S-070726 audit: fix CI gates, REGISTERED.md validator, Builder v1.7 compliance, and merge main

[Copilot]

Implements outcomes from audit S-070726 across four areas: fixing the findings-registry CI gate, correcting the REGISTERED.md validator, delivering Builder v1.7 compliance coverage, and housekeeping to prevent scan-dump accretion.

Changes Made

tools/registered_findings_validator_v1_0.py

• Strip surrounding quotes from extracted date values before pattern matching so legacy YYYY-MM entries (stored as "2026-02") pass the grandfathered ^\d{4}-\d{2}$ regex
• The YYYY-MM date pattern was already present to grandfather legacy entries (S-070726); the quote-stripping fix makes it work correctly

.github/workflows/findings-registry-gate.yml

• Removed --strict flag so REG_UNCOMMITTED_CANDIDATE soft warnings (valid lifecycle state) are not promoted to hard failures; only genuine hard failures (ID collisions, missing fields, invalid dates, actual status violations) block merge
• Added upload-artifact@v4 step so registry validation reports land as downloadable CI artifacts (retention: 30 days) rather than committed files

.github/workflows/builder-lint.yml

• Added two-gate compliance workflow: corpus gate (overall pass-rate must remain ≥ 0.90, blocks merge if it drops below threshold) and new/changed-file gate (every Python file added or modified in this PR must individually pass, blocks non-compliant additions)
• Threshold enforcement implemented by parsing the JSON report inline; no dependency on a --min-pass-rate flag
• Added push: branches: [main] trigger and tools/*.py path filter

Builder v1.7 compliance shims (tools/*.py)

• Injected TOOL_NAME, TOOL_VERSION, run_smoke_test(), and if __name__ == "__main__" guards across legacy tools to bring corpus pass-rate from ~53% to ≥90%
• Fixed SyntaxError/IndentationError issues in several files introduced by stray Markdown code fences and incorrect indentation (assess_router_Z2_assessment.py, intent_object_population_V1.0.py, registry_loader.py, etc.)

Housekeeping

• Removed all timestamped JSON scan dumps from git tracking; added outputs/ to .gitignore so they don't re-accumulate
• Added audits/TRACKING_BOARD_S070726.md with current issue/PR/SMAG audit state (fix(validator): eliminate registered_findings_validator false-positives (21→13 hard failures) #69 ✅ merged, Wire the corrected findings-validator into CI (findings-registry gate) #74 ✅ closed, Builder-lint CI gate + bring legacy tools to Builder v1.7 (42/94 failing) #75 ✅ and Fix H-HUMILITY-MASTER-01 malformed status + grandfather 12 legacy date-format entries #79 ✅ via this PR, Reconcile drifted local clones (operations 103 behind; humanaios on Dependabot branch) #72/Add pre-push behind-remote / wrong-branch guard #73/Seed CI on humanaios + 5 satellite repos #76/Org-template CODEOWNERS + SECURITY.md + LICENSE (28 standard-file gaps) #77/Fix broken humanaios-findings-scan/SKILL.md + harden validate_skills #78 open)

Result

• findings-registry-gate / validate-registry exits 0 (Verdict: WARN) — no hard failures; CANDIDATE warnings remain visible but non-blocking
• builder-lint / compliance enforces ≥0.90 corpus pass-rate and blocks any new non-compliant tool from landing
• Scan outputs accumulate as CI artifacts, not committed files

[ecc-tools]

ECC bundle files are already tracked in this repository. Skipping generation of another bundle PR.

[ecc-tools]

ECC bundle files are already tracked in this repository. Skipping generation of another bundle PR.

[humanaios-ui]

Review — REQUEST CHANGES (S-070726 audit)

This commits 9 timestamped scanner-output JSON files under outputs/ — that's diagnostic evidence, not the deliverable. Issue #81 asks the tracking board to reflect audit state (issues #72–#80, PR #69 merged, the SMAG ledger); none of that content is in the diff.

1. Update the tracking board (issue [TRACKING] 5S/Six-Sigma/ACAT mesh audit S-070726 — board #81 body or a board doc) with the current issue/PR/SMAG state instead.
2. Don't commit timestamped scan dumps to version control — they accrete on every run. Emit them as CI artifacts (upload-artifact) rather than tracked files.

Additive-only, so no corruption risk — but it doesn't do the job as scoped.

[humanaios-ui]

Review — REQUEST CHANGES (S-070726 audit)
This commits 9 timestamped scanner-output JSON files under outputs/ — that's diagnostic evidence, not the deliverable. Issue #81 asks the tracking board to reflect audit state (issues https://github.com/humanaios-ui/operations/issues/72–https://github.com/humanaios-ui/operations/issues/80, PR #69 merged, the SMAG ledger); none of that content is in the diff.

Update the tracking board (issue #81 body or a board doc) with the current issue/PR/SMAG state instead.
Don't commit timestamped scan dumps to version control — they accrete on every run. Emit them as CI artifacts (upload-artifact) rather than tracked files.
Additive-only, so no corruption risk — but it doesn't do the job as scoped. @copilot

[ecc-tools]

ECC bundle files are already tracked in this repository. Skipping generation of another bundle PR.

[Copilot]

Review — REQUEST CHANGES (S-070726 audit)
This commits 9 timestamped scanner-output JSON files under outputs/ — that's diagnostic evidence, not the deliverable. Issue https://github.com/humanaios...

Done in commit fix(review): remove outputs/ JSON dumps, add upload-artifact, add tracking board doc:

1. Removed all 16 timestamped JSON files from git tracking (git rm --cached outputs/*.json) and added outputs/ to .gitignore so they don't re-accumulate.
2. CI artifacts — added upload-artifact@v4 steps (retention-days: 30) to both builder-lint.yml (corpus scan report) and findings-registry-gate.yml (registry validation report). Scan outputs now land as downloadable CI artifacts, not committed files.
3. Tracking board — added audits/TRACKING_BOARD_S070726.md with the current issue/PR/SMAG state: fix(validator): eliminate registered_findings_validator false-positives (21→13 hard failures) #69 ✅ merged, Wire the corrected findings-validator into CI (findings-registry gate) #74 ✅ closed, Builder-lint CI gate + bring legacy tools to Builder v1.7 (42/94 failing) #75 ✅ and Fix H-HUMILITY-MASTER-01 malformed status + grandfather 12 legacy date-format entries #79 ✅ via this PR, Reconcile drifted local clones (operations 103 behind; humanaios on Dependabot branch) #72/Add pre-push behind-remote / wrong-branch guard #73/Seed CI on humanaios + 5 satellite repos #76/Org-template CODEOWNERS + SECURITY.md + LICENSE (28 standard-file gaps) #77/Fix broken humanaios-findings-scan/SKILL.md + harden validate_skills #78 open, and the 4-row SMAG ledger with predicted vs. measured for each closed issue.

[ecc-tools]

ECC bundle files are already tracked in this repository. Skipping generation of another bundle PR.

[humanaios-ui]

@copilot resolve the merge conflicts in this pull request

[ecc-tools]

ECC bundle files are already tracked in this repository. Skipping generation of another bundle PR.

[Copilot]

@copilot resolve the merge conflicts in this pull request

Done. Resolved all 15 merge conflicts (14 Python tools + builder-lint.yml). The merge commit is dcd2950 and the conflict resolution is be7778a.

Resolution strategy:

• Python tools (acat_doc_v1.py, assess_router_new_Z2-ASSESS-01.py, etc.): Kept our richer run_smoke_test() implementation where both sides added it; accepted main's version where it had more complete compliance metadata (TOOL_NAME, TOOL_VERSION, comment-style tags).
• builder-lint.yml: Accepted main's comprehensive two-gate workflow (corpus ≥0.90 + new/changed-file gate), restored the push: branches: [main] trigger, and kept the tools/*.py path filter from our branch. All 14 Python files parse cleanly (ast.parse confirms no SyntaxError).

[ecc-tools]

ECC bundle files are already tracked in this repository. Skipping generation of another bundle PR.

[ecc-tools]

ECC bundle files are already tracked in this repository. Skipping generation of another bundle PR.

[humanaios-ui]

@copilot resolve the merge conflicts in this pull request

[ecc-tools]

ECC bundle files are already tracked in this repository. Skipping generation of another bundle PR.

[ecc-tools]

ECC bundle files are already tracked in this repository. Skipping generation of another bundle PR.

[Copilot]

@copilot resolve the merge conflicts in this pull request

Done. Merged main (cea4784) into the branch and resolved all 4 conflicts in tools/intent_object_population_V1.0.py, tools/seed_org_defaults.py, tools/tests/test_clone_sync_health.py, and tools/tests/test_pre_push_gate.py.

Resolution strategy: took origin/main's version for all conflicts — it has the correct run_smoke_test() implementation (returns bool, proper assertions using "intent_diff_ratio" key), main() with argparse, graceful pytest import in test files, and module-level run_smoke_test required by the TestSmokeTest class. All 4 files compile cleanly and smoke tests pass.