docs(adr): record the metadatastician package-owner widening as ADR 0003

[hyperpolymath]

Summary

#109 registered the nine Marid Tier-1 packages and, in the same change, widened ci/validate.jl Layer 2b so a package repo may be owned by hyperpolymath or metadatastician. It carried no ADR. This PR adds that ADR. It records the decision #109 implemented and makes one rule explicit: the set of allowed owners is closed, so adding an organisation takes another ADR.

It contains no code change. ci/validate.jl differs from main only in the comment on ALLOWED_PACKAGE_OWNERS.

On 2026-10-09 the owner ruled that the metadatastician widening be recorded in its own PR with ADR 0003. This PR was opened before #109 merged, with its own implementation. When #109 landed first, I merged main in, kept main's code (EXPECTED_SLUG_OWNER, ALLOWED_PACKAGE_OWNERS, allowed_package_owner) and dropped my parallel constants. What remains is the record.

It changes registry policy text, so it needs BDFL review. Automerge is not armed.

Note

Merged 2026-10-09T00:26:21Z as 991a5b7 (signed by web-flow), after #107 (e8383fb). Before merging, GitHub merged main into the branch as cdc8e9b3, so main is #107 plus exactly the four files below (+85/−2). This body was updated after the merge.

On main 991a5b7, ci/validate.jl gives rc=0: 41 packages, 0 custom errors and 0 owner mismatches. ADR numbers do not collide: #107 carries ADR 0002 and this PR carries ADR 0003.

Changes

• docs/decisions/0003-package-repos-in-metadatastician.adoc (new):
  • context: D54-A, plus D321 (stage 1 of D67-A on marid#21) and D322;
  • three decisions:
    1. packages may be owned by either organisation;
    2. the set is closed;
    3. Registry.toml's own repo stays hyperpolymath;
  • three alternatives rejected;
  • the consequences. The ADR names feat(registry): register the nine Marid Tier-1 packages at v0.1.0 (D321/D322) #109 / 7c52894 as the implementation.
• docs/REGISTRY-POLICY.adoc: one sentence after the Layer 2b paragraph says the set is closed and links ADR 0003.
• ci/validate.jl: the comment on ALLOWED_PACKAGE_OWNERS gains the same sentence. No executable line changes.
• CHANGELOG.adoc [Unreleased] → Added: one entry for the ADR, directly below feat(registry): register the nine Marid Tier-1 packages at v0.1.0 (D321/D322) #109's Marid entry.

📌 New pins

• Head SHA: cdc8e9b3dbec0bc7aea480e81c667047c26294a2. This is GitHub's "Update branch" merge of main e8383fb (feat(registry)!: re-mint ten placeholder UUIDs as UUIDv8 and re-register (ADR 0002) #107) into 8d7eeb36, my signed merge of main 7c52894. The branch's first commit, a4a4bef, is also signed.
• Action pins: none. No workflow, actions.lock, lockfile or container digest changes.

RSR Quality Checklist

Required

• No banned language patterns: AsciiDoc, plus one comment in an existing Julia file.
• SPDX license headers on new files: the ADR has CC-BY-SA-4.0, matching ADR 0001.
• No secrets, credentials or .env files.
• CI is green: not entirely. Three non-required checks are red on main at 7c52894 too (and at 9e4dc83 before it), so this PR does not cause them. They are deferred below.

Deferred checks (§5c)

• actions.lock is in sync with the workflow YAML: deferred to CI: actions.lock out of sync after Dependabot #106 bumped smtp-notify-action to v0.5.0 #108. Dependabot chore(deps): bump hyperpolymath/smtp-notify-action from 0.3.0 to 0.5.0 in the actions group #106 bumped smtp-notify-action to v0.5.0 without refreshing .github/workflows/actions.lock.
• governance / Allowlist Preflight: deferred to CI: governance linter calls a missing scripts/update-actions-lock.sh; Allowlist Preflight runs with an empty GH_TOKEN #105. GH_TOKEN is empty in the step, so it reports could not read live Actions permissions.
• governance / Workflow security linter: deferred to CI: governance linter calls a missing scripts/update-actions-lock.sh; Allowlist Preflight runs with an empty GH_TOKEN #105. scripts/update-actions-lock.sh: No such file or directory, exit 127.

As Applicable — Registry Changes

• Registry.toml index updated: N/A. No package is added, removed or rebound.
• Per-package TOMLs consistent: the validator reports 0 custom errors on this branch (Testing below).
• Upstream package meets the quality bar: N/A. No package is registered here.
• Upstream tag exists and matches: N/A. No version is registered here.

As Applicable — Documentation / Infra Changes

• .machine_readable/6a2/*.a2ml: N/A. A2ML is retired estate-wide (D99/D269c), so no .a2ml file is created or edited.
• TOPOLOGY.md: N/A. No architectural change.
• Changelog updated. This repo's file is CHANGELOG.adoc.
• Wiki updated: N/A. The wiki does not describe Layer 2b.

Testing

Every run is ci/validate.jl <tree> on Julia 1.10.10 with RegistryCI v11.0.0, against a git ls-files copy of this head. Each copy is run with GIT_CEILING_DIRECTORIES set, so no enclosing repository's origin leaks into the slug comparison.

Tree	Result
This head (41 packages, nine metadatastician/marid)	rc=0. Custom checks 0 errors / 0 warnings
Same, MaridIR repo → evilcorp/marid (planted negative)	rc=1: MaridIR: Package.toml repo resolves to slug "evilcorp/marid", expected an owner in ("hyperpolymath", "metadatastician")
ADR claim "every package registered before #109 is hyperpolymath-owned"	repo owners of the 32 non-Marid Package.toml files on main: 32 × hyperpolymath
ADR claim "the old check reported one mismatch per Marid package"	#109's tree with main's pre-#109 validator (9e4dc83): rc=1, 9 owner mismatches

The only executable file touched is ci/validate.jl, and only in a comment. standards/.githooks/docstring-scan.sh skips Julia files, so it gives no verdict here, and no function is added or changed.

🤖 Generated with Claude Code

https://claude.ai/code/session_016XJoh8YA2sCWQmq93CF8RX

[coderabbitai]

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 6920b727-c099-442e-b8f0-9fd06355ddd7

📥 Commits

Reviewing files that changed from the base of the PR and between 7c52894 and 8d7eeb3.

📒 Files selected for processing (4)

• CHANGELOG.adoc
• ci/validate.jl
• docs/REGISTRY-POLICY.adoc
• docs/decisions/0003-package-repos-in-metadatastician.adoc

 ________________________________________________________
< You can't just `setTimeout` your way out of causality. >
 --------------------------------------------------------
  \
   \   (\__/)
       (•ㅅ•)
       / 　 づ

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud