Infrastructure automation, repository management, and system configuration scripts for the Hyperpolymath ecosystem (~500+ repos across GitHub, GitLab, Codeberg, and Bitbucket).
This repository contains scripts for:
System configuration — Fedora Kinoite/Atomic hardening, NVIDIA setup, performance tuning
Repository management — Multi-forge sync, policy auditing, RSR standardisation
GitHub Actions validation — CodeQL, SPDX, permissions, SHA-pin checks
Pre-commit hooks — Automated compliance enforcement
Contractiles — Self-validating operational templates (must/trust/dust/lust/k9)
| Script | Purpose |
|---|---|
| Comprehensive Fedora Kinoite hardening: btrfs compression, I/O scheduling, vm.swappiness, security policies |
| Developer environment setup: nerdctl, distrobox, Deno, asdf integration, language toolchains |
| Automated NVIDIA driver detection and installation for Fedora Atomic |
| One-shot system performance optimisation (kernel params, filesystem, memory) |
| Scheduled variant of system-optimize for cron/systemd timers |
| Multi-phase storage migration: cache clearing, directory relocation, symlink creation for Eclipse drive |
| Managed reboot with pre-reboot cleanup and logging |
| Monitor cloud mount points for health and availability |
| Script | Purpose |
|---|---|
| Parallel GitHub repository synchronisation (8 workers via xargs) |
| Single-threaded GitHub sync for sequential operations |
| General-purpose repository sync wrapper |
| Configure multi-forge mirror secrets (GitHub → GitLab/Bitbucket/Codeberg) |
| Elixir-based policy auditor with auto-fix: cruft cleanup, Containerfile enforcement, language violations, Justfile RISC-V targets |
| Julia script for RSR (Rhodium Standard Repository) directory standardisation |
| Julia script for batch repository standards enforcement |
| Script | Purpose |
|---|---|
| Automate GitHub Discussions creation across repositories |
| GitHub Wiki initialisation and templating |
| Cloudflare Workers bootstrapper with ReScript integration |
| Git status checker for CI/CD pipelines |
| Deno script to track system reboot reasons with journalctl/dmesg capture |
Scripts in github-analysis/ for CI/CD validation:
| Script | Purpose |
|---|---|
| Aggregate CI/CD failure analysis across workflows |
| Per-repository CI/CD failure breakdown |
| Validate CodeQL workflow configuration |
| Verify EditorConfig compliance |
| Check GitHub Pages deployment status |
Validation hooks in hooks/ for automated compliance enforcement:
| Hook | Purpose |
|---|---|
| Verify SPDX license headers on all source files |
| Check GitHub Actions workflow permissions are explicit |
| Verify all Actions dependencies are SHA-pinned |
| Validate CodeQL configuration matches repository languages |
Self-validating operational templates in contractiles/. See the Contractiles README for details.
| Type | Purpose |
|---|---|
| Mandatory operational contracts — invariants that must always hold |
| Trust boundary definitions — security perimeter contracts |
| Deprecation contracts — managed removal of old patterns |
| Aspiration contracts — desired future state definitions |
| Nickel-based configuration validators with three security levels (Kennel/Yard/Hunt) |
| Script | Purpose |
|---|---|
| Browser bookmark organisation and deduplication |
| Microsoft Edge bookmark management |
| HTML bookmark export for backup and portability |
Note | Python scripts are legacy. New utility scripts should use Julia or Rust per language policy. |
# Clone from any forge
git clone git@github.com:hyperpolymath/scripts.git
git clone git@gitlab.com:hyperpolymath/scripts.git
git clone git@codeberg.org:hyperpolymath/scripts.git
# List available just recipes
just
# Run the repository auditor
elixir repo_auditor.exs
# Sync all repos in parallel
./sync-repos-parallel.sh
# Install pre-commit hooks
cp hooks/* /path/to/repo/.git/hooks/This repository provides infrastructure scripts that support PanLL indirectly:
Repository auditing ensures PanLL modules meet RSR compliance
Pre-commit hooks validate PanLL schemata files
Multi-forge sync keeps PanLL mirrors current
Contractile validators (k9) can validate PanLL workspace configurations
Direct PanLL panel scripts (schemata generation, workspace layout validation) are maintained within the PanLL monorepo itself.