chore: deploy UX infrastructure (contractile.just, .well-known, manifest)

hyperpolymath · claude · hyperpolymath · commit 856f4a6bd9a3 · 2026-03-28T23:57:05.000Z
Batch deployment of missing UX infrastructure files:
- contractile.just (policy enforcement recipes)
- .well-known/ (ai.txt, humans.txt, security.txt, groove/)
- 0-AI-MANIFEST.a2ml (AI agent entry point)
- agent_instructions/ (methodology, coverage, debt)
- Justfile with doctor/heal/tour/help-me recipes
- setup.sh bootstrap script
- llm-warmup-user.md

Co-Authored-By: Claude Opus 4.6 (1M context) &lt;noreply@anthropic.com&gt;
diff --git a/.well-known/ai.txt b/.well-known/ai.txt
@@ -0,0 +1,18 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# ai.txt - AI interaction policy
+# See: https://site.spawning.ai/spawning-ai-txt
+
+User-Agent: *
+Disallow-Training: yes
+Disallow-Summarization: no
+Disallow-Generation: yes
+
+# This project's code is licensed under PMPL-1.0-or-later.
+# AI agents may read and analyze this code for assisting contributors.
+# AI agents must NOT use this code for model training without explicit consent.
+# AI agents must preserve Emotional Lineage per PMPL Section 3.
+#
+# For AI agent integration instructions, see:
+#   0-AI-MANIFEST.a2ml (universal AI entry point)
+#   AI.a2ml (Claude-specific instructions)
+#   .machine_readable/ (structured project state)
diff --git a/.well-known/humans.txt b/.well-known/humans.txt
@@ -0,0 +1,14 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# humanstxt.org
+
+/* TEAM */
+Maintainer: Jonathan D.A. Jewell (hyperpolymath)
+Contact: j.d.a.jewell@open.ac.uk
+From: United Kingdom
+
+/* SITE */
+Last update: 2026-03-28
+Standards: RSR (Rhodium Standard Repository)
+License: PMPL-1.0-or-later (Palimpsest MPL)
+Components: Idris2 ABI, Zig FFI
+Tools: just, Podman, Guix
diff --git a/.well-known/security.txt b/.well-known/security.txt
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# RFC 9116 - security.txt
+# https://securitytxt.org/
+
+Contact: mailto:j.d.a.jewell@open.ac.uk
+Expires: 2027-12-31T23:59:59.000Z
+Preferred-Languages: en
+Canonical: https://github.com/hyperpolymath/anvomidav/.well-known/security.txt
+Policy: https://github.com/hyperpolymath/anvomidav/blob/main/SECURITY.md
diff --git a/0-AI-MANIFEST.a2ml b/0-AI-MANIFEST.a2ml
@@ -0,0 +1,128 @@
+# ⚠️ STOP - CRITICAL READING REQUIRED
+
+**THIS FILE MUST BE READ FIRST BY ALL AI AGENTS**
+
+## WHAT IS THIS?
+
+This is the AI manifest for **[YOUR-REPO-NAME]**. It declares:
+- Canonical file locations (where things MUST be, and nowhere else)
+- Critical invariants (rules that must NEVER be violated)
+- Repository structure and organization
+
+## CANONICAL LOCATIONS (UNIVERSAL RULE)
+
+### Machine-Readable Metadata: `.machine_readable/` ONLY
+
+These 6 a2ml files MUST exist in `.machine_readable/` directory ONLY:
+1. **STATE.a2ml** - Project state, progress, blockers
+2. **META.a2ml** - Architecture decisions, governance
+3. **ECOSYSTEM.a2ml** - Position in ecosystem, relationships
+4. **AGENTIC.a2ml** - AI agent interaction patterns
+5. **NEUROSYM.a2ml** - Neurosymbolic integration config
+6. **PLAYBOOK.a2ml** - Operational runbook
+
+**CRITICAL:** If ANY of these files exist in the root directory, this is an ERROR.
+
+### Anchor File: `.machine_readable/anchors/ANCHOR.a2ml` ONLY
+
+Canonical authority and semantic-boundary declaration MUST exist at:
+
+` .machine_readable/anchors/ANCHOR.a2ml `
+
+Do not place `ANCHOR.a2ml` at repository root.
+
+### Maintenance Policies: `.machine_readable/policies/` ONLY
+
+Canonical maintenance/governance files MUST exist under:
+
+` .machine_readable/policies/ `
+
+Minimum required files:
+- `MAINTENANCE-AXES.a2ml`
+- `MAINTENANCE-CHECKLIST.a2ml`
+- `SOFTWARE-DEVELOPMENT-APPROACH.a2ml`
+
+Do not place maintenance policy files in repository root.
+
+### Bot Directives: `.machine_readable/bot_directives/` ONLY
+
+Bot-specific instructions for your automated agents.
+
+### Contractiles: `.machine_readable/contractiles/` ONLY
+
+Policy enforcement contracts (k9, dust, lust, must, trust).
+
+### AI Configuration & Guides: `.machine_readable/ai/` ONLY
+
+- `AI.a2ml` - Language-specific or LLM-specific patterns
+- `PLACEHOLDERS.md` - Bootstrap guide
+
+### Community & Forge Metadata: `.github/` ONLY
+
+- `CODEOWNERS` - Review assignments
+- `MAINTAINERS` - Machine-readable contact list
+- `SUPPORT` - Support channels
+- `SECURITY.md` - Technical security policy
+- `CONTRIBUTING.md` - Technical contribution manual
+- `CODE_OF_CONDUCT.md` - Conduct rules
+
+### Agent Instructions: `.machine_readable/agent_instructions/` ONLY
+
+Methodology-aware AI agent configuration (ADR-002):
+- `methodology.a2ml` - Mode, invariants, ring ceiling, priority weights
+- `coverage.a2ml` - Session coverage tracking (visited, skipped, MUSTs)
+- `debt.a2ml` - Meander debt carried between sessions
+
+Entry points:
+- `0-AI-MANIFEST.a2ml` - THIS FILE (universal entry point, read FIRST)
+
+## CORE INVARIANTS
+
+1. **No state file duplication** - Root must NOT contain STATE.a2ml, META.a2ml, etc.
+2. **Single source of truth** - `.machine_readable/` is authoritative
+3. **No stale metadata** - If root state files exist, they are OUT OF DATE
+4. **License consistency** - All code PMPL-1.0-or-later unless platform requires MPL-2.0
+5. **Author attribution** - Always "{{AUTHOR}} <{{AUTHOR_EMAIL}}>"
+6. **Container images** - MUST use Chainguard base (`cgr.dev/chainguard/wolfi-base:latest` or `cgr.dev/chainguard/static:latest`)
+7. **Container runtime** - Podman, never Docker. Files are `Containerfile`, never `Dockerfile`
+8. **Container orchestration** - `selur-compose`, never `docker-compose`
+
+## REPOSITORY STRUCTURE
+
+This repo follows the **Dual-Track** architecture:
+
+```
+[YOUR-REPO-NAME]/
+├── 0-AI-MANIFEST.a2ml         # THIS FILE (start here)
+├── README.adoc                 # High-level pitch — excitement and awe (Rich Human)
+├── EXPLAINME.adoc              # Developer deep-dive — how it works (Rich Nerd)
+├── ROADMAP.adoc                # Future direction
+├── CONTRIBUTING.adoc           # Human contribution guide
+├── GOVERNANCE.adoc             # Decision-making model
+├── Justfile                    # Task runner
+├── Containerfile               # OCI build
+├── LICENSE                     # Primary license
+├── src/                        # Source code
+│   └── interface/              # Verified Interface Seams
+│       ├── abi/                # Idris2 ABI (The Spec)
+│       ├── ffi/                # Zig FFI (The Bridge)
+│       └── generated/          # C Headers (The Result)
+├── container/                  # Stapeln container ecosystem
+├── docs/                       # Technical depths
+│   ├── attribution/            # Citations, owners, maintainers (adoc)
+│   ├── architecture/           # Topology, diagrams
+│   ├── theory/                 # Domain theory
+│   └── practice/               # Manuals
+├── docs/legal/                  # Legal exhibits and full texts
+└── .machine_readable/          # ALL machine-readable metadata
+```
+
+## SESSION STARTUP CHECKLIST
+
+✅ Read THIS file (0-AI-MANIFEST.a2ml) first
+✅ Understand canonical location: `.machine_readable/`
+✅ State understanding of canonical locations
+
+## ATTESTATION PROOF
+
+**"I have read the AI manifest. All machine-readable content (state files, anchors, policies, bot directives, contractiles, AI guides) is located in `.machine_readable/` ONLY, and community metadata is in `.github/`. I will not create duplicate files in the root directory."**
diff --git a/contractile.just b/contractile.just
@@ -0,0 +1,75 @@
+# Auto-generated by: contractile gen-just
+# Source directory: contractiles
+# Re-generate with: contractile gen-just --dir contractiles
+#
+# SPDX-License-Identifier: PMPL-1.0-or-later
+
+# === DUST (Recovery & Rollback) ===
+# Source: Dustfile.a2ml
+
+# List available dust recovery actions
+dust-status:
+    @echo '  dust-source-rollback: Revert all source changes to last commit [rollback]'
+
+# Revert all source changes to last commit
+dust-source-rollback:
+    @echo 'Executing rollback for source-rollback'
+    git checkout HEAD -- .
+
+
+# === INTEND (Declared Future Intent) ===
+# Source: Intentfile.a2ml
+
+# Display declared future intents
+intend-list:
+    @echo '=== Declared Intent ==='
+    @echo ''
+    @echo 'Features:'
+    @echo ''
+    @echo 'Quality:'
+
+
+# === MUST (Physical State Checks) ===
+# Source: Mustfile.a2ml
+
+# Run all must checks
+must-check: must-license-present must-readme-present must-spdx-headers must-no-banned-files
+    @echo 'All must checks passed'
+
+# LICENSE file must exist
+must-license-present:
+    test -f LICENSE
+
+# README must exist
+must-readme-present:
+    test -f README.adoc || test -f README.md
+
+# Source files should have SPDX license headers
+must-spdx-headers:
+    find . -name '*.rs' -o -name '*.res' -o -name '*.gleam' | head -20 | xargs -r grep -L 'SPDX-License-Identifier' | wc -l | grep -q '^0$'
+
+# No Dockerfiles or Makefiles
+must-no-banned-files:
+    test ! -f Dockerfile && test ! -f Makefile
+
+
+# === TRUST (Integrity & Provenance Verification) ===
+# Source: Trustfile.a2ml
+
+# Run all trust verifications
+trust-verify: trust-license-content trust-no-secrets-committed trust-container-images-pinned
+    @echo 'All trust verifications passed'
+
+# LICENSE contains expected SPDX identifier
+trust-license-content:
+    grep -q 'SPDX\|License\|MIT\|Apache\|PMPL\|MPL' LICENSE
+
+# No .env or credential files in repo
+trust-no-secrets-committed:
+    test ! -f .env && test ! -f credentials.json && test ! -f .env.local
+
+# Containerfile base images use pinned digests
+trust-container-images-pinned:
+    test ! -f Containerfile || grep -q '@sha256:' Containerfile
+
+
