Claude/upbeat mendel l bo9 g

.github/workflows/governance.yml

@@ -31,4 +31,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@main
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@3ec2e85cc1d54ec2ab20a84fcba96e5008545925 # main 2026-05-25

.github/workflows/jekyll-gh-pages.yml

@@ -28,16 +28,16 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Setup Pages
-        uses: actions/configure-pages@v6
+        uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6
       - name: Build with Jekyll
-        uses: actions/jekyll-build-pages@v1
+        uses: actions/jekyll-build-pages@44a6e6beabd48582f863aeeb6cb2151cc1716697 # v1
         with:
           source: ./
           destination: ./_site
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v5
+        uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5
 
   # Deployment job
   deploy:
@@ -49,4 +49,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v5
+        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5

.github/workflows/language-policy.yml

@@ -5,7 +5,7 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Enforce language policies
         run: |
           # Block new Python files (except SaltStack)

.github/workflows/rescript-deno-ci.yml

@@ -6,8 +6,8 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
-      - uses: denoland/setup-deno@v2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v2
         with:
           deno-version: v1.x
 
@@ -33,8 +33,8 @@ jobs:
   security:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
-      - uses: denoland/setup-deno@v2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v2
       - name: Check permissions
         run: |
           # Audit for dangerous permissions

.github/workflows/rust-ci.yml

@@ -9,11 +9,11 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
-      - uses: dtolnay/rust-toolchain@stable
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
         with:
           components: rustfmt, clippy
-      - uses: Swatinem/rust-cache@v2
+      - uses: Swatinem/rust-cache@42dc69e1aa15d09112580998cf2ef0119e2e91ae # v2
 
       - name: Check formatting
         run: cargo fmt --all -- --check
@@ -30,8 +30,8 @@ jobs:
   security:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
-      - uses: dtolnay/rust-toolchain@stable
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
       - name: Install cargo-audit
         run: cargo install cargo-audit
       - name: Security audit
@@ -42,12 +42,12 @@ jobs:
   coverage:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
-      - uses: dtolnay/rust-toolchain@stable
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
       - name: Install tarpaulin
         run: cargo install cargo-tarpaulin
       - name: Generate coverage
         run: cargo tarpaulin --out Xml
-      - uses: codecov/codecov-action@v6
+      - uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6
         with:
           files: cobertura.xml

.well-known/ai.txt

@@ -0,0 +1,14 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# AI agent discovery file for absolute-zero
+# See: https://github.com/hyperpolymath/absolute-zero/blob/main/0-AI-MANIFEST.a2ml
+
+User-Agent: *
+Manifest: /0-AI-MANIFEST.a2ml
+EntryPoint: /docs/CLAUDE.adoc
+State: /.machine_readable/6a2/STATE.a2ml
+Roadmap: /ROADMAP.adoc
+Allow: training-with-attribution
+Allow: documentation-summarisation
+Disallow: closed-source-redistribution
+License: PMPL-1.0-or-later
+Contact: developer@joshuajewell.dev

.well-known/humans.txt

@@ -0,0 +1,15 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# humanstxt.org
+
+/* TEAM */
+Maintainer: Jonathan D. A. Jewell
+Contact: developer @ joshuajewell.dev
+Site: https://github.com/hyperpolymath/absolute-zero
+
+/* THANKS */
+Contributors: see git log + docs/MAINTAINERS.adoc
+
+/* SITE */
+Last update: 2026-05-25
+Standards: PMPL-1.0-or-later, RSR (Rhodium Standard Repository) compliant
+Components: Coq, Lean 4, Z3, Agda, Isabelle, Mizar, Idris2, ReScript, Rust

.well-known/security.txt

@@ -0,0 +1,6 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+Contact: https://github.com/hyperpolymath/absolute-zero/security/advisories/new
+Expires: 2027-05-25T00:00:00Z
+Preferred-Languages: en
+Canonical: https://github.com/hyperpolymath/absolute-zero/.well-known/security.txt
+Policy: https://github.com/hyperpolymath/absolute-zero/blob/main/SECURITY.md

0-AI-MANIFEST.a2ml

@@ -0,0 +1,71 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# 0-AI-MANIFEST.a2ml — Absolute Zero AI assistant manifest
+# Schema: a2ml v1.0
+# Supersedes legacy AI.a2ml + AI.djot (deleted in repo tidy 2026-05-25)
+
+[metadata]
+project = "absolute-zero"
+repo = "github.com/hyperpolymath/absolute-zero"
+manifest-version = "1.0"
+last-updated = "2026-05-25"
+
+[scope]
+purpose = """
+  Formal verification of Certified Null Operations (CNOs) across multiple
+  proof systems (Coq, Lean 4, Z3, Agda, Isabelle, Mizar) plus an Idris2
+  ABI surface for FFI.
+"""
+
+[entry-points]
+# Where an AI agent should look first.
+root-context  = "docs/CLAUDE.adoc"
+project-state = ".machine_readable/6a2/STATE.a2ml"
+roadmap       = "ROADMAP.adoc"
+contributing  = "CONTRIBUTING.adoc"
+audit-trail   = "AUDIT.adoc"
+rsr-status    = "RSR_COMPLIANCE.adoc"
+
+[machine-readable]
+# Authoritative metadata artefacts; .a2ml format under 6a2/ supersedes
+# the older Guile-Scheme .scm format. Both kept side-by-side during the
+# migration window for legacy tooling compatibility.
+state     = ".machine_readable/6a2/STATE.a2ml"
+meta      = ".machine_readable/6a2/META.a2ml"
+ecosystem = ".machine_readable/6a2/ECOSYSTEM.a2ml"
+agentic   = ".machine_readable/6a2/AGENTIC.a2ml"
+neurosym  = ".machine_readable/6a2/NEUROSYM.a2ml"
+playbook  = ".machine_readable/6a2/PLAYBOOK.a2ml"
+
+legacy-scm-meta      = ".machine_readable/META.scm"
+legacy-scm-ecosystem = ".machine_readable/ECOSYSTEM.scm"
+legacy-scm-agentic   = ".machine_readable/AGENTIC.scm"
+legacy-scm-neurosym  = ".machine_readable/NEUROSYM.scm"
+legacy-scm-playbook  = ".machine_readable/PLAYBOOK.scm"
+
+[language-policy]
+# Single source of truth lives in docs/CLAUDE.adoc + .github/workflows/language-policy.yml.
+# Summary:
+allowed   = ["ReScript", "Deno", "Rust", "Tauri", "Dioxus", "Gleam", "Bash", "JavaScript (limited)", "Nickel", "Guile Scheme", "Julia", "OCaml", "Ada", "Idris2"]
+banned    = ["TypeScript", "Node.js", "npm", "Bun", "pnpm", "yarn", "Go", "Python", "Java", "Kotlin", "Swift", "React Native", "Flutter", "Dart", "Ruby", "Perl"]
+reference = "docs/CLAUDE.adoc#language-policy"
+
+[echidna-protocol]
+# All ECHIDNA invocations route through the echidna-llm-mcp BoJ cartridge.
+# Never call ECHIDNA directly.
+gateway = "boj-server/cartridges/echidna-llm-mcp"
+docs    = "docs/archive/ECHIDNA-2025-11-22.adoc"
+tools = [
+  "echidna_list_provers",
+  "echidna_prove",
+  "echidna_verify",
+  "echidna_verify_raw",
+  "echidna_suggest",
+  "echidna_suggest_tactics",
+  "echidna_search",
+  "echidna_session_create",
+]
+
+[delivery]
+commit-policy = "conventional commits; never amend published commits"
+state-update  = "update .machine_readable/6a2/STATE.a2ml whenever phase/progress changes"
+adr-tracking  = "architectural changes recorded in .machine_readable/META.scm `architecture-decisions`"