feat: add ECHIDNA verification schedule to echidnabot directive

Configure weekly/full verification for 007 as critical private repo.
Enable abi-contracts, a2ml-manifests, panic-attack, dependency-audit.
Disable Idris2/Zig/SMT/session checks pending type checker build.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

.machine_readable/bot_directives/echidnabot.scm

@@ -4,4 +4,49 @@
   (scope "formal verification and fuzzing")
   (allow ("analysis" "fuzzing" "proof checks" "session type verification"))
   (deny ("write to parser" "write to evaluator" "write to spec"))
-  (notes "May open findings on Harvard separation violations; code changes require explicit approval"))
+  (notes "May open findings on Harvard separation violations; code changes require explicit approval")
+
+  ;; Verification schedule and levels
+  ;; 007 is a critical private repo — runs weekly at full level.
+  ;; Currently Rust-based; Idris2 ABI layer planned but not yet present.
+  ;;
+  ;; Levels:
+  ;;   micro       - panic-attack + A2ML manifest validation only (fast, local, every push)
+  ;;   standard    - micro + Idris2 proof compilation + ABI contract checks (weekly)
+  ;;   full        - standard + Z3 refinement + session type verification (monthly, via Groove)
+  ;;   attestation - full + Agda --cubical path types + signed certificate (on-demand, critical repos)
+  ;;
+  ;; Schedule options: "weekly" | "biweekly" | "monthly" | "on-push" | "on-demand"
+  (verification
+    (schedule "weekly")           ;; Critical private repo — weekly deep checks
+    (level "full")                ;; Deep verification for agent meta-language
+
+    ;; Individual check toggles
+    ;; Checks are enabled/disabled based on 007's current implementation state.
+    ;; Several checks are disabled pending the type checker build.
+    (checks
+      ;; --- micro level ---
+      (panic-attack #t)           ;; Surface vulnerability scan (local, fast)
+      (a2ml-manifests #t)         ;; Validate A2ML manifest structure and cross-references
+
+      ;; --- standard level ---
+      (abi-contracts #t)          ;; Verify ABI definitions — will use Idris2 when ABI layer lands
+      (idris2-proofs #f)          ;; DISABLED: 007 is Rust, not Idris2 (enable when ABI layer is Idris2)
+      (ffi-contracts #f)          ;; DISABLED: no Zig FFI layer yet (enable with Idris2 ABI layer)
+      (dependency-audit #t)       ;; cargo-audit for Rust dependencies
+
+      ;; --- full level ---
+      ;; NOTE: refinement-smt and session-types will be enabled when the 007
+      ;; type checker is built. Session types are core to 007's choreography
+      ;; system and will become a critical verification target.
+      (refinement-smt #f)         ;; DISABLED: not yet implemented — enable with type checker
+      (session-types #f)          ;; DISABLED: not yet implemented — enable with type checker
+
+      ;; --- attestation level ---
+      (cubical-paths #f))         ;; DISABLED: not yet implemented — enable with type checker
+
+    ;; Groove endpoint for remote verification (full and attestation levels)
+    (groove-endpoint "groove://localhost:9700/echidna")
+
+    ;; Output location for signed verification certificates (attestation level)
+    (attestation-output ".machine_readable/attestations/")))