From 24f573d82aa82e7b1dd1669ff9af1f42c6bc2e61 Mon Sep 17 00:00:00 2001
From: ddidderr <ddidderr@paul.network>
Date: Sat, 12 Sep 2026 12:36:26 +0200
Subject: [PATCH] fix(build): exclude generated reports from formatting

Keep the generated security report and archived audit artifacts outside the maintained Markdown formatter set, and run Tombi offline. This makes the repository formatter deterministic without rewriting generated evidence.

Test Plan:
- just fmt
- just --fmt --check
- git diff --check
---
 justfile | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/justfile b/justfile
index c3b012d..a93ba24 100644
--- a/justfile
+++ b/justfile
@@ -55,9 +55,9 @@ bundle: catalog-check-production
 
 fmt:
     cargo +nightly fmt
-    tombi format
-    fd -tf -e md -x prettier --write --prose-wrap always --print-width 80
-    rumdl check --flavor commonmark --fix
+    tombi format --offline
+    fd -tf -e md -E security-report -E 'SECURITY_AUDIT_*.md' -x prettier --write --prose-wrap always --print-width 80
+    rumdl check --flavor commonmark --exclude 'security-report/**,SECURITY_AUDIT_*.md' --fix
     just --fmt
 
 _fix: