bitfuckit

Ada/SPARK repository auditor (health, compliance, security posture)

Table of Contents

• What this is
• Quick start
• What you get
• Repository map
• Where to go next
• Licence

What this is

bitfuckit is registered in the reposystem tool ecosystem (reposystem/config/tools.ncl) as a utility-role tool with a single declared action, audit: it audits Ada/SPARK repositories for health, compliance, and security posture.

It was scaffolded from the Rhodium Standard Repository (RSR) template (rsr-template-repo), which is why it ships with CI/CD, machine-readable project metadata, an AI-agent gatekeeper protocol, a formally-typed ABI/FFI seam (Idris2 + Zig), container and reproducible-build scaffolding, and governance infrastructure. The RSR scaffolding is fully instantiated; the audit logic itself is not yet implemented — see .machine_readable/6a2/STATE.a2ml for the honest current state (the ABI/FFI seam compiles and its own tests pass; src/core, src/definitions, src/aspects, src/errors, and src/bridges are still README-only scaffolding).

Quick start

# See the available tasks:
just                     # lists all phases (build, test, validate, audit, ...)

# Build and test the Zig FFI layer:
just build
just test

# Check the repo still satisfies the RSR shape:
just validate            # structure + metadata checks

What you get

• Machine-readable metadata (.machine_readable/6a2/) — STATE, META, ECOSYSTEM, PLAYBOOK, AGENTIC, NEUROSYM, CLADE, and anchors/ANCHOR, in a2ml, so tools and agents can read the project’s state and boundaries.

• AI gatekeeper protocol — 0-AI-MANIFEST.a2ml is the universal entry point that tells an AI agent how to work in this repo before it touches anything.

• Typed ABI/FFI seam — src/interface/Abi/ (Idris2 type + layout proofs) over src/interface/ffi/ (Zig implementation), with generated C headers.

• CI/CD — GitHub Actions for quality, security (CodeQL, Scorecard, secret scanning), multi-forge mirroring, and RSR anti-pattern enforcement.

• Supply-chain & reproducibility — container layering (stapeln), Nix/Guix shells, SBOM, and signing hooks.

• Governance — GOVERNANCE.adoc, MAINTAINERS.adoc, .github/ community health files, and a release AUDIT.adoc gate.

Repository map

Path	What lives there
0-AI-MANIFEST.a2ml	Universal entry point for AI agents (read first).
.machine_readable/	Project metadata, policies, contractiles, AI configs.
src/interface/	Typed ABI (Idris2) + FFI (Zig) + generated headers.
docs/	Onboarding, status, governance, practice, decisions.
build/, Justfile	Task orchestration (just phases delegate to build/just/*.just).
.github/	Workflows + community health files.
tests/, benches/	Test suites and benchmarks.

Where to go next

• EXPLAINME.adoc — how the RSR template mechanics map to real files in this repo.

• AUDIT.adoc — the release audit gate.

• .machine_readable/6a2/STATE.a2ml — the current, honest project state.

Licence

Released under the Mozilla Public License 2.0 unless a per-file SPDX-License-Identifier says otherwise.