C-348 Unified Substrate PR: canon drift fix + patch rescue + dep bumps#325
Merged
Conversation
) EPICON: cycle.json frozen at C-338 (last written 2026-06-10) due to mobius-bot-state-sync not executing (bot credentials/scheduling issue, not a missing contents:write — that permission was already present). Manually advancing to C-348 as part of unified C-348 pass. STATE/CYCLE.txt updated in sync. Bot will resume daily arithmetic writes from this baseline on next scheduled run. Ref: Mobius-Substrate issue #321 (canon-drift tripwire).
Bumps the actions group with 1 update: [actions/checkout](https://github.com/actions/checkout). Updates `actions/checkout` from 6 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
… updates Bumps the npm-minor-patch group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [axios](https://github.com/axios/axios) | `1.17.0` | `1.18.0` | | [ethers](https://github.com/ethers-io/ethers.js) | `6.16.0` | `6.17.0` | | [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) | `2.0.9` | `2.0.10` | | [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `3.4.18` | `3.4.19` | | [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.104.1` | `0.105.0` | | [nanoid](https://github.com/ai/nanoid) | `5.1.11` | `5.1.15` | | [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.21.0` | `8.22.0` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.17.0` | `7.18.0` | | [@nomicfoundation/hardhat-chai-matchers](https://github.com/NomicFoundation/hardhat/tree/HEAD/packages/hardhat-chai-matchers) | `2.1.0` | `2.1.2` | Updates `axios` from 1.17.0 to 1.18.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.17.0...v1.18.0) Updates `ethers` from 6.16.0 to 6.17.0 - [Release notes](https://github.com/ethers-io/ethers.js/releases) - [Changelog](https://github.com/ethers-io/ethers.js/blob/main/CHANGELOG.md) - [Commits](ethers-io/ethers.js@v6.16.0...v6.17.0) Updates `http-proxy-middleware` from 2.0.9 to 2.0.10 - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v2.0.10/CHANGELOG.md) - [Commits](chimurai/http-proxy-middleware@v2.0.9...v2.0.10) Updates `tailwindcss` from 3.4.18 to 3.4.19 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v3.4.19/packages/tailwindcss) Updates `@anthropic-ai/sdk` from 0.104.1 to 0.105.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.104.1...sdk-v0.105.0) Updates `nanoid` from 5.1.11 to 5.1.15 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@5.1.11...5.1.15) Updates `pg` from 8.21.0 to 8.22.0 - [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md) - [Commits](https://github.com/brianc/node-postgres/commits/pg@8.22.0/packages/pg) Updates `react-router-dom` from 7.17.0 to 7.18.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.0/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.0/packages/react-router-dom) Updates `@nomicfoundation/hardhat-chai-matchers` from 2.1.0 to 2.1.2 - [Release notes](https://github.com/NomicFoundation/hardhat/releases) - [Changelog](https://github.com/NomicFoundation/hardhat/blob/@nomicfoundation/hardhat-chai-matchers@2.1.2/packages/hardhat-chai-matchers/CHANGELOG.md) - [Commits](https://github.com/NomicFoundation/hardhat/commits/@nomicfoundation/hardhat-chai-matchers@2.1.2/packages/hardhat-chai-matchers) --- updated-dependencies: - dependency-name: axios dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: ethers dependency-version: 6.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: http-proxy-middleware dependency-version: 2.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: tailwindcss dependency-version: 3.4.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@anthropic-ai/sdk" dependency-version: 0.105.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: nanoid dependency-version: 5.1.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: pg dependency-version: 8.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: react-router-dom dependency-version: 7.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@nomicfoundation/hardhat-chai-matchers" dependency-version: 2.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [nodemailer](https://github.com/nodemailer/nodemailer) and [@types/nodemailer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/nodemailer). These dependencies needed to be updated together. Updates `nodemailer` from 6.10.1 to 8.0.11 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](nodemailer/nodemailer@v6.10.1...v8.0.11) Updates `@types/nodemailer` from 6.4.21 to 8.0.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/nodemailer) --- updated-dependencies: - dependency-name: nodemailer dependency-version: 8.0.11 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: "@types/nodemailer" dependency-version: 8.0.1 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [supertest](https://github.com/ladjs/supertest) and [@types/supertest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/supertest). These dependencies needed to be updated together. Updates `supertest` from 6.3.4 to 7.2.2 - [Release notes](https://github.com/ladjs/supertest/releases) - [Commits](forwardemail/supertest@v6.3.4...v7.2.2) Updates `@types/supertest` from 2.0.16 to 7.2.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/supertest) --- updated-dependencies: - dependency-name: supertest dependency-version: 7.2.2 dependency-type: direct:development update-type: version-update:semver-major - dependency-name: "@types/supertest" dependency-version: 7.2.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
|
✅ Drift Compliance: All test vectors passed GI threshold validation |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: bd6b007447
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
Comment on lines
+2
to
+3
| "current_cycle": "C-348", | ||
| "date": "2026-06-22", |
There was a problem hiding this comment.
For the committed date 2026-06-22, the existing watchdog/state-sync formula uses C-288 + days since 2026-04-21 (.github/workflows/canon-drift-tripwire.yml lines 38-41 and mobius-bot-state-sync.yml lines 57-62), which evaluates to C-350, not C-348. Leaving the authoritative root state two cycles behind means this PR does not actually restore canon drift and can even auto-close the watchdog while a two-cycle lag remains; update current_cycle/STATE/CYCLE.txt/next snapshot to the computed cycle, or change the shared anchor formula if C-348 is intended.
Useful? React with 👍 / 👎.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
C-348 Unified Substrate PR
Cycle: C-348
Branch:
claude/c348-unified-substrate-r4rtkjEPICON: All changes recorded with intent. No consequential action without ledger.
Changes
1. Canon Drift Fix (Closes #321)
cycle.jsonadvanced from C-338 → C-348STATE/CYCLE.txtupdated to matchmobius-bot-state-syncAction stopped executing (credentials/scheduling, not missingcontents: write— that permission was already present in the workflow)2. C-347-C / C-347-D Patch Rescue
Mobius-SubstratePR Implement agent ci pipeline with integrity gates #82 is a separate, already-merged PR (agent CI pipeline, Nov 2025) — not the CPC Draft PR Implement agent ci pipeline with integrity gates #82 referenced in the task.patchfiles in the repo (apps/eomm-api/,labs/lab4-proof/,exports/mobius-browser-shell-c274/) are for Browser Shell / EOMM-API, not for the Substrate constitution layer.3. Dependency Updates (cherry-picked from Dependabot PRs)
actions/checkoutnodemailer+@types/nodemailersupertest+@types/supertesthardhatlru-cache4. State-Sync Action Audit
mobius-bot-state-sync.ymlalready hadpermissions: contents: write— no change neededactions/checkoutin the state-sync workflow bumped v6→v7 via chore(deps): bump actions/checkout from 6 to 7 in the actions group #323 cherry-pick aboveExcluded / Deferred
hardhat3.x major bump (PR chore(deps-dev): bump hardhat from 2.22.5 to 3.9.0 #317) — excluded per safety filter; requires full test suite validationlru-cachev10→v11 (PR chore(deps): bump lru-cache from 10.2.0 to 11.5.1 #320) — excluded; constructor signature changed, needs API review before applyingSentinel Sign-off Required
Refs
Generated by Claude Code