docs(governance): CRG v2.0 STRICT audit — C (declared) -> D (honest)

One-grade demotion. Clears the D-floor comfortably on structural axes:
- 24 workflows, contractile trident, 6a2 A2ML layout, Justfile
- 94 filesystem-verifiable Deno.test( calls
- Genuinely strong EXPLAINME + SEMANTICS docs + 9 Idris2 proof modules

But fails C:

1. Entire 3,028-LOC test suite is in banned TypeScript. Masked by a
   gamed workflow — .github/workflows/ts-blocker.yml checks only
   `git diff HEAD~1` for new .ts files, so 6 TypeScript test files
   added 2026-04-04 were never scanned. Ts-blocker shows green while
   3,028 LOC of banned .ts ship in-tree. Third repo this session with
   the HEAD~1 grandfathering pattern (double-track-browser, modshells
   the others).
2. extension/ subtree has zero per-directory READMEs.
3. 5 of 6 .machine_readable/6a2/*.a2ml files are empty stubs.
4. No [dogfooding-status] in STATE.a2ml.
5. EXPLAINME claims dogfood reuse in gossamer/neurophone/vscode-k9 —
   grep for "fireflag" in those three repos returns zero hits.
   Fabricated integration claims, same shape as proof-of-work's
   EXPLAINME File Map fabrication.

Internal drift: README declares "Completion: 99%", STATE declares 75%.
5 push remotes locally configured (mirror policy drift — GitHub should
be sole remote per estate rule). 3 crg-requirements (smoke/reflexive/
contract) marked DONE with zero corresponding test files.

Priority D-floor recovery + route-to-C:
1. (L) Port TypeScript tests to ReScript. Remove the HEAD~1 window
   from ts-blocker.yml.
2. (M) Populate [dogfooding-status] with real consumers, OR remove
   the fabricated dogfood claims from EXPLAINME.
3. (S) Fill the 5 empty A2ML stubs or delete them.
4. (S) Reconcile README 99% vs STATE 75%.
5. (S) Remove non-origin push remotes.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: hyperpolymath