docs(governance): fill root required-file placeholders

[hyperpolymath]

Problem

The root governance required-files carried unfilled rsr-template {{PLACEHOLDER}} tokens and TEMPLATE INSTRUCTIONS comment blocks, which fail the estate governance gate (placeholder check in the shared hyperpolymath/standards governance-reusable bundle).

Fix — root required-files only

SECURITY.md

• Deleted the TEMPLATE INSTRUCTIONS block.
• Removed the PGP key section: no PGP key URL or fingerprint is set ({{PGP_KEY_URL}} × 3, fingerprint was [PGP fingerprint not set]), and the template explicitly marks the PGP section as optional/removable. The email contact 6759885+hyperpolymath@users.noreply.github.com is kept.
• Fixed a README.md cross-reference → README.adoc (this repo ships README.adoc, not README.md).

CODE_OF_CONDUCT.md

• Deleted the TEMPLATE INSTRUCTIONS block.
• {{CONDUCT_EMAIL}} → 6759885+hyperpolymath@users.noreply.github.com
• {{CONDUCT_TEAM}} → conduct team
• {{RESPONSE_TIME}} → 5 working days

Scope

ROOT required-files only. Subproject governance files (lithoglyph/**, verisimdb/**, verisim-modular-experiment/**, nqc/**, quandledb/**) and all template files (k9 template-*.ncl / svc/k9/**, PLACEHOLDERS.adoc, agent_instructions/methodology.a2ml, *.contractile, .github/ISSUE_TEMPLATE/*) are deliberately untouched.

CONTRIBUTING.md, README.adoc, and .machine_readable/6a2/{STATE,META,ECOSYSTEM}.a2ml were checked and carried no placeholders. QUICKSTART-*.adoc still contain template tokens but are not in the required-file set (not referenced by any governance/scorecard workflow), so they are left as-is.

Verify

git grep -nE '\{\{[A-Z_]+\}\}' over the root required-file set (SECURITY.md, CODE_OF_CONDUCT.md, CONTRIBUTING.md, README.adoc, LICENSE, .machine_readable/6a2/{STATE,META,ECOSYSTEM}.a2ml) returns nothing.

Reference: quandledb #50 / #51.

https://claude.ai/code/session_017TXizM5c1Yd9HWf7Y15YH2

---

Generated by Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 262 issues detected

Severity	Count
🔴 Critical	40
🟠 High	121
🟡 Medium	101

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Issue in boj-build.yml",
    "type": "missing_timeout_minutes",
    "file": "boj-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "missing_timeout_minutes",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in instant-sync.yml",
    "type": "missing_timeout_minutes",
    "file": "instant-sync.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence