chore(governance): adopt estate-standardization wave + 2026-06-12 checkpoint (#73)

## Summary

Reconciles the orphaned `estate-standardization-20260607` branch and
applies the 2026-06-12 governance checkpoint.

1. **Estate merge** — one conflict (`rust-ci.yml`) resolved to main's
version; `.claude/CLAUDE.md` restored byte-identical to main. Wave
brings: **deletion of the duplicate legacy root
`.machine_readable/*.scm` set** (half-finished migration completed),
`6a2/0-AI-MANIFEST` + `6a2/anchor/`, flat contractiles,
`svc/k9/`→`self-validating/`,
`GOVERNANCE.adoc`/`MAINTAINERS.adoc`/`CODEOWNERS`, Guix `manifest.scm`,
OpenSSF badge.
2. **Checkpoint layer**: STATE bumped to 2026-06-12 (`[recent-work]` PRs
#68/#69/#71/#72; completion honestly held at 65%);
`6a2/anchor/ANCHOR.a2ml` created; **`bot_directives/` trio** (hypatia
with 4 evidenced accepted-findings; gitbot-fleet incl. `proofs/`
never-touch; farm `enabled=false` — no instant-sync workflow exists);
**contractiles rewritten repo-true as TOML** (estate stubs replaced;
Trustfile baselines re-verified: Lean `sorry` 18→**0**, Coq `Admitted`
19→**0**); Dustfile/Bustfile fully written; README.adoc/README.md
deduped (adoc canonical); `docs/archive/` indexed; **6 wiki pages
refreshed** (license PMPL→MPL-2.0, 72-axiom figures,
removed-`interpreters/` reality, 2026-06-12 status note).

8 ISSUES-PROPOSED (filed separately): CLAUDE.md `.scm` refs
(maintainer-only), Justfile dead `build-rescript` recipe, duplicate
contractiles/Justfile, stale `.hypatia-ignore` entries, orphaned
`svc/README`, MAINTAINERS duplication, wiki-sync automation, bust.ncl
`_base.ncl` debt.

**After merge, deletable branch**: `estate-standardization-20260607`.

🤖 Draft — opened for review.

https://claude.ai/code/session_01GJatEm2TVFSTBEkKXmserJ

---
_Generated by [Claude
Code](https://claude.ai/code/session_01GJatEm2TVFSTBEkKXmserJ)_

---------

Co-authored-by: Claude <noreply@anthropic.com>

Author: hyperpolymath

.github/CODEOWNERS

@@ -0,0 +1,34 @@
+# SPDX-License-Identifier: MPL-2.0
+# CODEOWNERS - Define code review assignments for GitHub
+# See: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
+
+# Default: sole maintainer for all files
+* @hyperpolymath
+
+# Security-sensitive files require explicit ownership
+SECURITY.md @hyperpolymath
+.github/workflows/ @hyperpolymath
+.machine_readable/ @hyperpolymath
+contractiles/ @hyperpolymath
+
+# License files
+LICENSE @hyperpolymath
+LICENSES/ @hyperpolymath
+
+# Configuration
+.gitignore @hyperpolymath
+.github/ @hyperpolymath
+
+# Documentation
+README* @hyperpolymath
+CONTRIBUTING* @hyperpolymath
+CODE_OF_CONDUCT* @hyperpolymath
+GOVERNANCE* @hyperpolymath
+MAINTAINERS* @hyperpolymath
+CHANGELOG* @hyperpolymath
+ROADMAP* @hyperpolymath
+
+# Build and CI
+Justfile @hyperpolymath
+Makefile @hyperpolymath
+*.sh @hyperpolymath

.github/ISSUE_TEMPLATE/bug_report.md

@@ -1,3 +1,7 @@
+<!--
+SPDX-License-Identifier: MPL-2.0
+Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
+-->
 ---
 name: Bug report
 about: Create a report to help us improve

.github/ISSUE_TEMPLATE/documentation.md

@@ -1,3 +1,7 @@
+<!--
+SPDX-License-Identifier: MPL-2.0
+Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
+-->
 ---
 name: Documentation
 about: Report unclear, missing, or incorrect documentation

.github/ISSUE_TEMPLATE/feature_request.md

@@ -1,3 +1,7 @@
+<!--
+SPDX-License-Identifier: MPL-2.0
+Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
+-->
 ---
 name: Feature request
 about: Suggest an idea for this project

.github/ISSUE_TEMPLATE/question.md

@@ -1,3 +1,7 @@
+<!--
+SPDX-License-Identifier: MPL-2.0
+Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
+-->
 ---
 name: Question
 about: Ask a question about usage or behaviour

.github/copilot/coding-agent.yml

@@ -0,0 +1,6 @@
+mcp_servers:
+  boj-server:
+    command: npx
+    args: ["-y", "@hyperpolymath/boj-server@latest"]
+    env:
+      BOJ_URL: http://localhost:7700

.github/workflows/cflite_batch.yml

@@ -10,6 +10,7 @@ permissions: read-all
 jobs:
   BatchFuzzing:
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     strategy:
       fail-fast: false
       matrix:

.github/workflows/cflite_pr.yml

@@ -9,6 +9,7 @@ permissions: read-all
 jobs:
   PR:
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     strategy:
       fail-fast: false
       matrix:

.github/workflows/codeql.yml

@@ -17,11 +17,13 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+
 permissions: read-all
 
 jobs:
   analyze:
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     permissions:
       contents: read
       security-events: write

.github/workflows/deno-ci.yml

@@ -17,4 +17,5 @@ permissions:
 
 jobs:
   deno-ci:
-    uses: hyperpolymath/standards/.github/workflows/deno-ci-reusable.yml@c3a62f0cfd993c23661519f571087ed16e13631c # standards#168 head
+    uses: hyperpolymath/standards/.github/workflows/deno-ci-reusable.yml@f5f0506a6ec88e574753eee701a268e0d4b3a7f2 # standards#168 head
+    timeout-minutes: 10