From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1.migadu.com ([2001:41d0:303:e16b::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms8.migadu.com with LMTPS id 0ETCGdMK/mW2SwAA62LTzQ:P1 (envelope-from ) for ; Fri, 22 Mar 2024 23:48:51 +0100 Received: from aspmx1.migadu.com ([2001:41d0:303:e16b::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1.migadu.com with LMTPS id 0ETCGdMK/mW2SwAA62LTzQ (envelope-from ) for ; Fri, 22 Mar 2024 23:48:51 +0100 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=libre.brussels header.s=mail header.b=WmctWi8B; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=libre.brussels ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1711147731; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=CKMLpkPqfW19dRH+6TzzwgYsj3sfvnEtMYiZ6+VA5Ak=; b=WTZ0NghRRHC5ZaqiB6SnYnECsghmHHHYWym74O+Z2p3ziSme/lJ3B1u5g4j8sOCkcRfPpG o+6IZZGqbAWB+qYZtQtsaX4uSxFibLwt82hUWRM4TfDsKZa5naYg4D2n2rqzrwPwV6+3pp k7DjqJs071ySTa/cO8bcywmNJj0mcsVc/b3PFQ/Q7F9Z/uvKJxtDOd/Ieu8R6nvaCdxCWE VqWEYpvKID2GcrIgYuSNyYAyTjGUAAhb9Ku0wjuTo0m+8unbORSmkSChAs3FV/cl4oFUxe 5vY2eu8J5LLCd0FeUGegmUrLiBPNfaJj5Uyqyf+9Byyb7Gohh1tRqPJVN2HOaw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=libre.brussels header.s=mail header.b=WmctWi8B; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=libre.brussels ARC-Seal: i=1; s=key1; d=yhetil.org; t=1711147731; a=rsa-sha256; cv=none; b=GY7QtQn35ZXwCG29npS6bf8Y6nWaSXJVQRDuUpcFAPyQfLKMljDOzDXOnKdGMmDZ7uOWqa etkJBSzt9xPoBJwMYLzfS/tHMptJNYVmKdF+D0V4TU1udUmsJXhl4q/cJpAvDSZ5jqpcuX K+u5xhVg3W/mQHj84ImJYsilbZloFjfVLifLYVlXWyqC/1C3JDwt0WAEQhuCn6QFRGWDtx rjVcCUzWxF6aFsy3BHaeT1x3oBmZASrslqmBSKJTZzH1vOqlXPoEeTfWLTmSvtUof23QrJ 4Fuy1Sm/BEF0gp0IINz1Q+RARJ8BsZb5hAm/paQVkN+EfzikmK2uRUi3HKRPVw== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id A8A2463137 for ; Fri, 22 Mar 2024 23:48:50 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1rnngU-0007zW-Dp; Fri, 22 Mar 2024 18:48:22 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rnngT-0007zO-Os for guix-devel@gnu.org; Fri, 22 Mar 2024 18:48:21 -0400 Received: from libre.brussels ([2a01:4f8:201:1044::1]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1rnngR-0006J4-Pw for guix-devel@gnu.org; Fri, 22 Mar 2024 18:48:21 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=libre.brussels; s=mail; t=1711147692; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=CKMLpkPqfW19dRH+6TzzwgYsj3sfvnEtMYiZ6+VA5Ak=; b=WmctWi8BZJwV8cmTTxsJ08G2ZCh4SLFeHcOvYh4LcjQD5ZK7SIT67qDSc657ub1e6Gf0UH w7O1DlHt5BA7jIEeHBL2MocCrDJsjOOhx2i0fFTUwzBxPmfeginGSwqAFW7eyjjewJYFF9 MNMHpSgzgXqempzQp6SSQUEnN7jk/cY= MIME-Version: 1.0 Date: Fri, 22 Mar 2024 22:48:12 +0000 From: indieterminacy To: Andreas Enge Cc: MSavoritias , Simon Tournier , Attila Lendvai , Ian Eure , guix-devel Subject: Re: rewriting history; Was: Concerns/questions around Software Heritage Archive In-Reply-To: References: <645b9b21-4923-eb23-7213-1c2cf5fe6850@fannys.me> <87sf0nwzl1.fsf@gmail.com> <4df2f043-cde1-8128-8911-e3d6bfc2958e@fannys.me> Message-ID: <079133dac4c502715a033d983b601e27@libre.brussels> X-Sender: indieterminacy@libre.brussels Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=2a01:4f8:201:1044::1; envelope-from=indieterminacy@libre.brussels; helo=libre.brussels X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Spam-Score: -6.03 X-Migadu-Queue-Id: A8A2463137 X-Migadu-Scanner: mx13.migadu.com X-Migadu-Spam-Score: -6.03 X-TUID: D3GjZyEn15wx On 2024-03-18 15:14, Andreas Enge wrote: > Am Mon, Mar 18, 2024 at 04:33:49PM +0200 schrieb MSavoritias: >> Actually gitlab already is facing something like that and they are >> doing >> what was proposed elsewhere: mapping of UUIDs to display names >> https://gitlab.com/gitlab-org/gitlab/-/issues/20960 > > Interesting, thanks! It is something that maybe could be implemented by > Savannah, but it would probably require a bit of thought. And yet > again, > somehow the mapping uuid<->"real" names would have to be public (people > would "git clone" commits with uuids, and would need to locally replace > them by "real" names); so people can always keep copies of the mapping > over time. > > I am also not quite sure about the signing process for committers; > in principle keys are enough, but in GPG they are tied to email > addresses, > and I do not know whether we use this in Guix. > > In the end, my impression is this will not achieve much more than what > we > already have with the .mailmap approach. In a sense, everyone would use > a pseudonym (their uuid), and then we would keep a mapping between > these > pseudonyms and, well, "real" names or other pseudonyms chosen by the > contributors... > > Hm, this could indeed be implemented exactly with .mailmap, no? > We would need to enforce that authors use a uuid of a specific format, > and potentially an empty or dummy email address, or another uuid. > Then we could keep a .mailmap file. The history of "real" identities > would still be visible in the git history, but as said above, anyway > we could not prevent people from storing the association information > over time. > >> Right fair. As I have said before SWH does break Guix CoC effectively >> right >> now. >> So what Guix does from this point on will effectively dictate if the >> CoC is >> valid or not. > > Well, the CoC is valid on our communication channels; so what SWH does > with > our software is outside its scope (that is governed by the license). > > Andreas I have happened to stumble across a new initiative concerning UUIDs for academic researchers. Here is their description: ``` ORCID, which stands for Open Researcher and Contributor ID, is a free, unique, persistent identifier (PID) for individuals to use as they engage in research, scholarship, and innovation activities. We provide ORCID to researchers free of charge so that we may realize our vision of connecting all who participate in research, scholarship, and innovation are uniquely identified and connected to their contributions across disciplines, borders, and time. ``` Here are its guiding principles: ``` Our Founding Principles ORCID will work to support the creation of a permanent, clear, and unambiguous record of research and scholarly communication by enabling reliable attribution of authors and contributors. ORCID will transcend discipline, geographic, national, and institutional boundaries. Participation in ORCID is open to any organization that has an interest in research and scholarly communications. Access to ORCID services will be based on transparent and non-discriminatory terms posted on the ORCID website. Researchers will be able to create, edit, and maintain an ORCID identifier and record free of charge. Researchers will control the defined privacy settings of their own ORCID record data. All data contributed to ORCID by researchers or claimed by them will be available in standard formats for free download (subject to the researchers’ own privacy settings) that are updated once a year and released under a CC0 waiver. All software developed by ORCID will be publicly released under an Open Source Software license approved by the Open Source Initiative. For the software it adopts, ORCID will prefer Open Source. ORCID identifiers and record data (subject to privacy settings) will be made available via a combination of no-charge and for-a-fee APIs and services. Any fees will be set to ensure the sustainability of ORCID as a not-for-profit, charitable organization focused on the long-term persistence of the ORCID system. ORCID will be governed by representatives from a broad cross-section of stakeholders, the majority of whom are not-for-profit, and will strive for maximal transparency by publicly posting summaries of all Board meetings and annual financial reports. ``` While I do not have the focus to make a further evaluation, I should point out that ORCID is a component of the nascent Open Science Network https://openscience.network/ FWIW, recognising an academic in OSN and being aware of the quality of the tooling Bonfire Networks make me wonder whether ORCID has some good design principles https://bonfirenetworks.org/ In any case, it may provide a practical point for comparison given the thicket of governance issues this thread has discovered. Warmest regards, fsnjfkjlffffjcjcjcdnmddfnfdfnlzxvcllnjnrejvns v fjfdsjhsv