chore: machine-readable + contractile currency checkpoint

[hyperpolymath]

Machine-readable / contractile currency checkpoint

Part of the estate-wide machine-readable currency pass. High-confidence canonical fixes only; template-shaped work deferred to a tracking issue; license = flag-only (no stamp edits).

Changes

• agent_instructions/ → bot_directives/ rename (methodology layer); 0 dangling refs
• Contractiles: added INDEX.a2ml (v2.0.0 registry) + _base.ncl (all 6 verbs were already present); verb .ncl runners from canonical
• Fixed a corrupt Intentfile.a2ml (SPDX comment embedded in prose — copy-paste artifact)
• 6a2 STATE/META/ECOSYSTEM refreshed (META no longer lists ReScript/Ephapax as current languages)

Validation (run, not eyeballed)

• nickel typecheck clean on all 6 pure verb .ncl + _base.ncl
• just must-check / just trust-verify failures are pre-existing (third-party selur-compose SPDX gaps; Containerfile digest pins) — not introduced here
• .k9.ncl files are k9-dialect (K9! sigil) — validated via verbatim canonical copy, not raw nickel

Deferred → tracking issue

• k9.ncl + manifest tridents for must/trust/bust/dust (needs CONTRACTILE-SPEC); ANCHOR normalization; per-bot bot_directives/ (hypatia/gitbot-fleet/.git-private-farm); license review (AGPL/PMPL); wiki refresh; stale Trustfille.a2ml/Bustfile.a2ml template rot

Root cause

Satellites are frozen-RSR-SPEC-conformant but live-policy-stale (RSR-SPEC.adoc v1.0.0 frozen 2025-12-27, never bumped for post-2026-04 policy). Owner action: cut RSR-SPEC v1.1/v2.0 + re-sync rsr-template-repo.

https://claude.ai/code/session_01PhqGcxCqkMdJtR6NWq56Hx

---

Generated by Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 151 issues detected

Severity	Count
🔴 Critical	3
🟠 High	7
🟡 Medium	141

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Issue in affinescript-canary.yml",
    "type": "missing_timeout_minutes",
    "file": "affinescript-canary.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in affinescript-canary.yml",
    "type": "missing_timeout_minutes",
    "file": "affinescript-canary.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in boj-build.yml",
    "type": "missing_timeout_minutes",
    "file": "boj-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "missing_timeout_minutes",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence