chore(governance): agent-registry 54 SHA 直推豁免登记（ADR-0096）

[randypanding]

摘要

agent-registry 私有仓计费止血删除重建的 §8 豁免登记（ADR: ADR-0096，正本 archive#34）。

• expected-state.json direct_push_exemptions["agent-registry"] 扩至 54 笔完整 SHA（原 2 笔 + 新 52 笔）——drift-check §8 的 52 笔 P0 报警闭环
• comment 登记 (c) 类豁免定性：基础设施事件历史重推（删除重建镜像重推，PR 关联随仓删除物理消失，无新 commit、零内容变更，快照 85/85 blob 零差异）
• REPOS.yaml agent-registry status 注记 ADR-0096（删除重建 + 退役归档态已复原）

背景

agent-registry 初始为私有仓，触发 GitHub 安全产品计费；owner 止血删除后以 public 重建并镜像重推。线上态（auto-merge=true / 12 治理标签 / 重新归档）已复原。

关联

• ADR-0096（archive#34）
• 同批：ADR-0097 conductor 事件面扩展（另一 PR）

Summary by CodeRabbit

• 治理与合规
  • 补充 agent-registry 退役归档、公开重建及数据保真相关说明。
  • 更新基础设施事件历史重推的豁免记录，并扩充已登记的豁免校验清单。
  • 完善豁免分类，提升特殊变更场景的审计与追溯能力。

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 7ff94a59-a3fe-4e01-b4e8-72957dfc2285

📥 Commits

Reviewing files that changed from the base of the PR and between caf3773 and 19661f9.

📒 Files selected for processing (2)

• governance/REPOS.yaml
• governance/expected-state.json

Included review availability: Your plan provides up to 10 included reviews per hour; 8 remain after this review.

---

📝 Walkthrough

Walkthrough

本次变更更新 agent-registry 的退役说明，并在治理状态中登记基础设施事件历史重推豁免及 54 个相关 SHA。

Changes

治理登记

Layer / File(s)	Summary
退役状态与直推豁免登记 governance/REPOS.yaml, governance/expected-state.json	补充 ADR-0096 相关的仓库重建与状态复原说明。新增第三类直推豁免，并将 agent-registry 的豁免 SHA 登记扩展至 54 个。

Suggested labels: tech-debt

Merge Risk: ⚪ Minimal · up to 19661

This updates governance records for agent-registry’s 54 direct-push exemptions and ADR-0096 status; the change is localized and does not introduce an actionable merge-blocking risk beyond normal checks and review.

🚥 Pre-merge checks | ✅ 1 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Title check	⚠️ Warning	标题使用了有效的 Conventional Commits 前缀 chore(governance)，且内容与登记 agent-registry 的 54 个 SHA 直推豁免相关。但标题长度为 57 个字符，超过 50 个字符限制。	将标题缩短至不超过 50 个字符，同时保留 chore 前缀和主要变更内容。

✅ Passed checks (1 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

• Fix all pre-merge checks with AI

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch adr0096-agent-registry-backfill

---

_{Comment @coderabbitai help to get the list of available commands.}

[qodo-code-review]

PR Summary by Qodo

Register agent-registry rebuild exemptions under ADR-0096

⚙️ Configuration changes 📝 Documentation 🕐 10-20 Minutes

AI Description

• Registers all 54 preserved agent-registry commits as ADR-0096 direct-push exemptions.
• Defines infrastructure history replay as a non-repeatable category (c) exemption.
• Records restored public, archived governance state after repository reconstruction.

Diagram

graph TD
  A["Repository Rebuild"] --> B["ADR-0096"] --> C["Expected State"] --> D["Drift Check §8"] --> E["Alerts Cleared"]
  B --> F["Repo Registry"]

Loading

High-Level Assessment

The exact full-SHA allowlist is the appropriate least-privilege approach because it closes only the reconstructed historical commits while preventing future direct pushes from inheriting the exemption. A repository-wide or category-wide bypass would be broader, less auditable, and contrary to the stated non-repeatable incident classification.

Files changed (2) +56 / -4

Documentation (1) +1 / -1

REPOS.yamlAnnotate agent-registry reconstruction and restored retirement state +1/-1

Annotate agent-registry reconstruction and restored retirement state

• Extends the retired agent-registry status note with ADR-0096 reconstruction evidence, exact history preservation, blob equivalence, exemption registration, and restoration of the archived state.

governance/REPOS.yaml

Other (1) +55 / -3

expected-state.jsonRegister category (c) and 54 reconstructed commit exemptions +55/-3

Register category (c) and 54 reconstructed commit exemptions

• Adds infrastructure-event history replay as exemption category (c), documenting why the deleted-and-recreated repository lost PR associations. Expands agent-registry from two to 54 full commit SHAs so drift-check §8 recognizes the preserved history without allowing future commits.

governance/expected-state.json

[qodo-code-review]

Code Review by Qodo

🐞 Bugs (0) 📘 Rule violations (0) 📎 Requirement gaps (0)

Great, no issues found!

Qodo reviewed your code and found no material issues that require review

Tip of the day

💡 Did you know, you can start a comment with 'qodo' or '@qodo' to chat about any finding

More tips ↗ | Customize Qodo ↗ | Qodo docs ↗