From 16c9e0c9bd92fb96d9e45ed2cb2c098e7e264902 Mon Sep 17 00:00:00 2001
From: "J.D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Fri, 18 Sep 2026 16:17:14 +0000
Subject: [PATCH] chore(root): converge the root allowlist with the AsciiDoc
 migration and the www/ bundle
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

scripts/check-root-shape.sh — run as a required step by estate-rules.yml — was
failing on this repository. Two distinct causes:

1. The estate-wide .well-known migration moved the site bundle to
   www/.well-known/, creating a tracked www/ directory at the root. The
   allowlist was not updated. Entry copied verbatim from rsr-template-repo,
   which allowlists www/ for exactly this reason (issue #53).

2. The allowlist names AsciiDoc files that the repository no longer (or never
   did) contain — CHANGELOG.md and friends — while the real .adoc files sit
   unlisted at the root. Added the entries naming the files that exist, using
   the wording the estate already uses for this (lithoglyph).

No files moved and no existing entry removed: only additions.
---
 .machine_readable/root-allow.txt | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.machine_readable/root-allow.txt b/.machine_readable/root-allow.txt
index 5935380..b15dce6 100644
--- a/.machine_readable/root-allow.txt
+++ b/.machine_readable/root-allow.txt
@@ -50,6 +50,7 @@ sonar-project.properties   # SonarCloud analysis config; the SonarQube scan acti
 .devcontainer/             # VS Code dev container spec; tool-required at root
 .git/
 .github/                   # CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, workflows/
+www/                       # site-operations bundle; canonical .well-known/ lives at www/.well-known/ (issue #53)
 .machine_readable/         # AI manifests, contractiles, custom-format configs
 .well-known/
 build/                     # contractile.just, setup.sh, guix.scm, .guix-channel, Containerfile