Every commit scored for change-risk against this repo's own history, so 'elevated' means elevated here rather than on some global curve.
Needs review
15 commits sit in this repo's top risk tercile, which is 33% of the 46scored. The cut is drawn against this codebase's own history rather than a global curve, so a quiet repo still fills its top band, and here it starts at 7.0 out of 10. What pushes a commit up is size and spread together: a large change confined to one area scores below a smaller one scattered across a dozen files.
Commit categories over time, read off the subject line. Fixes carry the accent because that is the series this chart exists to show.
Consistently fix-driven across its history.
Ranked by change-risk, highest first. Priority is a tercile of this repo's own distribution, so a quiet repo still fills its top band.
| # | Commit | Author | When | Lines | Review priority | Top driver |
|---|---|---|---|---|---|---|
| 1 | 3c9a3681feat(secrets): update stale vault entries, add hermes/pi/gh/pnpm secrets + GPG keyring | Jacob LeCoq | 2mo ago | +15.7K -9.0K | 96thElevated | more lines added than baseline |
| 2 | ddf2a107chore: re-encrypt GPG keyring with new passphrase | Jacob LeCoq | 2mo ago | +6.0K -6.0K | 96thElevated | more lines added than baseline |
| 3 | c51521c9feat: populate vault.yml with all encrypted secrets | Jacob LeCoqclaudeassisted | 4mo ago | +9.0K -21 | 96thElevated | more lines added than baseline |
| 4 | 5e96d6a5feat: initial Ansible dotfiles repo migrated from chezmoi | Jacob LeCoqclaudeassisted | 4mo ago | +17.5K -0 | 96thElevated | more lines added than baseline |
| 5 | d72b5e0arefactor: enhance secrets management and git identity configuration | Jacob LeCoqclaudeagent | 2mo ago | +6.5K -6.0K | 90thElevated | more lines added than baseline |
| 6 | 5584bae3fix: resolve all dry-run failures (vars, sudo guards, deprecated syntax, bad URLs) | Jacob LeCoqclaudeassisted | 4mo ago | +989 -56 | 88thElevated | more lines added than baseline |
| 7 | ca0ee172docs: rewrite README with full role reference and fix stale bootstrap.yml | Jacob LeCoqclaudeagent | 4mo ago | +338 -85 | 86thElevated | more lines added than baseline |
| 8 | 6ea6b6d7feat: Add configuration files and tasks for ansible-lint, yamllint, and various roles | Jacob LeCoq | 4mo ago | +335 -129 | 84thElevated | more lines added than baseline |
| 9 | eeda291bfeat: add mise.toml for neovim and update requirements.yml for community.general version | Jacob LeCoq | 2mo ago | +405 -5.7K | 82thElevated | more lines added than baseline |
| 10 | 98d054c7feat: add justfile for task automation and enhance README | Jacob LeCoq | 2mo ago | +182 -64 | 78thElevated | more lines added than baseline |
| 11 | a169b9f9docs: add README with usage and secrets migration guide | Jacob LeCoqclaudeassisted | 4mo ago | +119 -0 | 78thElevated | more lines added than baseline |
| 12 | 68da2ad0feat: Homebrew as primary package manager on Linux and macOS | Jacob LeCoqclaudeassisted | 4mo ago | +106 -157 | 75thElevated | more lines added than baseline |
| 13 | 6b450676feat: distrobox and cleanup | Jacob LeCoq | 3mo ago | +111 -11 | 73thElevated | more lines added than baseline |
| 14 | e3cfe28afeat: Add remote installer script for Ansible bootstrap and update README | Jacob LeCoq | 4mo ago | +73 -0 | 71thElevated | more lines added than baseline |
| 15 | 8b5e72d2feat: enhance distrobox and macOS role handling | Jacob LeCoq | 2mo ago | +81 -30 | 68thElevated | more lines added than baseline |
| 16 | cfdeb9bbfeat: add AI CLI tools, switch to Zed Preview/Raycast Beta | Jacob LeCoq | 1mo ago | +77 -3 | 66thTypical | more lines added than baseline |
| 17 | 2afb8d88Restore Adobe and personal hosts in SSH config template | Jacob LeCoq | 4d ago | +39 -0 | 64thTypical | more lines added than baseline |
| 18 | 5284a2d5feat(macos): configurable TouchID and passwordless sudo | Jacob LeCoq | 2mo ago | +40 -1 | 62thTypical | more lines added than baseline |
| 19 | abfbce8cfix: install 1password and 1password-cli via apt on Linux | Jacob LeCoqclaudeassisted | 4mo ago | +29 -4 | 60thTypical | more lines added than baseline |
| 20 | 5f152dfffeat: add chezmoi role for hybrid Ansible + chezmoi dotfiles management | Jacob LeCoqclaudeagent | 4mo ago | +39 -0 | 58thTypical | more lines added than baseline |
| 21 | 5192e846fix: track vault password script, ignore .vault-pass file instead | Jacob LeCoqclaudeassisted | 4mo ago | +27 -1 | 55thTypical | more lines added than baseline |
| 22 | 99667f02fix: install ansible via pipx, symlink all ansible-* binaries to ~/.local/bin | Jacob LeCoqclaudeassisted | 4mo ago | +21 -12 | 53thTypical | more lines added than baseline |
| 23 | fa8578b8feat: enhance testing and update chezmoi task | Jacob LeCoq | 2mo ago | +20 -2 | 51thTypical | more lines added than baseline |
| 24 | c15385befeat: add timestamps to bootstrap and install log output | Jacob LeCoqclaudeagent | 4mo ago | +11 -14 | 49thTypical | more scattered than baseline |
| 25 | 491fb6d5feat: add uv install to external role | Jacob LeCoq | 1mo ago | +12 -0 | 47thTypical | more focused than baseline |
| 26 | 69a5e315fix: update vault password retrieval and macOS defaults | Jacob LeCoq | 2mo ago | +15 -8 | 43thTypical | more lines added than baseline |
| 27 | dcd140f9fix: replace bare ansible_* facts with ansible_facts['...'] across all templates | Jacob LeCoqclaudeagent | 4mo ago | +10 -10 | 43thTypical | more scattered than baseline |
| 28 | d7b44c8cAdd no em-dash and humanizer rules to global CLAUDE.md | Jacob LeCoq | 5d ago | +9 -0 | 40thTypical | fewer lines added than baseline |
| 29 | 0ccc4a01Deprecate repo: machine management moved to hm-dotfiles | Jacob LeCoq | 4d ago | +8 -0 | 38thTypical | fewer lines added than baseline |
| 30 | e618a618feat: add ssh for github | Jacob LeCoq | 4mo ago | +8 -0 | 36thTypical | fewer lines added than baseline |
| 31 | cd74b9eafix(macos): remove stray TouchID line from /etc/pam.d/sudo | Jacob LeCoq | 4w ago | +8 -0 | 34thTypical | fewer lines added than baseline |
| 32 | df62bbf7fix: refresh Brewfile tap formulas | Jacob LeCoq | 2mo ago | +6 -6 | 29thBelow typical | fewer lines added than baseline |
| 33 | 318ad666fix: skip missing gitignored files and fix deprecated ansible_os_family | Jacob LeCoqclaudeagent | 4mo ago | +6 -2 | 29thBelow typical | fewer lines added than baseline |
| 34 | 97d09d27fix: correct pipx venvs path and always re-link ansible-* binaries | Jacob LeCoqclaudeagent | 4mo ago | +6 -8 | 29thBelow typical | fewer lines added than baseline |
| 35 | 31cdf7b5security: purge employer-sensitive files and harden .gitignore | Jacob LeCoqclaudeagent | 4mo ago | +5 -0 | 25thBelow typical | fewer lines added than baseline |
| 36 | 6ab7917cfix: correct type mismatches for macOS defaults keys | Jacob LeCoqclaudeagent | 4mo ago | +4 -4 | 23thBelow typical | fewer lines added than baseline |
| 37 | 86f7202bfix: macos KeyRepeat/InitialKeyRepeat type float; ignore local files | Jacob LeCoq | 2mo ago | +4 -2 | 20thBelow typical | fewer lines added than baseline |
| 38 | 1017686arefactor: remove shell/git/tools roles — dotfiles now owned by chezmoi | Jacob LeCoqclaudeagent | 4mo ago | +7 -9.3K | 20thBelow typical | more scattered than baseline |
| 39 | c86d1c52fix: update macOS defaults for KeyRepeat and InitialKeyRepeat types | Jacob LeCoq | 2mo ago | +3 -3 | 16thBelow typical | fewer lines added than baseline |
| 40 | 036f83aefix: update Brewfile dependencies | Jacob LeCoq | 2mo ago | +2 -2 | 14thBelow typical | fewer lines added than baseline |
| 41 | d4d46012fix: add work host, skip external refresh in chezmoi update | Jacob LeCoq | 4w ago | +2 -1 | 11thBelow typical | fewer lines added than baseline |
| 42 | c47bc577fix: replace remaining bare ansible_os_family in site.yml and bootstrap.yml | Jacob LeCoqclaudeagent | 4mo ago | +2 -2 | 11thBelow typical | fewer lines added than baseline |
| 43 | 2c94c564refactor: update cargo-binstall installation method | Jacob LeCoq | 1mo ago | +2 -8 | 8thBelow typical | fewer lines added than baseline |
| 44 | a8b8bf76chore(packages): add tmuxinator to Brewfile | Jacob Le Coq | 1mo ago | +1 -0 | 5thBelow typical | fewer lines added than baseline |
| 45 | c659b117fix(macos): restore passwordless sudo (no TouchID) | Jacob LeCoq | 2mo ago | +1 -1 | 2thBelow typical | fewer lines added than baseline |
| 46 | 03de9161fix(macos): disable passwordless sudo — use TTY password prompt | Jacob LeCoq | 2mo ago | +1 -1 | 2thBelow typical | fewer lines added than baseline |
Two views of the same model: where the cuts fall, and what commit shape lands you above them.
Every scored commit, binned on the raw 0 to 10 score rather than the percentile. Percentile ranks are uniform by construction, so that axis has no shape to draw. The dashed lines are the tercile cuts behind each row's priority pill.
The 46 most recent commits, on their own recency sample rather than the feed above: that defaults to risk-sorted, so reusing it would plot only the top tercile and call it the spread. Big and scattered is what the model penalises. Click a dot to open it.
HexSleeves/ansible-dotfiles has 46 commits in its history from 2 contributors, the first of them Apr 25, 2026. In the last 90 days 10 files were touched, 11 times in total, most often chezmoi-update-noninteractive.sh. Every commit is scored for change risk from its size, spread and the history of the files it touches.
