fix: allow REUSE LICENSES/ dir in root-shape allowlist

[hyperpolymath]

Summary

• check-root-shape.sh was rejecting LICENSES/, the directory REUSE compliance mandates for licence texts.
• .machine_readable/root-allow.txt never listed it, so a correctly-REUSE-compliant repo was being flagged as root drift.
• Adds the canonical allowlist entry, copied verbatim from the already-fixed reference at this-ssg.

Test plan

• bash scripts/check-root-shape.sh . no longer flags LICENSES/
• Only .machine_readable/root-allow.txt touched (1 line added)

🤖 Generated with Claude Code

---

Summary by Gitar

• Root-shape allowlist updates:
  • Added flake.nix to .machine_readable/root-allow.txt pending the Nix-retirement decision

_{This will update automatically on new commits.}

[gitar-bot]

Gitar has auto-approved this PR (configure)

[gitar-bot]

Gitar has auto-approved this PR (configure)

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[gitar-bot]

CI failed: Multiple CI checks failed due to a missing root allowlist entry for flake.nix, an unpinned GitHub action reference, K9 validation errors on example files, and a Markdown file found under docs/ where AsciiDoc is required.

Overview

Analysis of 5 CI logs across 4 unique error templates revealed several change-related validation failures, including missing root-shape allowlist entries, unpinned actions, strict K9 contract validation errors on example files, and unallowed Markdown documentation files.

Failures

Root Shape Check Failure (confidence: high)

• Type: configuration
• Affected jobs: 90106084297
• Related to change: yes
• Root cause: flake.nix is present in the repository root but missing from the .machine_readable/root-allow.txt allowlist.
• Suggested fix: Add flake.nix to .machine_readable/root-allow.txt.

Unpinned GitHub Action Reference (confidence: high)

• Type: tooling
• Affected jobs: 90106081314, 90106292057
• Related to change: yes
• Root cause: The GitHub action reference in .github/workflows/rsr-antipattern.yml:15 uses a branch name (@main) instead of a full commit SHA hash.
• Suggested fix: Replace @main with the corresponding full commit SHA of the action repository.

K9 Contract Validation Failure (confidence: high)

• Type: build
• Affected jobs: 90106084470, 90106292406
• Related to change: yes
• Root cause: K9 contract validation scanned example files under .machine_readable/ that are not fully compliant production contracts.
• Suggested fix: Exclude example files/directories (e.g., via INPUT_PATHS_IGNORE) from K9 contract validation.

Documentation Format Check Failure (confidence: high)

• Type: configuration
• Affected jobs: 90106292057
• Related to change: yes
• Root cause: A .md file was found under docs/, violating the repository rule requiring AsciiDoc (.adoc) by default.
• Suggested fix: Convert the .md file to .adoc or add a justified entry to the allowed list in the validation script.

Summary

• Change-related failures: 4 distinct validation failures (root shape configuration, unpinned action, K9 contract validation, and documentation format rules).
• Infrastructure/flaky failures: 0 infrastructure or flaky failures.
• Recommended action: Update the root-shape allowlist, pin the GitHub action by SHA, ignore example paths in K9 validation, and ensure all documentation under docs/ uses AsciiDoc format.

Code Review ✅ Approved

Updates the root-shape allowlist to permit the canonical LICENSES/ directory and flake.nix. No issues found.

Auto-approved: No blocking issues found.
Please see Auto-approve Docs for details on setting custom approval criteria.

Tip

Comment Gitar fix CI or enable auto-apply: gitar auto-apply:on

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing less information.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}