Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

Split `forgelm/compliance.py` into a sub-package (`_audit_log`, `_annex_iv`, `_provenance`, `_gdpr`) — deferred until Phase 16 S9 has landed

Open
  • Is something wrong?
#906 0 comments 0 reactions 0 assignees View on GitHub

Maintainers usually reply within 1 day

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
1-2 days
Newbie friendliness
18/100
Issue type
Refactor
Clarity
Mostly clear
Activity status
Active
Tech stack
python
Domain
backend, devtools

Research direction

Do not start until Phase 16 S9 (#895) has landed, since the issue makes that a precondition. Then read forgelm/compliance.py and note its seams (audit log, Annex IV, provenance, GDPR), plus _DEFERRED_SPLITS in tools/check_module_size.py and the row at docs/roadmap/risks-and-decisions.md line 80. Done means a sub-package with every public name still importable from forgelm.compliance, the guard entry removed, test patch targets retargeted, and the CHANGELOG naming F-PR29-A1-06/07/08.

Written by the indexing model from the issue text.

Description

area: compliance deferred severity: low source: roadmap wave: 4

Deferred work · F-PR29-A1-06 / A1-07 / A1-08: compliance.py · severity Low · cost ~4-8 h · recorded in docs/roadmap/risks-and-decisions.md:80

Summary

forgelm/compliance.py is a deferred module split: the EU AI Act Art. 9-17 surface, Annex IV, the hash-chained audit log, provenance and the GDPR primitives live in one file. The module-size guard holds it to a fatal no-growth budget, but nothing pays the debt down until someone takes the split.

Condition or budget

Phase 16 S9 has landed and its audit-chain fixtures are re-verified; S9 is #895

State today (re-checked 2026-10-09)

2492 code lines against a budget of 2492 at 08f2426 (deferred at 2147; ~1500 at PR #29).

Related

#667 and #668 track how the module-size guard counts lines and accepts budget raises; decide them before relying on a module's budget.

Acceptance criteria

  • The module becomes a sub-package along the recorded seams, behaviour-neutral, with every public name still importable from its current path.
  • Its _DEFERRED_SPLITS entry is removed from tools/check_module_size.py and every resulting module is under the normal ceiling.
  • Test patch targets that named the old module are retargeted to the module that resolves the name at call time (the forgelm/verify.py split found five that silently moved).
  • The row is removed from the deferral table and the CHANGELOG names its ID (the table's removal contract).

Recorded in docs/roadmap/risks-and-decisions.md (read at f94595f) and re-checked against the code on 2026-10-09. The row leaves that table only when the fix is on main, the CHANGELOG names its ID and any promised guard exists.

Dominant language
Python
Stars
9
Forks
1
Avg merge
11h 6m
Merged PRs (30d)
29

Getting set up

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from HodeTech/ForgeLM

All issues in HodeTech/ForgeLM

Similar issues

More Python issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.