speja 0.13.0__tar.gz

speja-0.13.0/.claude-plugin/marketplace.json

@@ -0,0 +1,14 @@
+{
+  "name": "speja",
+  "description": "VHDL formatting and static analysis for Claude Code.",
+  "owner": {
+    "name": "Sebastian Hellgren"
+  },
+  "plugins": [
+    {
+      "name": "speja",
+      "source": "./",
+      "description": "Format VHDL, fix what is fixable, and check it is clean before committing."
+    }
+  ]
+}

speja-0.13.0/.claude-plugin/plugin.json

@@ -0,0 +1,12 @@
+{
+  "name": "speja",
+  "version": "0.13.0",
+  "description": "VHDL formatting and static analysis: format a file the project's way, fix what is fixable, and check it is clean before committing, with the speja MCP server preconfigured.",
+  "author": {
+    "name": "Sebastian Hellgren"
+  },
+  "homepage": "https://speja.readthedocs.io/",
+  "repository": "https://github.com/ru551n/speja",
+  "license": "MIT OR Apache-2.0",
+  "keywords": ["vhdl", "fpga", "rtl", "formatter", "linter", "vsg", "style"]
+}

speja-0.13.0/.github/dependabot.yml

@@ -0,0 +1,35 @@
+# Dependency updates, once a week, grouped so that each ecosystem opens at most one pull
+# request. CI (and, for workflow changes, the release and action
+# test workflows) must pass before merging.
+version: 2
+updates:
+  # Rust crates (Cargo.toml / Cargo.lock). vhdl_syntax is pinned to a git revision on purpose
+  # (see docs/vhdl-frontend.md) and is updated by hand.
+  - package-ecosystem: cargo
+    directory: /
+    schedule:
+      interval: weekly
+    ignore:
+      - dependency-name: vhdl_syntax
+    groups:
+      cargo:
+        patterns: ["*"]
+
+  # GitHub Actions used by the workflows and by the composite action (action.yml). They are
+  # pinned to commit hashes, with the version in a comment; Dependabot updates both.
+  - package-ecosystem: github-actions
+    directory: /   # includes .github/workflows
+    schedule:
+      interval: weekly
+    groups:
+      github-actions:
+        patterns: ["*"]
+
+  # Python packaging (pyproject.toml: the maturin build requirement).
+  - package-ecosystem: pip
+    directory: /
+    schedule:
+      interval: weekly
+    groups:
+      python:
+        patterns: ["*"]

speja-0.13.0/.github/workflows/action.yml

@@ -0,0 +1,62 @@
+# Tests the GitHub Action in action.yml on Linux, Windows and macOS.
+name: Action
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - "action.yml"
+      - "scripts/github_action_report.py"
+      - ".github/workflows/action.yml"
+  pull_request:
+    paths:
+      - "action.yml"
+      - "scripts/github_action_report.py"
+      - ".github/workflows/action.yml"
+  workflow_dispatch:
+    inputs:
+      upload:
+        description: Also upload to code scanning (use a scratch branch; this creates alerts)
+        type: boolean
+        default: false
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, windows-latest, macos-latest]
+    runs-on: ${{ matrix.os }}
+    permissions:
+      contents: read
+      security-events: write
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - name: Create an input with violations
+        shell: bash
+        run: |
+          mkdir -p action-test/src
+          printf 'entity E is\nend;\n' > action-test/src/bad.vhd
+      - name: Run the action
+        id: vsg
+        uses: ./
+        with:
+          version: latest
+          args: --recursive src
+          working-directory: action-test
+          fail-on-violations: "false"
+          sarif-upload: ${{ inputs.upload && matrix.os == 'ubuntu-latest' }}
+      - name: Check the outputs
+        shell: bash
+        env:
+          CODE: ${{ steps.vsg.outputs.exit-code }}
+          SARIF: ${{ steps.vsg.outputs.sarif-file }}
+          VERSION: ${{ steps.vsg.outputs.version }}
+        run: |
+          echo "speja $VERSION exited with $CODE"
+          test "$CODE" = 1
+          grep -q '"ruleId": "entity_008"' "$SARIF"
+          grep -q '"uri": "action-test/src/bad.vhd"' "$SARIF"

speja-0.13.0/.github/workflows/ci.yml

@@ -0,0 +1,341 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+env:
+  CARGO_TERM_COLOR: always
+  RUSTFLAGS: -D warnings
+
+jobs:
+  # Which parts of the repository a change touches, so the rest of the workflow can stay out of
+  # the way. A documentation change should not build the compiler on three operating systems.
+  # When the answer cannot be worked out -- a first push, a force push, a shallow history -- every
+  # job runs, because a missed check is worse than a wasted minute.
+  changes:
+    runs-on: ubuntu-latest
+    outputs:
+      rust: ${{ steps.what.outputs.rust }}
+      docs: ${{ steps.what.outputs.docs }}
+      vscode: ${{ steps.what.outputs.vscode }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          fetch-depth: 0
+      - id: what
+        env:
+          BASE: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.sha || github.event.before }}
+        shell: bash
+        run: |
+          everything() {
+            {
+              echo "rust=true"
+              echo "docs=true"
+              echo "vscode=true"
+            } >> "$GITHUB_OUTPUT"
+            exit 0
+          }
+          [ -n "$BASE" ] || everything
+          git cat-file -e "$BASE^{commit}" 2>/dev/null || everything
+          files=$(git diff --name-only "$BASE" HEAD)
+          echo "changed:"; echo "$files" | sed 's/^/  /'
+
+          # The workflow itself, or anything that decides how the build behaves: run everything.
+          if echo "$files" | grep -qE '^\.github/workflows/ci\.yml$|^rust-toolchain'; then
+            everything
+          fi
+
+          has() { echo "$files" | grep -qE "$1"; }
+          rust=false
+          docs=false
+          vscode=false
+          # The crate, its inputs, and the things that gate it.
+          has '^(src|tests|examples|fuzz|vendor|scripts)/|^(build\.rs|Cargo\.toml|Cargo\.lock|clippy\.toml|deny\.toml|_typos\.toml)$' && rust=true
+          # The published site. A Rust change can make the generated rule tables stale, so the
+          # documentation job also runs whenever the crate changes.
+          has '^docs/|^mkdocs\.yml$|^[^/]*\.md$' && docs=true
+          has '^editors/vscode/' && vscode=true
+          {
+            echo "rust=$rust"
+            echo "docs=$docs"
+            echo "vscode=$vscode"
+          } >> "$GITHUB_OUTPUT"
+  lint:
+    needs: changes
+    if: needs.changes.outputs.rust == 'true'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # master
+        with:
+          toolchain: stable
+          components: rustfmt, clippy
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
+      - run: cargo fmt --check
+      - run: cargo clippy --locked --workspace --all-targets --all-features -- -D warnings
+
+  test:
+    needs: changes
+    if: needs.changes.outputs.rust == 'true'
+    strategy:
+      matrix:
+        os: [ubuntu-latest, windows-latest, macos-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # master
+        with:
+          toolchain: stable
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
+      - run: cargo test --locked --workspace
+
+  msrv:
+    needs: changes
+    if: needs.changes.outputs.rust == 'true'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # master
+        with:
+          toolchain: 1.95
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
+      - run: cargo check --locked --workspace --all-targets
+
+  # Licences, duplicate crates, unknown sources and RUSTSEC advisories (deny.toml).
+  deny:
+    needs: changes
+    if: needs.changes.outputs.rust == 'true'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: EmbarkStudios/cargo-deny-action@3c6349835b2b7b196a839186cb8b78e02f7b5f25 # v2
+        with:
+          command: check
+
+  # Documentation examples, spelling of user-visible text, and unused dependencies.
+  extras:
+    needs: changes
+    if: needs.changes.outputs.rust == 'true'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # master
+        with:
+          toolchain: stable
+      - uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # master
+        with:
+          toolchain: nightly
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
+      - uses: taiki-e/install-action@4076c08d76dba979c11a7285295b0716c1d67908 # v2
+        with:
+          tool: cargo-machete@0.9.2
+      - run: cargo test --locked --workspace --doc
+      - uses: crate-ci/typos@512fc24f32f44ab01972217aaaf3dc86ec234d53 # v1.50.2
+      - run: cargo machete
+      # The fuzz targets are a separate crate on nightly, so nothing else compiles them; without
+      # this a broken target is only found by the nightly fuzz run, seven minutes in.
+      - run: cargo +nightly check --manifest-path fuzz/Cargo.toml --bins
+
+  # The published documentation, built the way Read the Docs builds it. `--strict` fails on a link
+  # to a page that does not exist, which is the way documentation usually rots.
+  docs:
+    needs: changes
+    if: needs.changes.outputs.docs == 'true' || needs.changes.outputs.rust == 'true'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        with:
+          python-version: "3.13"
+      - run: pip install --retries 10 --timeout 60 -r docs/requirements.txt
+      - run: mkdocs build --strict --site-dir /tmp/site
+      # Rule tables and counts are generated from the binary, because hand-written ones drifted:
+      # the site once said 58 lint rules while the binary had 66. Only a change to the crate can
+      # make them stale, so the build that checks them is skipped for prose.
+      - if: needs.changes.outputs.rust == 'true'
+        uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # master
+        with:
+          toolchain: stable
+      - if: needs.changes.outputs.rust == 'true'
+        uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
+      - if: needs.changes.outputs.rust == 'true'
+        run: cargo build --release
+      - if: needs.changes.outputs.rust == 'true'
+        run: python scripts/gen_rule_docs.py --check
+
+  # The VS Code client is a launcher, not logic, but it still has to compile: a type error here
+  # would only be found when someone tried to package a release.
+  vscode:
+    needs: changes
+    if: needs.changes.outputs.vscode == 'true'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v5
+        with:
+          # 22.18 or newer: the generator self-check runs as TypeScript under
+          # `node --experimental-strip-types`, with no build step of its own.
+          node-version: "22.18"
+          cache: npm
+          cache-dependency-path: editors/vscode/package-lock.json
+      - run: npm ci
+        working-directory: editors/vscode
+      - run: npm run compile
+        working-directory: editors/vscode
+      # The generators, and the grammar against a tokenized sample.
+      - run: npm test
+        working-directory: editors/vscode
+
+  # How much of the code the tests reach; a number per pull request, not a gate.
+  coverage:
+    needs: changes
+    if: needs.changes.outputs.rust == 'true'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # master
+        with:
+          toolchain: stable
+          components: llvm-tools-preview
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
+      - uses: taiki-e/install-action@4076c08d76dba979c11a7285295b0716c1d67908 # v2
+        with:
+          tool: cargo-llvm-cov@0.9.1
+      - name: Measure
+        run: |
+          cargo llvm-cov --locked --workspace --lcov --output-path lcov.info
+          {
+            echo "## Coverage"
+            echo
+            echo '```'
+            cargo llvm-cov report --summary-only
+            echo '```'
+          } >> "$GITHUB_STEP_SUMMARY"
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: coverage
+          path: lcov.info
+
+  # Changes to the public library API against the base branch. Reported, not enforced: speja
+  # is still 0.x, and the API may change with a minor version.
+  semver:
+    needs: changes
+    if: github.event_name == 'pull_request' && needs.changes.outputs.rust == 'true'
+    runs-on: ubuntu-latest
+    continue-on-error: true
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          fetch-depth: 0
+      - uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # master
+        with:
+          toolchain: stable
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
+      - uses: taiki-e/install-action@4076c08d76dba979c11a7285295b0716c1d67908 # v2
+        with:
+          tool: cargo-semver-checks@0.50.0
+      - env:
+          BASE: ${{ github.base_ref }}
+        run: cargo semver-checks --baseline-rev "origin/$BASE"
+
+  # Timings of this pull request against its base (warns, never fails: shared runners).
+  bench:
+    needs: changes
+    if: github.event_name == 'pull_request' && needs.changes.outputs.rust == 'true'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          fetch-depth: 0
+      - uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # master
+        with:
+          toolchain: stable
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
+      - name: This pull request
+        run: cargo run --locked --release --example bench > head.txt
+      - name: Its base
+        env:
+          BASE: ${{ github.base_ref }}
+        run: |
+          git checkout --detach "origin/$BASE"
+          cargo run --locked --release --example bench > base.txt
+          git checkout -
+      - run: python3 scripts/compare_bench.py base.txt head.txt
+
+  # Whether speja can run inside an airgap is a question with an answer, not a promise: the
+  # binary is exercised with no network at all, and traced to show it does not even try to open
+  # a socket. See docs/airgapped.md.
+  airgap:
+    needs: changes
+    if: needs.changes.outputs.rust == 'true'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # master
+        with:
+          toolchain: stable
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
+      - run: cargo build --locked --release
+      - run: sudo apt-get update && sudo apt-get install -y strace
+
+      # A dependency that cannot speak a network protocol cannot phone home whatever the code
+      # around it does. `tokio` is here for the language server's stdio transport and is built
+      # without its `net` feature, so it has no sockets to offer.
+      - name: No dependency is a network client
+        run: |
+          cargo tree --locked --edges normal --prefix none \
+            | awk '{ print $1 }' | sort -u > crates.txt
+          if grep -qxE 'reqwest|hyper|h2|curl|ureq|isahc|attohttpc|surf|native-tls|rustls|openssl|openssl-sys|tokio-tungstenite|async-std' crates.txt; then
+            echo "A network client is in the dependency tree:"
+            grep -xE 'reqwest|hyper|h2|curl|ureq|isahc|attohttpc|surf|native-tls|rustls|openssl|openssl-sys|tokio-tungstenite|async-std' crates.txt
+            exit 1
+          fi
+          echo "$(wc -l < crates.txt) crates, none of them a network client."
+
+      # `socketpair` is allowed: it connects two processes on this machine and cannot name a
+      # remote host. Anything that can address one fails the job.
+      - name: The binary imports no symbol that can reach a host
+        run: |
+          if nm -D target/release/speja \
+            | grep -E ' U (socket|connect|bind|listen|accept|sendto|recvfrom|getaddrinfo|gethostbyname)@'; then
+            echo "The binary imports a symbol that can reach a network."
+            exit 1
+          fi
+          echo "No networking symbols imported."
+
+      - name: Everything works with no network at all
+        run: |
+          printf 'entity dut is\nend entity dut;\n' > dut.vhd
+          sudo unshare -n bash -eu -c '
+            # Prove the isolation before trusting anything that runs inside it: a namespace
+            # with a route to the outside would make the rest of this step meaningless.
+            if [ "$(ip -brief address | grep -cv "^lo ")" -ne 0 ]; then
+              ip -brief address; echo "the namespace has an external interface"; exit 1
+            fi
+            if timeout 5 bash -c "exec 3<>/dev/tcp/1.1.1.1/53" 2>/dev/null; then
+              echo "the network is still reachable"; exit 1
+            fi
+            bin=target/release/speja
+            "$bin" --version
+            "$bin" --check style,lint dut.vhd
+            "$bin" --fix --diff dut.vhd > /dev/null
+            "$bin" --explain lint_771 > /dev/null
+            "$bin" --list_rules > /dev/null
+            echo "{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"server/discover\"}" \
+              | "$bin" mcp | grep -q supportedVersions
+          '
+          echo "The command line, the rule set and the MCP server all work with no network."
+
+      # Stronger than "no network was available": it never asks for one.
+      - name: It does not even try to open a socket
+        run: |
+          strace -f -qq -e trace=%network -o net.log \
+            target/release/speja --check style,lint dut.vhd || true
+          if grep -vE 'socketpair|^\+\+\+|^---|unfinished|resumed' net.log | grep -q .; then
+            echo "The run made a network syscall:"
+            cat net.log
+            exit 1
+          fi
+          echo "Zero network syscalls."

speja-0.13.0/.github/workflows/compatibility.yml

@@ -0,0 +1,190 @@
+# How close speja is to VSG, measured rather than asserted: both tools run over the same corpus
+# and the findings are compared per rule (scripts/compare_vsg.py). Weekly, because it installs
+# VSG and takes minutes; the numbers land in the job summary.
+#
+# `compare` and `configured` pin the version speja targets, so their numbers are comparable from
+# week to week. `latest` installs whatever VSG released most recently, which is how a new release
+# is noticed here rather than in someone's pipeline.
+name: Compatibility
+
+on:
+  schedule:
+    # 04:17 UTC on Mondays.
+    - cron: "17 4 * * 1"
+  workflow_dispatch:
+    inputs:
+      files:
+        description: How many corpus files to compare
+        default: "200"
+
+permissions:
+  contents: read
+
+jobs:
+  compare:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # master
+        with:
+          toolchain: stable
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        with:
+          python-version: "3.13"
+
+      # VUnit's own VHDL is the corpus: real code, a fixed revision, and it exercises packages,
+      # testbenches and verification components.
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          repository: VUnit/vunit
+          ref: bbbe9caba5278dd8057020edc3aeb5f223c0e037
+          path: corpus
+          persist-credentials: false
+
+      - run: pip install --retries 10 --timeout 60 vsg==3.35.0
+      - run: cargo build --locked --release
+
+      - name: Compare
+        env:
+          HOW_MANY: ${{ inputs.files || '200' }}
+        run: |
+          # The third-party OSVVM copy under examples/ is not VUnit's own style.
+          find corpus/vunit/vhdl corpus/examples/vhdl -name '*.vhd' \
+            | grep -v osvvm | sort | head -n "$HOW_MANY" > files.txt
+          python3 scripts/compare_vsg.py --vsg vsg --speja target/release/speja \
+            --markdown "$GITHUB_STEP_SUMMARY" $(cat files.txt)
+
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        if: always()
+        with:
+          name: compatibility
+          path: .compare
+
+  # open-logic configures 825 rules, far more of VSG's option surface than VUnit does, so it
+  # measures how well the configuration is honoured rather than how well the rules are written.
+  configured:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # master
+        with:
+          toolchain: stable
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        with:
+          python-version: "3.13"
+
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          repository: open-logic/open-logic
+          ref: ecca8af95295e798b8a3bc6610cb52be9688ae01
+          path: configured
+          persist-credentials: false
+
+      - run: pip install --retries 10 --timeout 60 vsg==3.35.0
+      - run: cargo build --locked --release
+
+      - name: Compare
+        env:
+          HOW_MANY: ${{ inputs.files || '200' }}
+        run: |
+          # Their configuration names rules that VSG 3.35 has renamed, and refuses to load
+          # without this; see scripts/migrate_vsg_config.py.
+          python3 scripts/migrate_vsg_config.py \
+            configured/lint/config/vsg_config.yml > configured_config.yml
+          # Their own exclusions: third-party sources and one incomplete documentation example.
+          find configured/src configured/test -name '*.vhd' \
+            | grep -v RbExample | sort | head -n "$HOW_MANY" > configured_files.txt
+          python3 scripts/compare_vsg.py --vsg vsg --speja target/release/speja \
+            -c configured_config.yml --out .compare-configured \
+            --markdown "$GITHUB_STEP_SUMMARY" $(cat configured_files.txt)
+
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        if: always()
+        with:
+          name: compatibility-configured
+          path: .compare-configured
+
+  # Whatever VSG released most recently. This job exists to notice a new VSG release and what it
+  # changes; it is expected to differ more than the pinned jobs, and it never gates anything.
+  latest:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # master
+        with:
+          toolchain: stable
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        with:
+          python-version: "3.13"
+
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          repository: VUnit/vunit
+          ref: bbbe9caba5278dd8057020edc3aeb5f223c0e037
+          path: corpus
+          persist-credentials: false
+
+      - run: pip install --retries 10 --timeout 60 --upgrade vsg
+      - run: cargo build --locked --release
+
+      - name: Which VSG, and which one speja targets
+        run: |
+          {
+            echo "## Latest VSG"
+            echo
+            echo "| | |"
+            echo "|---|---|"
+            echo "| Released | $(vsg --version | head -n1) |"
+            echo "| speja targets | $(target/release/speja --version) |"
+          } >> "$GITHUB_STEP_SUMMARY"
+
+      - name: Compare
+        env:
+          HOW_MANY: ${{ inputs.files || '200' }}
+        run: |
+          find corpus/vunit/vhdl corpus/examples/vhdl -name '*.vhd' \
+            | grep -v osvvm | sort | head -n "$HOW_MANY" > files.txt
+          python3 scripts/compare_vsg.py --vsg vsg --speja target/release/speja \
+            --out .compare-latest --markdown "$GITHUB_STEP_SUMMARY" $(cat files.txt)
+
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        if: always()
+        with:
+          name: compatibility-latest
+          path: .compare-latest
+
+  # What speja's own rules report over the whole of both corpora, against what they reported
+  # last time. The layer's claim is that a finding is proven, and three rules were once found
+  # reporting false positives on code they had never been run over: each had been validated
+  # against a subset of a corpus rather than all of it. A count that moves has to be explained.
+  precision:
+    name: Native rule findings
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # master
+        with:
+          toolchain: stable
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          repository: VUnit/vunit
+          ref: bbbe9caba5278dd8057020edc3aeb5f223c0e037
+          path: corpora/vunit
+          persist-credentials: false
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          repository: open-logic/open-logic
+          ref: ecca8af95295e798b8a3bc6610cb52be9688ae01
+          path: corpora/open-logic
+          persist-credentials: false
+      - run: cargo build --locked --release
+      - name: Compare with what these rules reported last time
+        run: |
+          python3 scripts/corpus_findings.py --check \
+            --binary target/release/speja \
+            --summary "$GITHUB_STEP_SUMMARY" \
+            corpora/vunit corpora/open-logic