppressions,rubricandfetches(checked with a string match on its body).git diff --stat origin/main...HEADempty in the run's worktree. No tracked file was edited and no PR was opened.Slices 2 and 3 read that comment. The disposition-applying slice is #9755.