Issues

• comment-loc-cap: script/ is uncounted, and one aggregate lets test subsidise src

  rainlanguage/rainix#402 · Filter by author thedavidmeister opened on Oct 3, 2026

• .soldeerignore completeness is enforced by nobody: a missed root file silently ships in the published package and moves the autopublish content hash

  rainlanguage/rainix#395 · Filter by author thedavidmeister opened on Sep 21, 2026
  

• Adoption: 15 consumer repos need script/codegen-manifest.txt before #392 merges

  rainlanguage/rainix#394 · Filter by author thedavidmeister opened on Sep 20, 2026

• rainix-autopublish cannot see that a downstream repo pins a many-revisions-old copy of what it just published

  rainlanguage/rainix#393 · Filter by author thedavidmeister opened on Sep 20, 2026
  

• Ship the .staged-config install step as a rainix action instead of 38 copies of script/build.sh

  rainlanguage/rainix#390 · Filter by author thedavidmeister opened on Sep 16, 2026

• prettier-rainix gates JSON in a repo's own devShell but no-ops in sol-shell, so pre-commit run --all-files is two different gates under one name

  audit
  rainlanguage/rainix#389 · Filter by author thedavidmeister opened on Sep 16, 2026

• A deny-by-default gate lands on all 38 sol consumers in one commit, so 30 go red on a diff that did not cause it

  audit
  rainlanguage/rainix#388 · Filter by author thedavidmeister opened on Sep 16, 2026

• mutation-ledger takes summary.testsAfter on trust; verify it against the tree testsAfterCommit names

  rainlanguage/rainix#387 · Filter by author thedavidmeister opened on Sep 16, 2026

• mutation-ledger: rain.lib.hash went red 33s after #385 merged, on an explicit testsAfterCommit: null and a second producer's tool string

  rainlanguage/rainix#386 · Filter by author thedavidmeister opened on Sep 16, 2026

• Restrict merge methods to merge commits org-wide: squash and rebase orphan the next-v intent tag autopublish reads

  rainlanguage/rainix#383 · Filter by author thedavidmeister opened on Sep 16, 2026

• crates.io returns 403 to nix fetchurl crate downloads, breaking every rain-cli rebuild

  rainlanguage/rainix#377 · Filter by author thedavidmeister opened on Sep 14, 2026

• Reusable workflow and action refs are @main across every consumer, carrying their secrets

  rainlanguage/rainix#368 · Filter by author thedavidmeister opened on Aug 27, 2026
  1

• rainix-copy-artifacts: set permissions: contents: read on the reusable's job

  rainlanguage/rainix#367 · Filter by author thedavidmeister opened on Aug 27, 2026

• rainix-copy-artifacts: declare the CACHIX_AUTH_TOKEN contract so consumers can drop secrets: inherit

  rainlanguage/rainix#366 · Filter by author thedavidmeister opened on Aug 27, 2026

• Upstream the graph-node API schema snapshot check as a reusable workflow, once two consumers have defined its seam

  rainlanguage/rainix#365 · Filter by author thedavidmeister opened on Aug 27, 2026

• rainix-manual-sol-verify runs under a write-scoped GITHUB_TOKEN it never uses; cap it in the reusable, not in each caller

  rainlanguage/rainix#361 · Filter by author thedavidmeister opened on Aug 25, 2026

• Cap the comment-to-source line ratio in rainix-static, floor-only like agent-context-cap

  rainlanguage/rainix#359 · Filter by author thedavidmeister opened on Aug 23, 2026

• autopublish's crates lane pushes to a protected main: deleting a dead deploy key moves the failure, not fixes it

  rainlanguage/rainix#358 · Filter by author thedavidmeister opened on Aug 23, 2026

• copy-artifacts is untracked-blind while release-guard is not: a new generated file passes every PR and kills the tag

  rainlanguage/rainix#357 · Filter by author thedavidmeister opened on Aug 23, 2026

• rainix-static: assert every published Soldeer version still has its frozen src/generated record

  rainlanguage/rainix#355 · Filter by author thedavidmeister opened on Aug 22, 2026

• subgraph-deploy versions a deploy by the consumer repo commit, so a split-out subgraph source collides with itself

  rainlanguage/rainix#354 · Filter by author thedavidmeister opened on Aug 21, 2026

• rainix-autopublish pushes the version bump before publishing, so a failed publish permanently advances the version

  rainlanguage/rainix#353 · Filter by author thedavidmeister opened on Aug 21, 2026

• subgraph-deploy runs npm ci in the same environment as GOLDSKY_TOKEN, so a consumer cannot withhold it

  rainlanguage/rainix#349 · Filter by author thedavidmeister opened on Aug 21, 2026

• Five deploy repos must drop snapshot-generate-cmd before/with #343, and RAINIX_SHA must be bumped after

  rainlanguage/rainix#344 · Filter by author thedavidmeister opened on Aug 21, 2026

• Turn on tag protection: immutable sol-v* and next-v* via org rulesets

  rainlanguage/rainix#337 · Filter by author thedavidmeister opened on Aug 20, 2026