chore: machine-readable + contractile currency checkpoint

[hyperpolymath]

Machine-readable / contractile currency checkpoint

Part of the estate-wide machine-readable currency pass. High-confidence canonical fixes only; template-shaped work deferred to a tracking issue; license = flag-only.

Changes

• agent_instructions/ → bot_directives/ rename; refs updated
• Contractiles: added INDEX.a2ml + _base.ncl + the missing adjust, intend verbs (full tridents incl. .k9.ncl + manifest, since canonical provides them) + must/trust/dust .ncl runners
• Added contractiles/k9/ (the 3 trust-tier templates) to resolve the adjust/intend k9 imports (../k9/template-*.k9.ncl)
• Rewrote bust/Bustfile.a2ml — was wrong-project meta-repo content in // comment syntax → gold format with gossamer-specific probes
• Fixed EXPLAINME.adoc stale ReScript reference (post-cutover); 6a2 STATE/META/ECOSYSTEM refreshed

Validation (run, not eyeballed)

• nickel typecheck clean on all 6 pure verb .ncl + _base.ncl
• .k9.ncl are k9-dialect (K9! sigil) — verbatim canonical copies, not raw-nickel-validated
• just check/check-affine fail EXIT 127 (ephapax compiler not on PATH) — pre-existing env issue, not introduced

Deferred → tracking issue

• k9.ncl + manifest tridents for must/trust/bust/dust; contractiles/k9/ vs svc/k9/ duplication (consolidate); ANCHOR normalization; per-bot bot_directives/; license review; wiki refresh

Root cause

Frozen RSR-SPEC.adoc v1.0.0 (2025-12-27) never bumped for post-2026-04 policy. Owner: cut RSR-SPEC v1.1/v2.0 + re-sync rsr-template-repo.

https://claude.ai/code/session_01PhqGcxCqkMdJtR6NWq56Hx

---

Generated by Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 138 issues detected

Severity	Count
🔴 Critical	3
🟠 High	40
🟡 Medium	95

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Action perpolymath/standards/.github/workflows/governance-reusable.yml@main\n needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in abi-typecheck.yml",
    "type": "missing_timeout_minutes",
    "file": "abi-typecheck.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in boj-build.yml",
    "type": "missing_timeout_minutes",
    "file": "boj-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "missing_timeout_minutes",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in governance.yml",
    "type": "missing_timeout_minutes",
    "file": "governance.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence