From 9cfeea35af487037224b24e125643a724372cae4 Mon Sep 17 00:00:00 2001
From: "J.D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Fri, 18 Sep 2026 16:17:14 +0000
Subject: [PATCH] chore(root): converge the root allowlist with the AsciiDoc
 migration and the www/ bundle
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

scripts/check-root-shape.sh — run as a required step by estate-rules.yml — was
failing on this repository. Two distinct causes:

1. The estate-wide .well-known migration moved the site bundle to
   www/.well-known/, creating a tracked www/ directory at the root. The
   allowlist was not updated. Entry copied verbatim from rsr-template-repo,
   which allowlists www/ for exactly this reason (issue #53).

2. The allowlist names AsciiDoc files that the repository no longer (or never
   did) contain — CHANGELOG.md and friends — while the real .adoc files sit
   unlisted at the root. Added the entries naming the files that exist, using
   the wording the estate already uses for this (lithoglyph).

No files moved and no existing entry removed: only additions.
---
 .machine_readable/root-allow.txt | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.machine_readable/root-allow.txt b/.machine_readable/root-allow.txt
index be3a1e4..d6219b3 100644
--- a/.machine_readable/root-allow.txt
+++ b/.machine_readable/root-allow.txt
@@ -20,10 +20,12 @@ AFFIRMATION.adoc           # dated/signed honesty snapshot (README/EXPLAINME/AFF
 GOVERNANCE.adoc            # governance model (validator accepts root or docs/governance/)
 MAINTAINERS.adoc           # maintainer roster
 CONTRIBUTING.md            # REQUIRED AT ROOT by scorecard-enforcer/openssf-compliance/quality CI (test -f, no .github fallback). The fuller copy in .github/ is GitHub's auto-discovery convention; dedupe is an owner decision (would need those CI checks updated to accept .github/).
+CONTRIBUTING.adoc          # Current contributor guide after the AsciiDoc migration.
 SECURITY.md                # REQUIRED AT ROOT by scorecard-enforcer CI + the security-policy contractile (test -f SECURITY.md). See CONTRIBUTING.md note re: the .github/ copy.
 LICENSE
 LICENSES/                  # REUSE licence texts (MPL-2.0.txt + CC-BY-SA-4.0.txt) for the dual-licence model (code MPL-2.0 / docs CC-BY-SA-4.0)
 CHANGELOG.md
+CHANGELOG.adoc             # Current changelog after the AsciiDoc migration.
 CITATION.cff               # citation metadata (surfaced at root by #96)
 
 # ─── Build entry points (must live at root for their tooling) ────────────────
@@ -44,6 +46,7 @@ sonar-project.properties   # SonarCloud analysis config; the SonarQube scan acti
 .devcontainer/             # VS Code dev container spec; tool-required at root
 .git/
 .github/                   # CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, workflows/
+www/                       # site-operations bundle; canonical .well-known/ lives at www/.well-known/ (issue #53)
 .machine_readable/         # AI manifests, contractiles, custom-format configs
 .well-known/
 ci/                        # .gitlab-ci.yml, .pre-commit-config.yaml (root shims if tools require)