View source on GitHub →

Session Handoff — 2026-03-22

Branch

main (all work merged)

Commits this session

  • 517c9cb7 Merge pull request #1394 — skills architecture rewrite
  • 1f94cbe4 chore(skills): add repo-aware operational skill layer
  • 365dcb35 Merge pull request #1393 — sync-stats workflow fix
  • 51c0d902 fix(ci): make sync-stats push non-fatal on branch protection
  • 9e7a0f6c Merge pull request #1390 — icn-obs attestation thresholds
  • fcbda471 Merge pull request #1392 — icn-ledger CreditPolicy + docs update
  • (Sprint 22 PRs #1389, #1391 also merged earlier in session)

Open PRs

None. All Sprint 22 PRs and follow-up fixes are merged.

Sprint 22 — Complete

All 5 sprint tasks closed:

Task PR Description
s22-t1 #1389 icn-security: max_violations_per_hour + violation_retention_secs → SecurityConfig
s22-t2 #1391 icn-compute: CharterPriority preemption + credit ceiling → ComputePolicyConfig
s22-t3 #1392 icn-ledger: CreditPolicy / NewMemberPolicy → LedgerConfig in icn-core
s22-t4 #1390 icn-obs: 5 attestation consts → ContributionAttestationConfig in icn-core
s22-t5 #1392 Meaning firewall audit doc updated with Sprint 22 status

Meaning Firewall status: all 8 original violations remediated across icn-compute, icn-security, icn-ledger, icn-obs. Deferred (icn-core effect labels) remains LOW priority for Sprint 23+.

CI fixes applied this session

Two CI patterns hit mid-run and pre-encoded for next time:

  1. #[deprecated] in --all-targets test code (PR #1390):

    • Root cause: CI uses --all-targets -D warnings; deprecated constants fire as errors even in test code.
    • Fix: Replace raw constant refs with AttestationThresholds::default().<field> in tests.
    • Now seeded in /fix-rust-lints skill.

  2. field_reassign_with_default (PR #1390, config tests):

    • Root cause: let mut cfg = T::default(); cfg.field = val; triggers the lint.
    • Fix: Struct update syntax T { field: val, ..Default::default() }.
    • Now seeded in /fix-rust-lints skill.

Main branch workflow fix

Sync Website Stats (PR #1393): Daily cron failing with GH006: Protected branch update failed.

  • Root cause: GITHUB_TOKEN cannot push to protected main (requires status checks).
  • Fix: continue-on-error: true on the commit step — stats.json is gitignored and regenerated at deploy time anyway.
  • Now documented in /repair-gh-workflow skill.

Skills architecture rewrite (PR #1394)

Redesigned .claude/skills/ from command wrappers to repo-aware operational memory.

New skills:

  • /resolve-pr-branch — GitHub-authoritative branch resolution (no more stale plan names)
  • /resolve-rust-targets — cargo metadata for package names (no more icn-ledger-app dead ends)
  • /fix-rust-lints — lint family classification with canonical fixes + ICN-specific heuristics
  • /integrate-pr-stack — full merge pipeline (resolve → order → merge → rebase → verify → pull)
  • /watch-ci-and-advance — CI as queue system; advance work while runner is busy
  • /repair-gh-workflow — workflow diagnosis with branch protection + token capability awareness

Updated skills: /push (scoped verification, package name table), /merge-prs (stack-integration pipeline).

Root CLAUDE.md skills table reorganized into functional groups.

Open threads

  • Sprint 23 planning not started. Deferred items: icn-core effect labels (LOW), per-coop PolicyOracle wiring (LARGE — needs design session first)
  • Test Coverage non-blocking check fails on main occasionally — not a blocker, but worth investigating if it becomes consistent
  • ops/state/sprint/current.json sprint board shows Sprint 22 tasks; should be closed/archived at Sprint 23 kickoff

Uncommitted changes

None. Working tree clean.

Next steps

  1. Open Sprint 23: run mcp__icn-ops__close_sprint on Sprint 22, create new current.json
  2. Decide scope for Sprint 23: icn-core effect labels? PolicyOracle wiring design? Other?
  3. Per-coop PolicyOracle (deferred from S21+S22): needs a design session before implementation — scope is large (~800–1000 LOC)

Notes

Merge sequencing lesson: After each merge to main with strict: true branch protection, remaining PR branches become stale and must be rebased before their CI can satisfy the "up to date" requirement. The rebase sometimes triggers a new CI run. If the runner is queue-saturated, local --all-targets clippy + --admin merge is the correct path.

Package naming: ICN workspace has both icn-ledger (crate at crates/icn-ledger) and icn-ledger-actor (app at apps/ledger). Human label "ledger app" → icn-ledger-actor. This is now in /push and /resolve-rust-targets.

GITHUB_TOKEN capability: It has contents: write but cannot bypass required-status-check branch protection. Any workflow that auto-commits to main needs either a PAT, a PR-based flow, or continue-on-error: true if the write-back is non-essential.

← Back to Docs