Dashboard › institutional-transition-lab › Distillation
dc90b403-db45-480f-98ac-024ca4555648["lore_tm_v1_367HEjE4qcKOClWYEzdoG2djHq4mIYaCBC-tIHJkmaY","lore_tm_v1_7MREo_YzSiae-IipeblxSe4C5mNeV-J2RLcFiGW-gqk"]
Date: Sep 9, 2026
documents.json excerpt from /home/byk/Code/institutional-transition-lab/cases/review/oss-governance-adjudication-v1/documents.json, lines 836–887 of 1714.terraform-github-pr-22745 is a merged HashiCorp Terraform pull request titled Habitat License Acceptance changes, published and merged on 2019-09-09; metadata reports changed_files: 4, base_sha: fb1aefe22b5d880459ad48ed98357e23730bd668, head_sha: 50a6c69ab52eb9b0115d115af532e58998c64bf9, and merge_commit_sha: 7a9f2717febb801e39044404d1ff003b39f4cc9f. (meaning September 9, 2019)terraform-github-pr-22745, builtin/provisioners/habitat/resource_provisioner.go adds AcceptLicense bool and a required Boolean accept_license schema argument; validates version using github.com/hashicorp/go-version; and rejects accept_license=false for Habitat versions greater than 0.79.0 or an unspecified/latest version with Habitat end user license agreement needs to be accepted, set the accept_license argument to true to accept.terraform-github-pr-22745, website/docs/provisioners/habitat.html.markdown adds accept_license = true to the example and documents accept_license (bool) as required for accepting the Habitat EULA.terraform-github-pr-22745, website/docs/provisioners/chef.html.markdown states the Chef EULA must be accepted by setting chef_license to accept in client_options unless installing an old Chef client, and adds client_options = ["chef_license 'accept'"] to the example.detectAbsFilePath should “always be the last detector.”detectAbsFilePath should “always claim everything it's given” unless the input is an empty string.documents.json excerpt from /home/byk/Code/institutional-transition-lab/cases/review/oss-governance-adjudication-v1/documents.json, lines 1018–1247 of 1714.MPL-2.0 to BUSL-1.1.terraform-github-pr-34096, published 2023-10-16 and merged 2023-10-17T14:06:38Z, updates HCL to v2.19.0; ext/dynblock: dynblock.Expand gains an optional hook allowing callers to veto particular for_each values by returning error diagnostics, while hclsyntax receives further fixes for marked and refined values in conditional expressions. Metadata: changed_files: 2, base_sha: 707c426f6892285fc116d68d32559e791a7ab199, head_sha: 1f271185986bcb30eb3e19fcae4457b122f43147, and merge_commit_sha: 493056d828ab0cd17def8e0193f71f4bfe8f9628. (meaning October 16–17, 2023)terraform-github-pr-34103, published and merged 2023-10-17, backports terraform-github-pr-34096 and HCL v2.19.0 into Terraform v1.6; metadata reports changed_files: 2, base_sha: 464e0a9e98880a408807b01d775ea9e32fa326d0, head_sha: 5caa5bc8e8e52fe09dec0397fcccd6fbfe0d924d, and merge_commit_sha: 0c855b0d5e6fe2a9578106f47438fffc4eba3d0e. (meaning October 17, 2023)terraform-github-pr-34847, published and merged 2024-03-14, makes Terraform responsible for its own module source address normalization and prunes indirect backend dependencies; the rationale is to protect Terraform v1.x compatibility from upstream go-getter changes and reduce unnecessary backend-maintainer review requests. Metadata reports changed_files: 86, base_sha: ca2be46b0e4db9ab64e649da771d527dcd08c505, head_sha: 625b32501cd6f637b82cd6c537033b9c3c6cabf1, and merge_commit_sha: 84df5562f21ae587bbb7e9b2a1c5ada582d0ba11. (meaning March 14, 2024)terraform-github-pr-34847 moves module-source parsing and normalization responsibility toward internal/getmodules/moduleaddrs: relevant files include internal/addrs/module_source.go, internal/getmodules/getter.go, internal/getmodules/moduleaddrs/detect_abs_filepath.go, detect_gcs.go, detect_git.go, detect_remote_shorthands.go, detect_s3.go, package.go, and source_parsing.go, with corresponding *_test.go files.internal/getmodules/moduleaddrs/detect_remote_shorthands.go, the backward-compatibility-only detectors order is exactly: 1. detectGitHub, 2. detectGit, 3. detectBitBucket, 4. detectGCS, 5. detectS3, 6. detectAbsFilePath; the code warns not to add new detectors because new source types should use canonical source-address syntax.internal/getmodules/moduleaddrs/detect_abs_filepath.go, detectAbsFilePath(src string) replaces the prior fileDetector.Detect(src, pwd string) approach: empty input is unclaimed, relative paths return *MaybeRelativePathErr, absolute paths become file:// URLs, and the function must be last because it claims every non-empty input.internal/getmodules/moduleaddrs/detect_gcs.go, detectGCS converts schemeless googleapis.com/ references to gcs::https://www.googleapis.com/storage/...; internal/getmodules/moduleaddrs/detect_gcs_test.go tests www.googleapis.com/storage/v1/bucket/foo, /foo/bar, and /foo/bar.baz forms.internal/getmodules/moduleaddrs/detect_git.go, detectGit accepts SSH-like Git sources only when the username is git; detectGitHub converts github.com/username/repo shorthand into a git::https://... URL, appending .git and preserving a module subdirectory where present; the file also defines detectBitBucket.internal/getmodules/moduleaddrs/detect_s3.go, detectS3 handles Amazon S3 path-style, old virtual-host style, and new five-part virtual-host style references through detectS3PathStyle, detectS3OldVhostStyle, and detectS3NewVhostStyle; outputs use the s3::https://... form.internal/configs/configtesting/synth_body.go and internal/configs/configtesting/synth_body_test.go change package declaration from configs to configtesting.terraform-github-pr-38385, published 2026-04-15, proposed AI-agent governance generated by crag; it was closed without merge. Metadata reports changed_files: 12, base_sha: c05eaaf20d0fdd5a755c7d81422c5e0110bd1b67, head_sha: 0b9819f68301eafaa8542a0d54bd56c33e680bb2, and merge_commit_sha: 55ae4d98b4c52c41f8e05936dbe7a5e55ca1eb28. (meaning April 15, 2026)terraform-github-pr-38385 proposed one governance.md source generating 14 tool configurations, explicitly including CLAUDE.md, AGENTS.md, .cursor/rules/governance.mdc, .github/copilot-instructions.md, and GEMINI.md, plus 9 other tool configs; regeneration command: npx @whitehatd/crag; optional pre-commit setup: npx @whitehatd/crag hook install; CI drift detection: .github/workflows/crag-audit.yml using WhitehatD/crag-audit-action@v1..claude/governance.md identifies Terraform as a Go/Docker monolith using GitHub Actions, Go >=1.25.8, trunk-based development, free-form commits, and the trailer Co-Authored-By: Claude <noreply@anthropic.com>; it allows auto-commit after gates pass and treats .github/, docs/, scripts/, and tools/ as key directories..claude/governance.md gates, in order, are: 1. go vet ./...; 2. go test ./...; 3. go test -race -timeout=30m -v ./tfexec/internal/e2etest; 4. go test -cover "./..."); 5. go test -race ./internal/terraform ./internal/command ./internal/states; 6. make syncdeps; 7. make fmtcheck importscheck vetcheck copyright generate staticcheck exhaustive protobuf; with go build # from .github/CONTRIBUTING.md marked advisory..claude/governance.md lists hadolint Dockerfile and actionlint as informational advisories; requires checking for hardcoded sk_live, AKIA, and password= secrets; and prohibits ignored returned errors, panic() in library code, unnecessary init() functions, unpinned latest Docker base tags, and running containers as root..amazonq/rules/governance.md instructs Amazon Q to run governance gates before suggesting commits, treat MANDATORY failures as blocking while OPTIONAL warns and ADVISORY is informational, honor path and conditional scopes, avoid secrets, keep diffs minimal, stay within the repository, avoid destructive commands and force-pushing main, and add no dependency without an explicit reason; it names .claude/governance.md as the source of truth..cursor/rules/governance.mdc applies to **/*.go with alwaysApply: true, identifies the stack as Go and Docker, and repeats the ordered lint, test, CI, security, and commit-convention rules.