chore: machine-readable + contractile currency checkpoint

[hyperpolymath]

Machine-readable / contractile currency checkpoint

Part of the estate-wide machine-readable currency pass. High-confidence canonical fixes only; template-shaped work deferred to a tracking issue; license = flag-only. No formal/ edits (owner directive respected).

Changes

• agent_instructions/ → bot_directives/ rename (methodology layer); doc refs fixed
• De-rotted contractiles: must/, dust/, adjust/ xfiles were wholesale Burble copies (Elixir server, TURN, 212 lines of voice-platform WCAG). Rewritten as real ephapax contracts (Rust workspace + Coq/Idris metatheory).
  • Adds an ephapax-specific invariant: legacy-preservation-stays-admitted — Theorem preservation in Semantics.v MUST stay Admitted (owner directive 2026-05-27; it is provably false and Counterexample.v depends on that)
  • adjust honestly scoped to docs + diagnostics (a compiler core has no GUI surface)
• Filled svc/k9 (3 trust-tier templates + README); added contractiles/k9/ (resolves adjust/intend k9 imports)

Validation (run, not eyeballed)

• nickel typecheck clean on all pure .ncl
• Critical Mustfile probes executed against the tree — all pass, incl. legacy-preservation-admitted (grep -q Admitted formal/Semantics.v ✓)

Deferred → tracking issue

• k9.ncl + manifest tridents for must/trust/bust/dust; dual ANCHOR (6a2/ANCHOR.a2ml + anchors/ANCHOR.a2ml) — needs placement normalization; bot_directives naming collision (methodology layer vs gitbot-fleet directives); per-bot directives (hypatia/gitbot-fleet/.git-private-farm); 1 believe_me in Idris to drive to zero; license review; wiki refresh

Root cause

Frozen RSR-SPEC.adoc v1.0.0 (2025-12-27) never bumped for post-2026-04 policy. Owner: cut RSR-SPEC v1.1/v2.0 + re-sync rsr-template-repo.

https://claude.ai/code/session_01PhqGcxCqkMdJtR6NWq56Hx

---

Generated by Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 94 issues detected

Severity	Count
🔴 Critical	9
🟠 High	21
🟡 Medium	64

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Issue in abi-verify.yml",
    "type": "missing_timeout_minutes",
    "file": "abi-verify.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "missing_timeout_minutes",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in coq-build.yml",
    "type": "missing_timeout_minutes",
    "file": "coq-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in coq-build.yml",
    "type": "missing_timeout_minutes",
    "file": "coq-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in coq-build.yml",
    "type": "missing_timeout_minutes",
    "file": "coq-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in governance.yml",
    "type": "missing_timeout_minutes",
    "file": "governance.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in hypatia-scan.yml",
    "type": "missing_timeout_minutes",
    "file": "hypatia-scan.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in mirror.yml",
    "type": "missing_timeout_minutes",
    "file": "mirror.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in rust-ci.yml",
    "type": "missing_timeout_minutes",
    "file": "rust-ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in scorecard-enforcer.yml",
    "type": "missing_timeout_minutes",
    "file": "scorecard-enforcer.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence