postmeridiem / pql

Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 1276,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 878635,
        "Shell": 1937,
        "Makefile": 4459
      },
      "pushed_at": "2026-07-08T10:47:29Z",
      "created_at": "2026-04-19T15:29:14Z",
      "owner_type": "User",
      "updated_at": "2026-07-08T10:47:28Z",
      "description": "PQL - a query system for the stuff in your repo.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Jeroen Schweitzer",
      "type": "User",
      "login": "postmeridiem",
      "company": null,
      "location": null,
      "followers": 1,
      "avatar_url": "https://avatars.githubusercontent.com/u/675641?v=4",
      "created_at": "2011-03-17T18:06:38Z",
      "is_verified": null,
      "public_repos": 3,
      "account_age_days": 5611
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v1.11.0",
          "kind": "minor",
          "published_at": "2026-07-08T10:49:21Z"
        },
        {
          "tag": "v1.10.4",
          "kind": "patch",
          "published_at": "2026-06-16T13:52:09Z"
        },
        {
          "tag": "v1.10.3",
          "kind": "patch",
          "published_at": "2026-06-10T12:17:56Z"
        },
        {
          "tag": "v1.10.2",
          "kind": "patch",
          "published_at": "2026-06-10T08:49:13Z"
        },
        {
          "tag": "v1.10.1",
          "kind": "patch",
          "published_at": "2026-06-10T07:54:02Z"
        },
        {
          "tag": "v1.10.0",
          "kind": "minor",
          "published_at": "2026-06-10T07:31:11Z"
        },
        {
          "tag": "v1.9.0",
          "kind": "minor",
          "published_at": "2026-06-09T17:52:24Z"
        },
        {
          "tag": "v1.2.0",
          "kind": "minor",
          "published_at": "2026-04-22T12:04:31Z"
        },
        {
          "tag": "v1.1.0",
          "kind": "minor",
          "published_at": "2026-04-22T11:56:38Z"
        },
        {
          "tag": "v1.0.0",
          "kind": "major",
          "published_at": "2026-04-22T11:28:02Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "5980af2e41d23e8e65b32435ed4f06c8d780984b",
          "body": "pql ticket list serialized every field of every ticket, and the\nheaviest one dominated: description measured ~81% of a 735 KB dump on\na 425-ticket consumer vault, blowing agent tool-output budgets and\nforcing jq re-projection downstream (FR-1, two independent reports).\n\nticket list and decisions lis\n[…]\nno longer exists and plan status carries no\ncoverage field.\n\nImplements T-56; the skill-test isolation escape found on the way is\nfiled as T-57.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "add field projection to planning list verbs, drop description (D-27)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-07-08T10:44:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "004c88ee283def56e03e4eea38da0a0d1bc75b36",
          "body": "Bash(pql *) already covered every pql invocation, but the permission\nsystem requires every segment of a compound command to match an allow\nrule — piping pql output through head/jq/wc/grep still prompted.\nAllowlist the harmless read-only filters so pipelines pass cleanly.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "allow common read-only pipe filters in project permissions",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-07-08T10:43:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e60a422fe0d84829fc3da7c1d03ed278471cff3e",
          "body": "The work was completed and written up in the ticket on 2026-06-05\n(commit adf44e3), but the status field was left at in_progress. Flip\nit to the terminal status so the ticket matches its own resolution.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "mark T-52 (githooks shim tracking) done",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-17T10:01:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "aafdc950f833ec26db3eaed13214866f76d1503c",
          "body": "Captures the open questions surfaced while weighing four ticket-system\ninitiatives. #1 (blocker gating) needed no record — it already exists\nand is status-aware. Q-11 sketches an authored ticket_comments table\n(decisions stay markdown, D-8); Q-12 parks the JIRA proxy-vs-separate-\ntool debate; Q-13 r\n[…]\nsue is created first so its number is the race-free referee for the\nT-NNN dance. README index regenerated by `pql decisions sync`.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "add Q-11-Q-13: ticket comments, JIRA backend, tracker-backed ids",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-17T09:44:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8d5a53be5ee81c05065f21fe8add74df944de471",
          "body": "Write timestamps used second-granularity datetime('now'), so a ticket\ncreated and mutated within the same wall-clock second produced two\nchangelog rows with identical updated_at. The LWW guard (D-16) then\nbroke the tie on the content hash, which is unrelated to recency, so\nany replay (plan rebuild, \n[…]\nql.db, is already correct there, making the rebuild pure downside —\nthe path on which a downstream report first surfaced the loss.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix non-deterministic loss of same-second ticket mutations",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-16T13:46:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f7003640bddbdac72a73134e5cb3377b4b00c3c4",
          "body": "Fix red CI on main: pin lint toolchain, update integration tests",
          "is_bot": false,
          "headline": "Merge pull request #4 from postmeridiem/fix/main-ci",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-12T10:17:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d53f5e4b367c8138ebd594a21a25fe74b0a621a9",
          "body": "govulncheck evaluates standard-library vulnerabilities against the\ngo directive in go.mod, not the toolchain that happens to run the\nscan. With the directive at 1.25.0 the lint gate reported 23 stdlib\nfindings already fixed in 1.25.x patch releases, regardless of the\nrunner's Go version. Declaring the current patch release makes the\nfloor carry the security fixes; GOTOOLCHAIN=auto fetches it for\nanyone on an older 1.25.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "raise go directive to 1.25.11 for patched stdlib",
          "author_name": "Martijn Jansen",
          "author_login": "dehlak",
          "committed_at": "2026-06-12T10:06:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "875d291e0034255466876deac4b1466bc540bf5f",
          "body": "setup-go resolves go.mod's \"go 1.25\" floor to exactly 1.25.0, so CI\nran a months-stale toolchain. That surfaced as 23 govulncheck\nfindings against the standard library, all fixed in 1.25.x patch\nreleases — invisible until the lint job's earlier install failure\nwas fixed, and invisible locally where \n[…]\nk the newest patch of the declared\nminor. Applied to release.yaml too: the release binaries should not\nship a stdlib the vuln gate would reject.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "resolve latest Go patch release in workflow setup",
          "author_name": "Martijn Jansen",
          "author_login": "dehlak",
          "committed_at": "2026-06-12T10:00:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8963d17ad73edd636ecd9a900194aeb6733b47b0",
          "body": "The script called a bare govulncheck binary that no workflow step\never installed. The lint job always failed earlier — at the\ngolangci-lint install — so the missing tool only surfaced once that\nstep was fixed. Use the same pinned go-run invocation as the\nMakefile's vuln target so the script needs no preinstalled binary\nand behaves identically locally and in CI.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "run govulncheck in ci/lint.sh via pinned go run",
          "author_name": "Martijn Jansen",
          "author_login": "dehlak",
          "committed_at": "2026-06-12T09:55:33Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "75c4776fb093f325e51ab7409ebcf94f9faeaec9",
          "body": "skill status/install/uninstall, doctor, and init switched from a\nsingle-skill JSON object to one entry per bundled skill when\nclean-house shipped as a sibling skill (T-10/T-11), but the\nintegration tests kept decoding the old singular shapes. They sat\nunnoticed in the tier the pre-push gate delibera\n[…]\nsuffix the TestMain-built binary with .exe on Windows; without\nit exec fails wholesale and the suite cannot run on a Windows dev\nmachine at all.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "update integration tests to per-skill array output",
          "author_name": "Martijn Jansen",
          "author_login": "dehlak",
          "committed_at": "2026-06-12T09:50:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1ad61158c6b1822012751dc0ef05a57bf037e951",
          "body": "The lint job installed golangci-lint with the curl|sh release\ninstaller at \"latest\", which broke when the v2.12.2 tarball failed\nthe installer's own checksum verification — every CI run on main has\nfailed at the install step since, before any lint check ran.\n\nInstall pinned versions from source thro\n[…]\n CI and the golangci-lint developers run\nlocally. goreleaser gets the same treatment in both jobs since\n\"latest\" carries the same failure class.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "pin CI tool installs to fixed versions",
          "author_name": "Martijn Jansen",
          "author_login": "dehlak",
          "committed_at": "2026-06-12T09:50:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5f1f50f755f85071684bea06f811437e2dc5287a",
          "body": "Make tests and build process portable to Windows",
          "is_bot": false,
          "headline": "Merge pull request #3 from postmeridiem/fix/windows-build-portability",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-12T08:43:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62ae6382c404d72ae961c0db0e99bf2dc95b6500",
          "body": "The build skill's mechanical steps assume a Unix host: the Makefile\nderives GOOS from uname (MSYS reports an invalid mingw64_nt-* value),\nthe PATH binary on Windows is pql.exe rather than pql, and\ngolangci-lint installs to GOPATH/bin off the default PATH. Capture\nthe working Windows sequence so it doesn't get re-derived, while\ndeferring the judgment steps (doc sync, version bump, install gates)\nto the existing build skill.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "add build-windows skill for the Windows build process",
          "author_name": "Martijn Jansen",
          "author_login": "dehlak",
          "committed_at": "2026-06-12T08:01:23Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e74e09cd4e46fa1afdd1f93a492859c2f9a94238",
          "body": "Two DB path tests asserted /tmp/... flag and env values verbatim,\nbut Load returns filepath.Clean of the input, which rewrites the\nseparators on Windows; assert against the cleaned path instead.\n\nThe read-only-vault fallback tests simulate EACCES by stripping\nwrite bits from the vault directory, whi\n[…]\nver triggers. Skip those\ntests on Windows via a shared helper; the helper also keeps the\n\"windows\" literal under goconst's occurrence threshold.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "make config DB path tests portable to Windows",
          "author_name": "Martijn Jansen",
          "author_login": "dehlak",
          "committed_at": "2026-06-12T08:01:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4cf9f10096230ec02567629e7486d53db959d94e",
          "body": "The skill listed no way to set a ticket's parent — only block/unblock\n(dependencies) — so a consuming agent reached for a blocker, then guessed\na non-existent --parent flag on setparent (it's positional:\nsetparent <id> <parent-id | none>). Document setparent, the --parent flag\non `ticket new`, a coo\n[…]\n under an epic, and call out\nthat hierarchy is distinct from blockers. Ships as 1.10.3; reaches\nconsumers via `pql skill install`.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "document ticket parent linking in the embedded skill",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-10T12:17:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9f5675fdc6d8e0c26609e7356eb388ec285aebd2",
          "body": "Bookkeeping record for the 1.10.2 concurrency fix (filed + closed as\ndone since it's fixed in this cycle).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "file T-55: pql.db SQLITE_BUSY under concurrent writes",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-10T08:48:23Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "cff0cb256b6d8f35db5c8420761bfe3a36b82d6f",
          "body": "busy_timeout was set via PRAGMA on a single connection, but the\ndatabase/sql pool was unbounded — a write that landed on a different\npooled connection had busy_timeout=0 and failed instantly with\nSQLITE_BUSY (exit 69) whenever another process (e.g. a git hook firing\npql) held the write lock. SetMaxO\n[…]\n by TestOpenPath_SingleConnection (the cap) and\nTestConcurrentCreate_NoBusy (concurrent writers don't trip BUSY). Ships\nas 1.10.2.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "cap planning + index DB pools at one connection",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-10T08:47:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2c10ca418e44ea3f800bd4bc62e1f6871fc6a19c",
          "body": "The README records index hadn't been regenerated after D-24/D-25/D-26\nlanded in architecture.md this cycle; `pql decisions sync` refreshes it.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "regenerate governance decisions index for D-24..D-26",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-10T07:53:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "43de0300f98e26645aed5753378826c2467a962c",
          "body": "TicketsForDecision still selected the dropped tickets.id column instead\nof joining ticket_idmap for the T-NNN label, so `pql decisions show\n--with-tickets` failed with \"no such column: id\". Join ticket_idmap and\nkey off record_id. Pure read-path fix — no data or schema change.\n\nAdds TestTicketsForDe\n[…]\nhe bug shipped past the unit gate\n(the integration suite is excluded from pre-push). The unit test now\nguards it. Ships as 1.10.1.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix decisions --with-tickets join after record_id rename",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-10T07:52:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8147c257d3d89945ef68f38feb9e83d7c8f8e2ae",
          "body": "Date the CHANGELOG section so the release workflow tags v1.10.0 and\ngoreleaser publishes the cross-platform binaries (D-26 ticket identity\nsplit).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release 1.10.0",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-10T07:30:14Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "09c8f876fd79d64d1ec17ac95a4cadea4da4b65a",
          "body": "Rewrites this repo's own committed .pql/changelog/ from the old\nT-NNN-keyed format to the record_id identity model (D-26), produced by\ncmd/migrate-ids. Dogfoods the migration the two consuming repos also ran.\n\nOther clones: install pql >= 1.10.0, then rm .pql/pql.db && pql plan\nrebuild to regenerate the local DB.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "migrate ticket changelog to record_id identity (D-26)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-10T07:29:53Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a30c0f2c2cd9f232a233f26e0c460725235d836c",
          "body": "Finishes the ticket identity split. Adds `pql ticket relabel\n<id|record_id>` — the visible reconcile for a duplicate-label collision:\nit moves only the ticket_idmap row (identity and the structural graph\nkey on record_id and are untouched) and reports, or with --fix-prose\nrewrites, stale T-NNN menti\n[…]\nt to\nrecord_id. Documents the change in D-26, planning.md, the embedded skill,\nand the CHANGELOG, and bumps the version to 1.10.0.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "complete D-26: relabel command, migrate tool, docs",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-10T07:22:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "55073da26dd68fbb1bfaf31b7d33218ecae2abeb",
          "body": "Ticket T-NNN was overloaded as both the tickets primary key / FK target /\nchangelog key / hash identity and the human-facing label. Because the\nlabel is allocated max+1 against the local changelog with no coordinator,\ntwo clones mint the same T-NNN and replay's ON CONFLICT silently merges\nunrelated \n[…]\nre green; the ticket relabel\ncommand, the one-off changelog migration, and the D-26 record + docs are\nfollow-ups in this sequence.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "split ticket identity into record_id and friendly label",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-10T06:54:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0cfbadc6b29a06c2e0dc0d8bcef31fa4bcc23456",
          "body": "Auto-release on dated CHANGELOG; date 1.6.0–1.9.0 and ship v1.9.0",
          "is_bot": false,
          "headline": "Merge pull request #2 from postmeridiem/claude/cool-gates-6wlmep",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-09T17:42:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "713d784e1c9ce4dd394eb7ee578559aea2c1f12c",
          "body": "Finalise the working sections that had shipped to main without a release\ndate. Each prior version is dated from when the next version's section was\nintroduced to the changelog (its effective release boundary); 1.9.0 is\ndated today as it releases now. project.yaml stays at 1.9.0 so merging\nthis trips the release workflow's dated-section gate and publishes v1.9.0.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "date released CHANGELOG sections 1.6.0 through 1.9.0",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-06-09T17:36:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4de8b878bf20ef72f27a7343160d32321c4987bf",
          "body": "Refine the release trigger to preserve the deliberate post-release model\nthe git-commit skill documents, rather than shipping any version that\nlands on main. Fire only on a push to main where project.yaml's version\nhas a dated CHANGELOG section (## [X.Y.Z] - DATE) and no matching tag yet\nexists; an \n[…]\nted-but-untagged versions (1.3.0\nthrough 1.5.0) so the first run can't fire a stale release. Drop the\nv*-tag trigger so releases are gated on main only.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "gate auto-release on a dated CHANGELOG section",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-06-09T17:32:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3c31029f7307b48405367a33944fcc74821747c9",
          "body": "The release workflow already builds and publishes via goreleaser on a v*\ntag, but tags were pushed by hand, so versions 1.3 through 1.9 shipped to\nmain without a GitHub Release. Drive the tag off project.yaml — the single\nsource of truth for the version — so a bump merged to main creates the\nmatchin\n[…]\nal escape hatch. The job's own tag push uses GITHUB_TOKEN, which does\nnot re-trigger workflows, so there is no duplicate release and no PAT is\nrequired.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "auto-cut a release when a version bump lands on main",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-06-09T17:25:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "01163a6887e244ba337793720679fb23d243933a",
          "body": "Claude/cool gates 6wlmep",
          "is_bot": false,
          "headline": "Merge pull request #1 from postmeridiem/claude/cool-gates-6wlmep",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-09T17:19:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "364acfe5ea80d3d79103e153fb034a12d8442f4b",
          "body": "The status line still described the v1.6.2 change while version had moved\nto 1.9.0. Point it at the current head — the open-children close guard\n(D-25) and its --force subtree cascade — so the manifest's prose matches\nthe declared version.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "reconcile project.yaml status line to 1.9.0",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-06-09T17:17:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d282ec158b388765c09519191cbb8c68177c64b7",
          "body": "Both slices are sparse outputs — collisions are rare and headings are a\nsubset of lines — so sizing to the input length would over-allocate for\nthe common case. Annotate with nolint:prealloc and a reason rather than\ndistort the allocation. Restores a green make lint.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "silence prealloc lint on sparse collision/heading slices",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-06-09T17:08:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8d40469017eae7479130322a5ecb4db6fafa8e9e",
          "body": "The ticket-ID collision detection it tracked shipped in 1.8.0 and was\naccepted out of review.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "mark T-54 done",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-09T07:07:51Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "489e83ead0bdf37d19f9418039adabf828917c27",
          "body": "Marking a parent done while subtasks are still open makes status\nmeaningless for roll-ups: the parent claims completion the work doesn't\nback. repo.SetStatus now refuses a move to a terminal status while the\nticket has a live, non-terminal direct child, returning a typed\nIncompleteChildrenError that\n[…]\ncket it\nclosed. Replay (plan import/rebuild) bypasses the guard so historical\ndata that predates the rule is left as-is. See D-25.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "block closing a ticket while its children are open",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-09T07:05:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a59f9213f6098ad55c44a747a7fbbd0519f97f67",
          "body": "Ticket ids are allocated as max(existing)+1 against the local\nchangelog, so two clones, branches or sessions that file between syncs\ncan pick the same T-NNN. That is an accepted cost of sequential ids with\nno central authority — but tickets replays with ON CONFLICT(id) DO\nUPDATE, which silently merg\n[…]\nand\ndescriptions full of commas, quotes and parens don't fool it.\n\nCloses the follow-up filed after the 2026-06-06 T-52 collision.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "surface ticket-id collisions loudly at changelog replay",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-08T15:39:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "67db47f1b2d67d8a036d2e137c71c7ae0929a00c",
          "body": "pql plan whatsnext / review now pass the vault's resolved StatusSet to\nthe repo so selection follows the configured classes rather than the\nbuilt-in default, and the no-actionable-ticket message speaks in terms\nof active work and the ready lane. Adds integration coverage for\npql ticket statuslist (d\n[…]\natus-set core commit only because these two files are\nshared with later work; logically this is the CLI layer of the same\nfeature.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "wire configurable status set into plan CLI and integration tests",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-08T15:38:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "aa8a7889b456028152751307e05c835c401f183c",
          "body": "The ticket status vocabulary and its meanings were hardcoded across the\nSQL CHECK constraint, a validStatuses map, and literal strings in the\nrepo queries and CLI. Projects with a different workflow couldn't change\nit, and a UI had to mirror pql's enum to render a board.\n\nStatuses now live under tic\n[…]\nalVersion is unchanged since row hashing is\nunaffected. Transitions stay unrestricted (D-14) — only unknown statuses\nare rejected.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "make ticket status set configurable with four classes",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-08T15:35:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b0b63aab138d5a949559decee9e99b8faec2abd5",
          "body": "Capture the follow-up from today's T-52 collision: sequential IDs can\ncollide across clones with no central authority, which is accepted — but\nthe ON CONFLICT(id) DO UPDATE replay merges two unrelated tickets\nsilently. The ticket proposes flagging divergent hash lineages for one\nid at rebuild instead of papering over them.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "file T-54: surface ticket-ID collisions loudly at replay",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-06T08:54:27Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "cf414bdb22fcaf144892db35b1cdd634e3e08095",
          "body": "A pql ticket write leaves .pql/changelog/ dirty by design — the\npre-commit hook stages it onto the next commit (write-through, D-23).\nAgents were narrating \"the ticket won't persist until committed\" on\nevery edit, which is noise. The embedded skill and the planning-state\ndocs now spell out that the dirty changelog is expected, so consumers\neither fold the bookkeeping into a commit or trust the normal flow.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "tell agents not to flag changelog-dirty after ticket writes",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-06T08:51:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9fd2d3b9ea04b216ba212cdb34961f48d7c99619",
          "body": ".clide/settings.yaml holds local UI layout (active sidebar/context\ntabs), per-clone tooling state rather than shared config — same\nposture as .pql/*.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ignore clide per-clone UI state",
          "author_name": "Jeroen Schweitzer",
          "author_login": "jschweitzer-imagin",
          "committed_at": "2026-06-05T12:04:59Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "dd54519cc1b4c2d25c02df8f18ea7ef2915c0cd9",
          "body": "Resolution note + done transition. Verified end-to-end on a fresh\nclone: only pre-push tracked, init plants all four shims with a\nclean tree, hooks fire.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "close T-52: shim tracking unified and verified",
          "author_name": "Jeroen Schweitzer",
          "author_login": "jschweitzer-imagin",
          "committed_at": "2026-06-05T11:15:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "adf44e34dd7f540f049dc2ec99ded30f9dbd1d9d",
          "body": "post-checkout and post-rewrite were tracked in .githooks/ while\ntheir siblings pre-commit and post-merge were gitignored, even\nthough all four are identical static shims planted by pql init.\nThis completes the T-28/T-39 per-clone-hooks migration that those\ntwo shims escaped: untrack them and ignore \n[…]\nshims land in .git/hooks/ and\nnever fire under the redirected path. No code change — pql init\nalready plants all four shims into the resolved hooks dir.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "untrack pql replication hook shims, align to per-clone policy",
          "author_name": "Jeroen Schweitzer",
          "author_login": "jschweitzer-imagin",
          "committed_at": "2026-06-05T11:13:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c8e67f21a449cb9a4e82bc0edcbc84163ed04347",
          "body": "post-checkout/post-rewrite are tracked while pre-commit/post-merge\nare gitignored, though all four are identical init-planted shims.\nCaptures the T-28/T-30/T-38/T-39 history and a proposed fix so the\ndrift is tracked rather than rediscovered. Linked to D-18.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "file T-52: unify .githooks shim tracking policy",
          "author_name": "Jeroen Schweitzer",
          "author_login": "jschweitzer-imagin",
          "committed_at": "2026-06-05T10:45:45Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "811934feecc12a6e2e91928575f93a650f851b84",
          "body": "The clean-house skill writes per-clone run history and a skip\nledger to governance/decisions/.clean-house-state.md; it's local\nworking state, not shared planning data.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ignore clean-house skill state file",
          "author_name": "Jeroen Schweitzer",
          "author_login": "jschweitzer-imagin",
          "committed_at": "2026-06-05T10:14:29Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "fa7845a6c3874d48f0fca0563261ffc0236bc58b",
          "body": "The D-21 move to governance/{decisions,questions}/ left the\ncross-file anchor links pointing at the old flat layout\n(questions.md / architecture.md as siblings), so they resolved\nnowhere when rendered. Repoint them at ../questions/ and\n../decisions/, and refresh two anchors that still named the\npre-rename D-15/D-16 headings. pql's ID-level ref check never\nflagged these; they only broke for a human following the link.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix DQR cross-references broken by the governance/ split",
          "author_name": "Jeroen Schweitzer",
          "author_login": "jschweitzer-imagin",
          "committed_at": "2026-06-05T10:14:23Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1b17ae39b238cac7c85dc94a6d6a6daa73c3c60e",
          "body": "A query column alias was interpolated raw into a double-quoted SQL\nidentifier. The lexer un-escapes \"\" to \", so a user-supplied alias could\ncarry a literal quote, close the identifier early, and inject an extra\nprojection or subquery into the compiled SELECT — a read-side SQL\ninjection. It matters m\n[…]\nhine-generated, which\nthe planned MCP/automation consumers will do. Aliases now double any\nembedded quote via a quoteIdent helper.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "escape DSL column aliases as SQL identifiers",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-03T15:04:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "327b9a209afd395014945b4f4970b5e6023db4ea",
          "body": "The schema-version error listed the legacy pql-plan.json import paths\nfirst. That snapshot is no longer written and is typically stale, so a\nuser hitting the error on upgrade could restore out-of-date planning\nstate. The hint now recommends `pql plan rebuild` (replay the committed\nchangelog) and marks the --legacy path as possibly stale.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "lead schema-mismatch recovery with plan rebuild",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-03T15:04:22Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e0db31300ab6fbbcaf778d26459681293a5d249d",
          "body": "A routine git checkout could silently erase planning work. Ticket\nmutations wrote only to the gitignored pql.db, while the installed\npost-checkout/post-rewrite hooks run `pql plan rebuild`, which truncates\nthe replicated tables and replays the changelog from disk — so any\nticket created but not yet \n[…]\non snapshot) is the durable artifact.\nAdds write-through integration coverage and a governance-README\nidempotency regression test.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "write ticket mutations through to the changelog",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-06-03T15:03:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f0c823837b2ed41251fc552c472bbdf56086ff9e",
          "body": "Resync after the generator fix moves the resolved Q-8 out of \"Open\nquestions\" into \"Resolved questions\". T-43 (the audit-leftover ticket:\nPQL_DQR_DIR env + DQR domain style checks) is implemented and closed.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "regenerate governance README; close T-43",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-31T12:57:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a6617a4b8c916ae0bda00f30651a1be6b0303ee4",
          "body": "Align the code with behavior the docs already promised:\n\n- --quiet: registered but never read, so warnings always printed. Wired\n  into diag via a root pre-run toggle (errors still emit).\n- pql watch start <path>: validate the scope is inside the vault root,\n  as docs/watching.md specifies; previous\n[…]\n a\n  resolved question rendered under \"Open questions\" (and re-synced that\n  way). Split into Open / Resolved questions by status.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix three doc-vs-code gaps surfaced by the audit",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-31T12:55:56Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b44c191c1da784579e888ca97d762e39d57d7264",
          "body": "- output-contract.md: drop the unimplemented --table/--csv/--select/\n  --no-color renderers (note them as not built); fix the enriched example\n  to the real shape (signals carry `weighted`, connections are\n  {path, relation}, real signal names); remove the non-existent\n  positional `pql <QUERY>` for\n[…]\nce and live trigger phrases.\n- project.yaml: header comment no longer claims builds stamp SHA+dirty\n  (version strings are clean).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "align feature docs with the v1.6 codebase (audit reconciliation)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-31T12:46:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "93a00e9d809cd40809267fd5b842efcb17f65dba",
          "body": "- planning.md: rewrite the decisions/ticket/plan command tables to the\n  real surface (drop phantom coverage/search/export/plan-search, add\n  read/setparent/refine/whatsnext/review/rebuild/import); fix the false\n  \"state-machine enforced\" claim and the non-existent --output json; fix\n  the Go packag\n[…]\nplan.md: mark the superseded CLI section historical, pointing\n  at the real surface; grammar/schema/exit-codes stay authoritative.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "align docs/structure with the v1.6 codebase (audit reconciliation)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-31T12:43:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "af4f4d1907ba8847c35719082ac2cf6b4c25edc9",
          "body": "CLAUDE.md was frozen at the 0.1.0 era. Corrected:\n\n- Project status: was \"early scaffolding / Tier-2 not yet scaffolded\"\n  when connect/intent/query/planning are all shipped. Rewritten to\n  current state, pointing at the planning dataset for open work.\n- pql.db evolution: dropped \"forward-only migra\n[…]\negration / eval no longer \"planned\" — both suites exist.\n- D-3 citation now D-3 + D-19; design-philosophy summary says two stores.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "align CLAUDE.md with the v1.6 codebase (audit reconciliation)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-31T12:32:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0dfd07dcf4625ef64edfa7b85cc838afa3e07699",
          "body": "Docs-vs-code audit surfaced decision records out of sync with the code:\n\n- D-19: \"no migration runner ever\" is too strong. It holds only while\n  pql is single-author/pre-distribution; forward migrations become\n  necessary at third-party distribution (external users can't rm pql.db\n  on every schema \n[…]\nnote that, keep the core\n  decision.\n- Q-4: note the shipped warnings tier; the missing-fields question is\n  still genuinely open.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "amend D-19/D-3/D-8/Q-4 to match reality (audit reconciliation)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-31T12:30:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f5ce9fb97a0e18efddba5f23e9ca7cee10427d6a",
          "body": "A change can contradict a decision record without touching the CLI\nsurface, so D-record reconciliation is its own trigger alongside the\nSKILL.md/CHANGELOG doc-sync. Encodes the never-leave-them-drifting rule\nat the ship gate.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "build skill: reconcile D-records with code in Step 0",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-31T11:54:19Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4dd97a33447ecdbda8fcb81fc53334dc9890332c",
          "body": "Aligns the decision record with what T-43 shipped. The original sketch\nframed the prefix-collision check as a hard error; it ships as a style\nwarning so a fuzzy heuristic can't fail sync/validate on a legitimate\npair like test/testing. Both new checks are suppressible via --no-style.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "amend D-21: DQR domain-conflict check is a warning, not an error",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-31T11:49:39Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5f5145d263c31ba8c349941ae39f302dace5d95f",
          "body": "Completes the two sub-bullets left unshipped when the D-21 governance\nlayout landed:\n\n- PQL_DQR_DIR overrides dqr_dir (env > file > default), wired through\n  config.Load and pql init's standalone resolver, matching the\n  PQL_VAULT/PQL_DB/PQL_CONFIG convention.\n- Two cross-file style checks in the DQ\n[…]\nllision as a hard error; it ships as a style warning\nso a heuristic match can't break sync on a legitimate pair like\ntest/testing.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "implement T-43: PQL_DQR_DIR env + DQR domain style checks",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-31T11:46:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f9046895babdfcedc8b6ade620473832c2149c0b",
          "body": "The D-21 governance-layout cluster shipped under the T-32 epic in\nf167f4c — config knob + legacy fallback, parser dual-layout, init\nplanting, and default-on style warnings are all live and tested — but\nthe four sub-tickets were never transitioned out of backlog. Close them\nto match reality.\n\nTwo ver\n[…]\n\ninformational domain-pairing and conflicting-domain style checks) are\ncaptured as T-43 rather than left buried in closed tickets.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "close T-33–T-36 (DQR layout shipped); file T-43 for leftovers",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-31T11:27:20Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "964019fa2ad29c89d6268c87f04f39ea0fb7d79e",
          "body": "pql dogfoods its own planning surface — open work is Q-records under\ndecisions/ and the ticket backlog in pql.db, shipped history is the\nchangelog. TODO.md had decayed to a redundant pointer that restated a\nhandful of Q-record IDs and a coarse shipped-milestone list, both\nalready covered. Drop it and fix the one stale doc reference.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "remove TODO.md; the planning dataset is the forward-looking tracker",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-31T11:12:59Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "63b563acb0c2680e2ca22542833d14e124e63793",
          "body": "Encodes the flow for shipping the pql binary: the judgment step of\nsyncing the embedded SKILL.md + CHANGELOG to any user-facing surface\nchange before building (SKILL.md is //go:embed'd and unverified, so a\nMakefile prerequisite can't own this — it's an intelligence call), then\nthe fix-version bump, gate, make build, and install-to-PATH sequence,\nplus the don't-install-mid-schema-sequence guard.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "add build skill for the build-and-ship ritual",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-31T11:05:50Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b68a032d0896f5d87bf3b0ea97288ef767889c21",
          "body": "Add the append/--tree/--under recipes (with the --file/--stdin, --depth,\nand leaf-under-epic variants) to the planning cookbook, and document\nskill show alongside the other skill-management commands. Doc-only;\nkeeps the embedded skill in step with the 1.6.0 surface.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "document 1.6.0 ticket/skill examples in the skill cookbook",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-31T10:59:44Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5e900f0cd55b388035808a7767d94a7262741934",
          "body": "Print a bundled skill's content as baked into this binary (not the\non-disk install), so it works from anywhere without a vault. Defaults to\nthe pql skill; output is JSON keyed by file path, readable with --pretty.\nHandy for inspecting exactly which skill a given binary ships.\n\nNames the primary skill via skill.PrimarySkill so the default target\nisn't a bare literal.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "add skill show to echo the embedded skill content",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-31T10:53:33Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "34a320eefa2f9f2c89b22eb7a2a59b2732218946",
          "body": "These remove the client-side JSON post-processing that consumers (clide)\nwere doing whenever pql returned raw rows but not the derived shape they\nneeded — every workaround was a pipe through python that tripped the\npermission layer.\n\n- `ticket append <id>` mutates a description without round-trippin\n[…]\nw --tree and list --under sit on one depth-bounded recursive-\ndescendants CTE (the bound also caps any pathological parent cycle).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "add ticket subtree, descendant filters, append, and unblocked whatsnext",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-31T10:53:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "407f29bbda67742b9b851f58b967027a57fe1d53",
          "body": "The build target now defaults GOOS/GOARCH to the host (uname -s/-m,\nwith x86_64→amd64 and aarch64→arm64 normalisation) and passes them\nthrough to go build. Cross-compiling stays a one-liner via env\noverrides; release builds remain goreleaser's job.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "detect host OS/arch in build target",
          "author_name": "Jeroen Schweitzer",
          "author_login": "jschweitzer-imagin",
          "committed_at": "2026-05-28T08:45:49Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ab191fb387002c7ba5923d7d20a95e471e3aec13",
          "body": "Records the exit-0 work as a done initiative ticket linked to D-22 per\nthe D-20 decision-to-ticket convention.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "file T-42 tracking D-22 implementation",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-25T09:43:05Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ef73d6ec6d5c78fda9ca11e2da7742d56aee297f",
          "body": "Zero matches now exits 0 with an empty [] on stdout instead of the\nformer exit 2 (NoMatch). The empty result lives in the data, never the\nexit code, so callers that treat non-zero as failure (set -e, subprocess,\nCI, agent harnesses) stop flagging empty results as errors. Errors remain\n64/65/66/69/70, each with a stderr diagnostic.\n\nAlso lands the ticket show comma-batch work that was already pending in\nthe tree.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "exit 0 on zero matches; retire exit 2 (D-22)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-25T09:32:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2484b7d08cf8d32fc97e0773b593cb24790e6f56",
          "body": "The two oldest hook wrappers, ensurePlanExportHook (pre-commit) and\nensurePlanImportHook (post-merge), pre-date T-22's installNamedHook\nhelper. They short-circuited on marker presence:\n\n    if strings.Contains(existing, marker) {\n        return  // body never updated\n    }\n\nso an existing hook with \n[…]\n.\n\nT-30, the sibling ticket about missing .githooks shims for the new\nhooks, no longer reproduces against current code; cancelled.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "route pre-commit/post-merge through installNamedHook (T-29)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-11T19:17:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ea8e0437e02eef29d0493f7a17657a41e68888e9",
          "body": "T-41 shipped the init-side fix but I missed cleaning up pql's own\n.gitignore — the exact bookkeeping clide-claude flagged.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "drop !.pql/pql-plan.json from pql repo gitignore",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-11T16:58:55Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d947eb542f34d2321cb055bafd1a2801d1bc8320",
          "body": "The exception predates D-15 changelog replication — back when\n`pql plan export` writing pql-plan.json *was* the replication\nmechanism. Now the changelog is authoritative; pql-plan.json is\na manual backup artefact consumers can commit or ignore on their\nown terms.\n\nSame shape as T-39's hooks decommis\n[…]\nget a clean ignore.\n\nClide hit this during the May 2026 migration after manually\nremoving the entry — next `pql init` re-added it.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "stop auto-adding !.pql/pql-plan.json to gitignore (T-41)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-11T16:54:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bf5bd5cc546a8c05fbc0267ea7491b70d48c0651",
          "body": "T-28 made .pql/hooks/ per-clone state and stopped emitting the\n!.pql/hooks/ exception in new repos' .gitignore, but didn't migrate\nthis repo. The committed hook scripts carry a hard-coded absolute\npql binary path that differs per-developer; tracking them just\nproduces a permanent dirty diff on the f\n[…]\ned .pql/hooks/*\n  - hooks stay on disk and continue to work; `pql init` replants\n    them locally on every clone, no commit needed\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "stop tracking .pql/hooks/ (T-28 dogfood)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-11T16:50:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f167f4cb1a844e0f2ba4903e87c3379ae33feec2",
          "body": "Move from flat decisions/<file>.md (with asymmetric questions-X /\nrejected prefixes) to a per-type subdir layout rooted at a\nconfigurable parent. Default root is governance/; legacy decisions/\nstill parses for repos that haven't migrated.\n\n  governance/\n    decisions/<domain>.md\n    questions/<domai\n[…]\nn DQR tree, which is why\nthe diff carries the file moves. Downstream repos either follow\nsuit or set dqr_dir to keep their layout.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "implement DQR governance layout (D-21, T-32)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-11T16:06:34Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "524d8bc01fbd9caa23fb92b3a2cc36e59ee51744",
          "body": "D-21 captures the agreed-on shape: governance/ parent (configurable\nvia dqr_dir), per-type subdirectories, auto-generated README with\nprologue + recommended-domains list, default-on style enforcement\non validate / sync.\n\nT-32 is the initiative carrying it. Children T-33..T-37:\n  - T-33 dqr_dir confi\n[…]\nle checks\n  - T-37 migrate this repo's own decisions/ → governance/\n\nNo code changes yet — this commit captures the design before\nimplementation starts.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "file D-21 and the T-32 initiative tree for DQR layout convention",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-11T15:40:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "15721b350798553b9684d293c6225f71cf710243",
          "body": "…20, T-15)\n\nThe coverage report was always trying to answer \"which confirmed\ndecisions need implementation work?\" without a way to distinguish\nfounding policies (no work expected) from proposals (work\npending). T-15's first cut added a Coverage / Class markdown\nfield to filter founding records out. \n[…]\no align this\n    repo's own dogfood with D-20.\n\nReverse linkage already exists (TicketsForDecision + --with-tickets\nflag) — no new query surface needed.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "drop pql decisions coverage; track implementation via initiatives (D-…",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-11T07:16:47Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9731675f4f33e0867ba4265e9c0dcec45ca924e4",
          "body": "Hooks bake the absolute path of the pql binary that ran init —\ncorrect behaviour per T-5 (git's hook-shell PATH is unreliable),\nbut it means every developer's clone produces a permanent dirty\ndiff against tracked content because their absolute path differs.\n\nGoing with option (a) from T-28's design \n[…]\ns.\nThe migration step (git rm -r --cached .pql/hooks/, drop the\nexception line) is documented in CHANGELOG.\n\nSurfaced by clide's T-25 round-2 finding 2.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "treat .pql/hooks/ as per-clone state, not committed content (T-28)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-09T23:45:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "02cab7f92eb71933109fcd950bb8a21573cbc702",
          "body": "The single-path \"pql plan import\" suggestion misled clideclaude\nduring T-25: clide had only pql-plan.json (no changelog yet), so\nbare `pql plan import` replayed an empty changelog and left the\ndb empty. The correct recovery for that state is `pql init`\n(autoImportPlan picks the legacy path) or `pql \n[…]\n                                      (or pql plan import --legacy)\n\nTest asserts each option appears in the error so the wording\ncan't quietly regress.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "clarify schema-mismatch recovery message (T-31)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-09T23:42:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "78f012b18aa0e2b61f8603f5979619b1f6d0142a",
          "body": "Existing repos with the legacy /.pql/* + !/.pql/pql-plan.json +\n!/.pql/hooks/ stanza couldn't `git add .pql/changelog/` until the\nuser manually appended an !.pql/changelog/ exception.\n\nensurePqlGitignore now treats !.pql/changelog/ as part of the\nmanaged entry list, so pql init upgrading a legacy gitignore\nappends the missing line automatically. Idempotent — no-op when\nthe entry is already present.\n\nSurfaced by clide's T-25 round-2 run (finding 1).\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "auto-include .pql/changelog/ in pql-managed gitignore stanza (T-27)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-09T23:41:54Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6a718bc8bde492a64ea1f01c0e49f68281735e2e",
          "body": "After autoImportPlan replayed the changelog into a fresh pql.db,\nlast_export_marker stayed empty. The next `pql plan export` saw\nno marker and emitted every row whose updated_at was non-null —\nappending ~5KB of unchanged-content INSERTs per no-op commit.\n\nImporter now writes both last_import_marker \n[…]\nhat mutated AFTER the replay, which is\nwhat users expect.\n\nSurfaced by clide's T-25 round-2 run (finding 5: changelog grew\nunboundedly on every commit).\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "advance last_export_marker after changelog replay (T-26)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-09T23:41:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0c8615cda05ad681914aa17ca649d5f7a940dc0c",
          "body": "repo.Import inserts tickets in JSON-array order, but real-world\nsnapshots (clide's especially) carry many tickets whose parent_id\npoints forward in the array — T-1 → T-6 with T-6 later in the\nlist. Per-row FK enforcement aborted on the first such reference,\nleaving pql.db with no tickets after the s\n[…]\n-tested).\n\nSurfaced by T-25 scenario 1 against clide; clide's pql-plan.json\nmakes a useful canonical regression fixture for any future\nimport-path work.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix legacy import FK error on forward parent references",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-09T21:03:05Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ae41aad1f7487733c33c68002edca0da41dfd6ed",
          "body": "After installing v1.4.25 to ~/.local/bin/pql, re-ran `pql init`\nso the four hooks bake in the stable PATH location instead of\nthis dev's working-tree ./bin/pql. The previous absolute path\nworked but tied the hooks to a build artefact that gets\nrebuilt frequently; the installed path is what other tools\nthat shell out to pql expect.\n\nNo code change.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "re-bake hooks against the installed pql path",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-08T19:56:27Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "807434d169ca419d61ad750d700a528c21b9993d",
          "body": "A pull that updated decisions/*.md previously left pql.db's\ndecisions table stale until the user ran sync manually — symmetric\nto the init-time gap fixed in v1.4.24. The hook now calls\n`pql plan import` then `pql decisions sync`; both are idempotent\nso a no-op merge is a no-op hook.\n\nCloses T-25 scenario 5 (decision divergence) without intervention.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "also run pql decisions sync from the post-merge hook",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-08T19:54:59Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f04a3fe1bf64cd46f799dc6d80e411f5ecf859a6",
          "body": "`pql init` now runs `pql decisions sync` as a dedicated step after\nautoImportPlan so a fresh clone lands with both halves of pql.db\npopulated:\n\n  - tickets / ticket_deps / ticket_labels / ticket_history come\n    from .pql/changelog/ replay (the new path) or pql-plan.json\n    (legacy fallback).\n  - d\n[…]\nf-T-16 review.\n\nSkipped cleanly when the vault has no decisions/ directory\n(tickets-only setups). Reported as a `decisions_sync` block in\nthe init JSON.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "auto-sync decisions on pql init",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-08T17:25:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f7171d98df478ba33e82e384f1971c9ba77976bd",
          "body": "The OLD pre-commit hook (still pointing at /var/home/.local/bin/pql\nv1.4.16) ran during T-19/20/21's commits and wrote stale state to\n.pql/pql-plan.json. The pre-T-23 autoImportPlan path then read\nthat legacy file on a later init pass and overwrote ticket\nstatuses back to \"backlog\" in pql.db. The co\n[…]\ntate. T-23's changelog-preferred\nautoImportPlan and T-22's hook upgrade (which now points at\n./bin/pql with the new schema) prevent this from recurring.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "re-state T-19/20/21 done in pql.db (state regression repair)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-08T17:17:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "67c781633f7e9e48b0122d0d440c93d349052656",
          "body": "T-24 (schema-migration generation in changelog dirs) is closed as\ndone because its deliverable already exists: T-22 plants per-table\n0000-schema.sql files carrying `pql:created_by` and\n`pql:canonical_version` markers, and D-19 retired the migration\nrunner so there's nothing left for T-24 to generate\n[…]\ntion step before this work is released.\n\nT-16's full implementation tree (T-17..T-24) is now in. T-25 closes\nthe umbrella when the clide pass completes.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "close T-24, flag T-25 ready (T-16 implementation done)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-08T11:02:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8fdd53cd012297a90892a195d5d648619f079389",
          "body": "pql init's autoImportPlan step now prefers .pql/changelog/ over\n.pql/pql-plan.json. Bootstrap precedence:\n\n  1. .pql/changelog/ has data files → replay (the new path).\n  2. .pql/pql-plan.json exists → legacy JSON import (upgrade path\n     for repos that haven't run an export under v1.4.18+ yet).\n  3\n[…]\nog carries the full state. Kept the .gitignore\nexception for `!.pql/pql-plan.json` so legacy repos pulling this\nupdate still see their snapshot tracked.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "prefer changelog over pql-plan.json in autoImportPlan (T-23)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-08T11:00:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ae71a8c69d59152e4055c0de5e09b3d471dc18cb",
          "body": "`pql init` now stands up the full T-19..T-21 machinery on a fresh\nclone or upgrades it cleanly on an existing repo:\n\n- Per-table schema fixtures: .pql/changelog/<table>/0000-schema.sql\n  for tickets, ticket_deps, ticket_labels, ticket_history. Each\n  carries a `pql:created_by` / `pql:canonical_versi\n[…]\nthe SQL run because\nper-table directory replay ordering can't honour FK dependency\norder, and the data being replayed was already FK-valid when\nwritten.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "wire pql init for the replication lifecycle (T-22, D-18)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-08T10:57:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5e9b91ba69a16c17ef5fde2b5b74e595d6410cd6",
          "body": "New subcommand truncates the four replicated planning tables in\nFK-safe order (ticket_history, ticket_labels, ticket_deps,\ntickets), resets last_import_marker, then runs Import to replay\n.pql/changelog/ from scratch.\n\nSolves the case incremental replay can't: a row that existed on\nthe previous branc\n[…]\nshould\nchain rebuild + sync.\n\nWired in for post-checkout (branch switch) and post-rewrite hooks\nin T-22; surfaced as a power-user / recovery verb today.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "add pql plan rebuild for branch-switch recovery (T-21)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-08T10:44:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "04bea52ea69e207116b5e5ea5d425754e27f740b",
          "body": "`pql plan import` now walks .pql/changelog/<table>/ in lexicographic\norder and feeds each file's content to db.ExecContext. The inline\nLWW guards from T-19 make replay idempotent and order-free — the\nsame file can replay any number of times without duplicates or\nstale overwrites. Per-file mtime chec\n[…]\nhe exporter, idempotent replay, marker\nadvance, and the LWW-guard-prevents-stale-overwrite case (replica\nwith newer state ignores older incoming lines).\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "rewire pql plan import to replay changelog files (T-20)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-08T10:41:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "600902128dd8a5b76e8babcb0356c5d04d447a9e",
          "body": "`pql plan export` no longer writes a single pql-plan.json snapshot.\nIt now appends one INSERT ... ON CONFLICT DO UPDATE ... WHERE ...\nline per replicated row to .pql/changelog/<table>/<YYYY-MM>.sql,\nbucketed by the row's updated_at month. Inline LWW guard\n(WHERE excluded.updated_at > target.updated_\n[…]\nl dump of current pql.db state into\nthe changelog files — bootstrap material for future replay tests\n(T-20) and a working artefact for replicas to pull.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "rewire pql plan export to write changelog files (T-19)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-08T10:23:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d1e1d48a83123570400e41ece2e5005c41db9eee",
          "body": "Two foundation changes for changelog-based replication, taken in\none commit because the second redefines the boundary the first\nsits on top of:\n\n- D-19 supersedes D-6: the migration runner, schema_migrations\n  table, and ALTER TABLE deltas are gone. pql.db now ships as a\n  single CREATE TABLE per pl\n[…]\n in the changelog rather than a missing row.\n\nBumps version to 1.4.17. CHANGELOG entry under Changed flags the\nbreaking-for-in-place-upgrades behaviour.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "soft deletes + retire migration runner (T-18, D-19)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-08T09:55:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2603c0ed16094dfb4031a380aab507331269a561",
          "body": "First implementation slice of the changelog-based replication\ndesign (D-15..D-18). Adds hash + canonical_version columns\nacross all six planning tables, with timestamps backfilled and\nhashes populated by a Go-side migration step. Per-table Rehash\nhelpers live in planning/rehash.go and are called fro\n[…]\n\nso the hash column stays current without exception coding.\nFoundation for the export rewrite (T-19) and import replay\n(T-20).\n\nBumps version to 1.4.16.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "implement canonical row hashing for planning tables (T-17)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-08T09:19:55Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0f9a48adccf0c2b66c93d52a2df15f4dee573840",
          "body": "Land D-15..D-18 capturing the changelog-based replication\ndesign worked through this session: per-table monthly SQL\nchangelog files (D-15, supersedes D-13's JSON snapshot),\ninline LWW guards plus content hash and canonical row\ncolumns (D-16), soft deletes via deleted_at (D-17), and the\nfour-hook git\n[…]\npand Q-9 with five surveyed approaches to multi-user\nticket ID distribution — the remaining hard problem the\nreplication design intentionally left open.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "document changelog-based replication design",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-08T07:57:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ec6cf14e50e948a233eb46498976bad3b823002d",
          "body": "The accumulated work in this session crossed several goconst\nthresholds and introduced a few real lint issues. Mix of fixes:\n\n  - .golangci.yaml: bump goconst min-occurrences from default 3\n    to 5 (cobra Use names like 'list' and 'status' inevitably\n    collide across subcommands; 3 was too tight \n[…]\nhe pre-bundle\n    single-file hash); hashBundle is the only hasher now.\n  - Fix gocritic Join warning + missing State doc-comment.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "clear pre-push lint gate",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-06T15:13:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "59148d9a20a33c62e12d9fc35e36ee917eca22b2",
          "body": "Captures T-15 (stance-exemption follow-up) so a fresh clone sees\nthe deferred work. No code change.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "update planning snapshot (T-15 filed)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-06T15:04:22Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "874215b52091f9e9bc04748c8607c3939316a541",
          "body": "Drop the standalone v1.0 / v1.1 labels in SKILL.md and the\nparallel changelog inside references/rules.md. The skill ships\nembedded in the pql binary; pql --version is the version.\nCatalog and procedure churn live in CHANGELOG.md and git log,\nnot in a duplicate trail inside the skill bundle.\n\nRetirem\n[…]\nion preserved: when a rule is dropped, leave\na stub entry in rules.md so \"we used to check X\" is recoverable\nfrom that file alone.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "clean-house version inherits from pql",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-06T14:42:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "628dad297169b5ed6a3efde5c386381329375684",
          "body": "First end-to-end run surfaced two detection bugs and several\nprocedure gaps. Bundled fixes:\n\nrules.md (T-13):\n  - RULE-ANCHOR-DRIFT detection rewritten. Anchor-only links\n    resolve against the source file's full heading set, not a\n    single record's body headings — record-level '### D-N: …'\n    h\n[…]\nory into a\n    single decisions/.clean-house-state.md so\n    promotion-candidate computation has real data to compute\n    against.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "clean-house v1.1: rules.md + SKILL.md tightening (T-13, T-14)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-06T14:39:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9ff46ae6a7814b1ec5788cc5de649ae694775368",
          "body": "D-8's body referenced [Q-1](#q-1-markdown-mirror-for-tickets) but\nQ-1 lives in questions.md, not architecture.md. Bare anchor links\nresolve only within the current file under standard markdown\nrendering, so the link wouldn't navigate. Added the questions.md\nprefix.\n\nSurfaced by the first end-to-end clean-house run.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix cross-file anchor link in D-8",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-06T14:39:45Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7b484f421f70d25732a31b7a4a05fc746e9c540e",
          "body": "pql skill install (no --user) checks ~/.claude/skills/ first. If any\nbundled skill is already installed there, the suite is treated as\nuser-scope-canonical: install/update at user-scope, and tidy any\nsafely-removable project-scope leftover. Hand-edited project-scope\ncontent is preserved.\n\nThe first \n[…]\nude/skills/clean-house) — user-scope is\nnow the active install, the project-scope copy was the leftover\nthe new auto-tidy removes.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "auto-resolve skill scope: user-scope wins when present (T-11)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-06T13:42:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "06a27c84214d1632f6810879d9970f077231f1d1",
          "body": "Closes T-7. internal/skill grows a Skill type + Bundled list; the\npackage exposes per-skill (Inspect|Install|Uninstall) plus the\nmatching All variants. Bundle hash covers every file in the bundle\n(sorted path+content), so editing references/rules.md marks the\nskill modified — not just edits to SKILL\n[…]\nstall /\nskill uninstall / doctor changes from a single object to an array\nwith a 'name' field per skill — documented in CHANGELOG.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ship clean-house as sibling skill alongside pql (T-10)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-06T13:30:20Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e223495817c0d0d43fd5debfd2cc47de1d447300",
          "body": "Adds a headings:[]{level,text,slug} array to the DecisionDetail\nJSON returned by pql decisions read <id>. Slugs follow GitHub-\nflavored markdown convention (lowercase-hyphen; underscores kept;\nduplicates suffixed -1/-2/...). Fenced code blocks are skipped so\n'# foo' inside a code fence isn't mistake\n[…]\n— the skill can now\nresolve cross-reference link targets against the actual heading\nset without re-parsing decision bodies itself.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "expose body heading anchors on pql decisions read (T-9)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-06T13:02:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fbd6f1f6860feb0f3b5ad3e3ca23428da3c7978b",
          "body": "A documentation-discipline skill for DQR systems. Claude is the\nruntime: reads SKILL.md and references/rules.md, walks decisions/,\nruns the rule catalog, batches findings via AskUserQuestion, applies\nfixes via pql + Edit. Mechanical rules batch into one prompt;\njudgment rules prompt per finding.\n\nEi\n[…]\nller — that's\nT-10. Only one new pql query is needed to support the catalog\n(heading anchors on pql decisions read), filed as T-9.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "add clean-house skill bundle (T-8)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-06T13:02:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "580d3d3da7ed8557c22ab1b413760ee4973881b5",
          "body": "Closes the consistency sweep (T-1). decisions show now uses the\nsame lift-out-and-helper pattern that ticket show/refine/plan-*\nadopted in v1.4.5 / v1.4.8 — local showResult struct gone, replaced\nby a package-level decisionShowTree and buildDecisionTree(ctx, db,\nd, withRefs, withTickets). Output sha\n[…]\nthe helper is here so future\ndecision-anchored verbs (drilldowns from plan status, etc.) have\na canonical shape to render through.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "factor out buildDecisionTree helper (T-3)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-06T12:26:28Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4d41880cd5b8e829584bd7cfa3054e9ad81c6e15",
          "body": "ensureGitHookShim now resolves the effective hooks directory via\n'git config --get core.hooksPath', resolving relative values against\nthe repo root, before deciding where to plant the shim. Repos that\nredirect git's hook directory (e.g. a tracked .githooks/ for a\nproject's own pre-push gate) used to\n[…]\n scripts\n    under .pql/hooks/ stay tracked.\n\nTests: TestResolveHooksPath_* and TestEnsureGitHookShim_WritesToRedirectedHooksPath.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "respect core.hooksPath when planting pql hook shim (T-6)",
          "author_name": "Jeroen Schweitzer",
          "author_login": "postmeridiem",
          "committed_at": "2026-05-06T12:21:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        }
      ],
      "releases_count": 10,
      "commits_last_year": 225,
      "latest_release_at": "2026-07-08T10:49:21Z",
      "latest_release_tag": "v1.11.0",
      "releases_from_tags": false,
      "days_since_last_push": 19,
      "active_weeks_last_year": 9,
      "days_since_latest_release": 19,
      "mean_days_between_releases": 8.6
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 42,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/postmeridiem/pql",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/postmeridiem/pql",
          "is_deprecated": false,
          "latest_version": "v1.11.0",
          "repository_url": "https://github.com/postmeridiem/pql",
          "versions_count": 10,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-08T10:44:06Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 19
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 45851,
      "source_files_sampled": 149,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 8930
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/bmatcuk/doublestar/v4",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v4.10.0"
        },
        {
          "name": "github.com/fsnotify/fsnotify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.9.0"
        },
        {
          "name": "github.com/sabhiram/go-gitignore",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20210923224102-525f6e181f06"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.2"
        },
        {
          "name": "golang.org/x/term",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.42.0"
        },
        {
          "name": "gopkg.in/yaml.v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.1"
        },
        {
          "name": "modernc.org/sqlite",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.49.1"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 4,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "postmeridiem",
          "commits": 206,
          "avatar_url": "https://avatars.githubusercontent.com/u/675641?v=4"
        },
        {
          "type": "User",
          "login": "jschweitzer-imagin",
          "commits": 7,
          "avatar_url": "https://avatars.githubusercontent.com/u/254480985?v=4"
        },
        {
          "type": "User",
          "login": "dehlak",
          "commits": 7,
          "avatar_url": "https://avatars.githubusercontent.com/u/409593?v=4"
        },
        {
          "type": "User",
          "login": "claude",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/81847?v=4"
        }
      ],
      "contributors_sampled": 4,
      "top_contributor_share": 0.916
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yaml",
        "release.yaml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yaml"
      ],
      "has_editorconfig": true,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 2,
            "reason": "1 out of 4 merged PRs checked by a CI test -- score normalized to 2",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 1,
            "reason": "Found 2/18 approved changesets -- score normalized to 1",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 3,
            "reason": "project has 1 contributing companies or organizations -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 5,
            "reason": "dependency not pinned by hash detected -- score normalized to 5",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 8,
            "reason": "2 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "5980af2e41d23e8e65b32435ed4f06c8d780984b",
        "ran_at": "2026-07-28T06:33:41Z",
        "aggregate_score": 4.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-08T10:49:27Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-06-12T10:17:42Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/postmeridiem/pql",
    "host": "github.com",
    "name": "pql",
    "owner": "postmeridiem"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 55,
      "inputs": {
        "security": 41,
        "vitality": 74,
        "community": 24,
        "governance": 53,
        "engineering": 74
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 74,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 63,
            "inputs": {
              "commits_last_year": 225,
              "human_commit_share": 1,
              "days_since_last_push": 19,
              "active_weeks_last_year": 9
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 19 days ago",
                "points": 28.8,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 19
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "9/52 weeks with commits",
                "points": 6.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 9
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "225 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 225
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 10,
              "latest_release_tag": "v1.11.0",
              "releases_from_tags": false,
              "days_since_latest_release": 19,
              "mean_days_between_releases": 8.6
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "10 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 19 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 19
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~8.6 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 8.6
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 24,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 53,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 19,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 4,
              "top_contributor_share": 0.916
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 92% of commits",
                "points": 1.9,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 92
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "4 contributors",
                "points": 5.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 75,
            "inputs": {
              "merged_prs": 4,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "4/4 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 4,
                      "decided": 4
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 2/18 approved changesets -- score normalized to 1",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 36,
            "inputs": {
              "followers": 1,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "postmeridiem",
              "public_repos": 3,
              "account_age_days": 5611
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "1 followers of postmeridiem",
                "points": 2.2,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 1,
                      "login": "postmeridiem"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "3 public repos, account ~15 yr old",
                "points": 16.4,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 3
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 15
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/postmeridiem/pql"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 19
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 19 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 19
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "10 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 74,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yaml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yaml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "1 out of 4 merged PRs checked by a CI test -- score normalized to 2",
                "points": 4,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 41,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 41,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 4.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "1 out of 4 merged PRs checked by a CI test -- score normalized to 2",
                "points": 0.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 2/18 approved changesets -- score normalized to 1",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 5",
                "points": 2.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "2 existing vulnerabilities detected",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "excellent",
        "name": "AI Readiness",
        "value": 89,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 8930
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 100,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 87,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.96,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yaml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yaml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "96 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 96,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 5",
                "points": 5,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 45851,
              "source_files_sampled": 149,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/149 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 149,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-28T06:33:53.355751Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/p/postmeridiem/pql.svg",
  "full_name": "postmeridiem/pql",
  "license_state": "standard",
  "license_spdx": "MIT"
}