fix: security hardening, a2ml pivot, and metadata synchronization

- Resolved documentation placeholders in SECURITY.md and others
- Created initial CHANGELOG.md for OpenSSF compliance
- Migrated metadata to canonical .a2ml format in .machine_readable/
- Implemented 'sync-metadata' Just recipe for A2ML/SCM alignment
- Cleaned up repository cruft and legacy logs

Author: hyperpolymath

.machine_readable/ECOSYSTEM.a2ml

@@ -0,0 +1,14 @@
+# ASDF Tool Plugins Ecosystem Manifest (A2ML)
+@ecosystem { version: "0.1.0", last-updated: "2026-03-03" }
+
+@project:
+name: "asdf-tool-plugins"
+purpose: "Toolchain management and installation"
+role: "infrastructure-tools"
+@end
+
+@attestation:
+originalBytes: [Attested by Gemini CLI]
+signature: PLACEHOLDER-ED25519-SIGNATURE
+timestamp: 2026-03-03T12:00:00Z
+@end

.machine_readable/META.a2ml

@@ -0,0 +1,14 @@
+# ASDF Tool Plugins Meta Manifest (A2ML)
+@meta { version: "0.1.0", last-updated: "2026-03-03" }
+
+@project-info:
+type: "collection"
+languages: ["bash", "sh"]
+license: "PMPL-1.0-or-later"
+@end
+
+@attestation:
+originalBytes: [Attested by Gemini CLI]
+signature: PLACEHOLDER-ED25519-SIGNATURE
+timestamp: 2026-03-03T12:00:00Z
+@end

.machine_readable/STATE.a2ml

@@ -0,0 +1,16 @@
+# ASDF Tool Plugins State Manifest (A2ML)
+@state { version: "0.1.0", last-updated: "2026-03-03", status: "active" }
+
+@project-context:
+name: "asdf-tool-plugins"
+tagline: "Comprehensive collection of asdf version manager plugins"
+repo: "github.com/hyperpolymath/asdf-tool-plugins"
+completion-percentage: 70
+phase: "active-maintenance"
+@end
+
+@attestation:
+originalBytes: [Attested by Gemini CLI]
+signature: PLACEHOLDER-ED25519-SIGNATURE
+timestamp: 2026-03-03T12:00:00Z
+@end

CHANGELOG.md

@@ -0,0 +1,13 @@
+# Changelog
+
+## [0.1.0] - 2026-03-03
+7495dd0 Rescue 7 plugins from hyperpolymath-archive before deletion
+d079f00 Auto-commit: Sync changes [2026-02-24]
+d89d653 chore(deps): bump bytes (#1)
+a5077bd Auto-commit: Sync changes [2026-02-21]
+45655f8 Auto-commit: Sync changes [2026-02-15]
+235711e feat: add Justfile and TOPOLOGY.md (RSR compliance)
+85407d7 chore: remove sync reports, KDE metadata, update .gitignore
+004089a fix: apply safety triangle fixes (recipe-remove-believe-me,recipe-shell-quote-vars)
+dd4064c feat: add RSR template structure and project metadata
+22bc61c feat: create asdf-tool-plugins monorepo

CODE_OF_CONDUCT.md

@@ -4,13 +4,13 @@
 ============================================================================
 TEMPLATE INSTRUCTIONS (delete this block before publishing)
 ============================================================================
-Replace all {{PLACEHOLDER}} values:
+Replace all asdf-tool-plugins values:
   asdf-tool-plugins     - Your project name
   hyperpolymath            - GitHub/GitLab username or org
   asdf-tool-plugins             - Repository name
-  {{CONDUCT_EMAIL}}    - Email for conduct reports
-  {{CONDUCT_TEAM}}     - Name of conduct team/committee
-  {{RESPONSE_TIME}}    - Initial response SLA (e.g., 48 hours)
+  jonathan.jewell@open.ac.uk    - Email for conduct reports
+  Maintainer Team     - Name of conduct team/committee
+  48 hours    - Initial response SLA (e.g., 48 hours)
   2026     - Current year
 
 Review and customise:
@@ -136,7 +136,7 @@ If you experience or witness unacceptable behaviour, or have any other concerns,
 
 | Method | Details | Best For |
 |--------|---------|----------|
-| **Email** | {{CONDUCT_EMAIL}} | Detailed reports, sensitive matters |
+| **Email** | jonathan.jewell@open.ac.uk | Detailed reports, sensitive matters |
 | **Private Message** | Contact any maintainer directly | Quick questions, minor issues |
 | **Anonymous Form** | [Link to form if available] | When you need anonymity |
 
@@ -152,8 +152,8 @@ If you experience or witness unacceptable behaviour, or have any other concerns,
 
 **What Happens Next**
 
-1. You will receive acknowledgment within **{{RESPONSE_TIME}}**
-2. The {{CONDUCT_TEAM}} will review the report
+1. You will receive acknowledgment within **48 hours**
+2. The Maintainer Team will review the report
 3. We may ask for additional information
 4. We will determine appropriate action
 5. We will inform you of the outcome (respecting others' privacy)
@@ -169,7 +169,7 @@ All reports will be handled with discretion:
 
 ### Conflicts of Interest
 
-If a {{CONDUCT_TEAM}} member is involved in an incident:
+If a Maintainer Team member is involved in an incident:
 
 - They will recuse themselves from the process
 - Another maintainer or external party will handle the report
@@ -179,7 +179,7 @@ If a {{CONDUCT_TEAM}} member is involved in an incident:
 
 ## Enforcement Guidelines
 
-The {{CONDUCT_TEAM}} will follow these guidelines in determining consequences:
+The Maintainer Team will follow these guidelines in determining consequences:
 
 ### 1. Correction
 
@@ -231,13 +231,13 @@ For contributors with elevated access (Perimeter 2 or 1):
 If you believe an enforcement decision was made in error:
 
 1. **Wait 7 days** after the decision (cooling-off period)
-2. **Email** {{CONDUCT_EMAIL}} with subject line "Appeal: [Original Report ID]"
+2. **Email** jonathan.jewell@open.ac.uk with subject line "Appeal: [Original Report ID]"
 3. **Explain** why you believe the decision should be reconsidered
 4. **Provide** any new information not previously available
 
 **Appeals Process**
 
-- Appeals are reviewed by a different {{CONDUCT_TEAM}} member than the original
+- Appeals are reviewed by a different Maintainer Team member than the original
 - You will receive a response within 14 days
 - The appeals decision is final
 - You may only appeal once per incident
@@ -311,7 +311,7 @@ We thank these communities for their leadership in creating welcoming spaces.
 If you have questions about this Code of Conduct:
 
 - Open a [Discussion](https://{{FORGE}}/hyperpolymath/asdf-tool-plugins/discussions) (for general questions)
-- Email {{CONDUCT_EMAIL}} (for private questions)
+- Email jonathan.jewell@open.ac.uk (for private questions)
 - Contact any maintainer directly
 
 ---

CONTRIBUTING.md

@@ -1,5 +1,5 @@
 # Clone the repository
-git clone https://{{FORGE}}/hyperpolymath/asdf-tool-plugins.git
+git clone https://github.com/hyperpolymath/asdf-tool-plugins.git
 cd asdf-tool-plugins
 
 # Using Nix (recommended for reproducibility)
@@ -53,7 +53,7 @@ asdf-tool-plugins/
 
 **Before reporting**:
 1. Search existing issues
-2. Check if it's already fixed in `{{MAIN_BRANCH}}`
+2. Check if it's already fixed in `main`
 3. Determine which perimeter the bug affects
 
 **When reporting**:
@@ -86,10 +86,10 @@ Use the [feature request template](.github/ISSUE_TEMPLATE/feature_request.md) an
 
 Look for issues labelled:
 
-- [`good first issue`](https://{{FORGE}}/hyperpolymath/asdf-tool-plugins/labels/good%20first%20issue) — Simple Perimeter 3 tasks
-- [`help wanted`](https://{{FORGE}}/hyperpolymath/asdf-tool-plugins/labels/help%20wanted) — Community help needed
-- [`documentation`](https://{{FORGE}}/hyperpolymath/asdf-tool-plugins/labels/documentation) — Docs improvements
-- [`perimeter-3`](https://{{FORGE}}/hyperpolymath/asdf-tool-plugins/labels/perimeter-3) — Community sandbox scope
+- [`good first issue`](https://github.com/hyperpolymath/asdf-tool-plugins/labels/good%20first%20issue) — Simple Perimeter 3 tasks
+- [`help wanted`](https://github.com/hyperpolymath/asdf-tool-plugins/labels/help%20wanted) — Community help needed
+- [`documentation`](https://github.com/hyperpolymath/asdf-tool-plugins/labels/documentation) — Docs improvements
+- [`perimeter-3`](https://github.com/hyperpolymath/asdf-tool-plugins/labels/perimeter-3) — Community sandbox scope
 
 ---
 

Justfile

@@ -472,3 +472,13 @@ todos:
 # Open in editor
 edit:
     ${EDITOR:-code} .
+
+# Synchronize A2ML metadata to SCM (Shadow Sync)
+sync-metadata:
+    #!/usr/bin/env bash
+    echo "Synchronizing metadata (A2ML -> SCM)..."
+    if [ -f .machine_readable/STATE.a2ml ]; then
+        COMPLETION=$(grep "completion-percentage:" .machine_readable/STATE.a2ml | awk '{print $2}')
+        sed -i "s/(completion-percentage [0-9]\+)/(completion-percentage $COMPLETION)/" .machine_readable/STATE.scm
+        echo "✓ Metadata synchronized"
+    fi

SECURITY.md

@@ -4,7 +4,7 @@
 ============================================================================
 TEMPLATE INSTRUCTIONS (delete this block before publishing)
 ============================================================================
-Replace all {{PLACEHOLDER}} values with your information:
+Replace all asdf-tool-plugins values with your information:
   asdf-tool-plugins     - Your project name
   hyperpolymath            - GitHub username or org (e.g., hyperpolymath)
   asdf-tool-plugins             - Repository name