docs: align README, EXPLAINME, TOPOLOGY, quickstarts, contractiles with Squad Audit v1

- README: Squad Audit thesis; listings out of scope; v0 marked legacy
- EXPLAINME: fix two false claims (.ac.uk IS enforced; scoring is
  weighted-factor, not dot-product)
- TOPOLOGY: replace fictional completion dashboard with honest state
- QUICKSTART-USER + llm-warmups: fix flat-mate-fix naming, phantom recipes
- contractiles: provisional substitution pending estate respec programme;
  statuses probe-verified
- stapeln.toml: annotate entrypoint drift

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

.machine_readable/contractiles/Adjustfile.a2ml

@@ -1,14 +1,16 @@
 # SPDX-License-Identifier: MPL-2.0
-# Adjustfile — Drift-tolerance contract for rsr-template-repo
+# Adjustfile — Drift-tolerance contract for flat-mate
 # Author: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 #
+# Provisional substitution 2026-06-11 pending estate machine-readable respec programme
+#
 # Cumulative-drift catchment: tolerance bands + corrective actions.
 # Authority: advisory (Yard) — continue-with-warnings; auto_fix where deterministic.
 # Run with: adjust check
 # Fix with: adjust fix (applies deterministic patches; advisory otherwise)
 
 @abstract:
-Drift tolerances and corrective actions for rsr-template-repo. Unlike
+Drift tolerances and corrective actions for flat-mate. Unlike
 MUST (hard gate), ADJUST tracks cumulative drift against tolerance bands
 and proposes corrective actions. Advisory — it warns and trends, it does
 not block.

.machine_readable/contractiles/Intentfile.a2ml

@@ -1,7 +1,9 @@
 # SPDX-License-Identifier: MPL-2.0
-# Intentfile (A2ML Canonical) — north-star contractile for rsr-template-repo
+# Intentfile (A2ML Canonical) — north-star contractile for flat-mate
 # Author: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 #
+# Provisional substitution 2026-06-11 pending estate machine-readable respec programme
+#
 # Paired runner: intend.ncl
 # Verb:          intend
 #
@@ -20,80 +22,99 @@
 #            contractile for hard gates.
 
 @abstract:
-North-star contractile for rsr-template-repo. This repository is the
-canonical template for Rhodium Standard Repository compliance. It provides
-the scaffold that all hyperpolymath repos should copy and customize.
+North-star contractile for flat-mate. v1 is the Squad Audit: an
+already-formed student friend group (the UK "second-year cliff"; target
+wave Jan–May 2027, London) gets a harmony + feasibility audit, an
+auto-drafted house agreement, and a search brief — upstream of SpareRoom,
+hosting no listings. The product never promises a "stable matching"
+(typically nonexistent in roommate markets) and stores no Art. 9
+special-category fields by schema construction, on an epistemic-typed
+VerisimDB server with conceal-lattice disclosure tiers.
 @end
 
 ## Purpose
 
-The rsr-template-repo serves as the master template for all hyperpolymath
-repositories. It contains the complete set of contractile files, machine-readable
-specifications, and governance documentation that define the Rhodium Standard.
+flat-mate audits already-formed student friend groups for lease survival:
+a pairwise harmony + feasibility audit, a house agreement drafted from the
+group's actual divergence points, and a search brief to take to the
+listings market. It sits upstream of listings platforms, serving the UK
+"second-year cliff" — first-years who must form private-market households
+with people they met weeks earlier.
 
-Every new repository in the hyperpolymath estate should be initialized by
-copying this template and substituting the placeholder values with
-repo-specific content.
+The authoritative product spec is docs/design/squad-audit-v1.adoc; where
+code and that document disagree, the document wins until amended.
 
 ## Anti-Purpose
 
 This repository is NOT:
-- A general-purpose project scaffold for external use (hyperpolymath-only)
-- A replacement for per-repo customization (all files must be bespoke)
-- A static template that never changes (evolves with RSR spec)
-- A runtime library or framework (build-time only)
+- A listings platform or SpareRoom rival (output is a vetted household plus a search brief; no listings hosted)
+- A "stable matching" guarantee (stable matchings are typically nonexistent in roommate markets; product copy must never promise one)
+- A store of Art. 9 special-category data (no such fields exist by schema construction)
+- A stranger-discovery swipe app in v1 (the v0 swipe+listings flow stays in-tree as LEGACY pending a quarantine decision; discovery is deferred roadmap)
 
 ## If In Doubt
 
 If you are unsure whether a change is in scope, ask. Sensitive areas:
 - .machine_readable/ contractile definitions
-- RSR specification files
-- Governance templates
+- docs/design/squad-audit-v1.adoc (product spec — source of truth)
+- packages/shared/src/matching/ (engine + conceal/redaction rules)
 - License policy documents
 
 ## Committed Next-Actions
 
-### repo-initialization
-- description: Provide just copy-and-substitute template for new repos
-- probe: test -f scripts/init-repo.sh
+### squad-audit-design-record
+- description: Decide and document the v1 product (Squad Audit) as the authoritative spec
+- probe: test -f docs/design/squad-audit-v1.adoc
+- status: done
+- notes: Decided 2026-06-11; spec wins over code until amended
+
+### scoring-v2-engine
+- description: Split feasibility from harmony, behaviour/tolerance directional scoring, banded verdicts
+- probe: grep -rq "cleanlinessTolerance" packages/shared/src/matching/
 - status: done
-- notes: Run with source scripts/init-repo.sh <new-repo-name>
+- notes: Landed 2026-06-11 (engine v2, 35 tests green); spec at docs/design/squad-audit-v1.adoc
 
-### contractile-completeness
-- description: Every RSR contractile has an a2ml and ncl implementation
-- probe: ls .machine_readable/contractiles/*.a2ml | wc -l | grep -q "^6$"
-- status: in_progress
-- notes: Currently 6 contractile verbs: intend, must, trust, adjust, bust, dust
+### group-audit-core
+- description: auditGroup() — full pairwise matrix, budget intersection, dispersion detection
+- probe: grep -rq "auditGroup" packages/shared/src/matching/
+- status: done
+- notes: Landed 2026-06-11; catches the Bloomsbury Three internal-dealbreaker fixture
 
-### automation-scripts
-- description: All repetitive tasks have just recipes
-- probe: grep -c "^# " Justfile | grep -q "^[6-9][0-9]*$"
-- status: in_progress
+### conceal-lattice
+- description: Disclosure tiers T0/T1/T2 with reciprocity (effectiveTier = min of both)
+- probe: grep -rq "effectiveTier" packages/shared/src/matching/
+- status: done
+- notes: Landed 2026-06-11; mirrors proven-servers/protocols/proven-epistemic (machine-checked reference)
+
+### legacy-v0-quarantine
+- description: Mark the v0 swipe+listings flow LEGACY in-tree until a quarantine/removal decision
+- probe: grep -rq "LEGACY" packages/shared/src/matching/discovery.js
+- status: declared
 
 ## Wishes
 
 ### Near Horizon
 
-#### cross-repo-validation
-- description: Tooling to validate all repos against RSR spec
-- horizon: near
-- status: declared
-
-#### automated-substitution
-- description: Script to automate repo-specific substitution in template
+#### solo-top-up-discovery
+- description: Solo top-up discovery for groups with open slots (conceal tiers + consent lifecycle)
 - horizon: near
 - status: declared
 
 ### Mid Horizon
 
-#### formal-verification
-- description: Idris2 proofs for all critical contractile invariants
+#### da-rounds-solo-joins-household
+- description: Deferred-acceptance rounds for the bipartite solo-joins-household sub-market
+- horizon: mid
+- status: declared
+
+#### calibration-flywheel
+- description: Outcome events on anonymised aggregates; fitted weights, one cycle per academic year
 - horizon: mid
 - status: declared
 
 ### Far Horizon
 
-#### ecosystem-visualization
-- description: Interactive graph of all hyperpolymath repos and dependencies
+#### blocking-pair-stability-audit
+- description: Advisory blocking-pair stability audit over the discovery graph (private, pair-bounded)
 - horizon: far
 - status: declared

.machine_readable/contractiles/Mustfile.a2ml

@@ -1,14 +1,16 @@
 # SPDX-License-Identifier: MPL-2.0
-# Mustfile — Physical state contract for rsr-template-repo
+# Mustfile — Physical state contract for flat-mate
 # Author: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 #
+# Provisional substitution 2026-06-11 pending estate machine-readable respec programme
+#
 # What MUST be true about this repository. Hard requirements.
 # Run with: must check
 # Fix with: must fix (where a deterministic fix exists)
 
 @abstract:
-Physical-state invariants for rsr-template-repo. This is the canonical
-RSR template repository. These are hard requirements — CI and pre-commit
+Physical-state invariants for flat-mate, the Squad Audit student-housing
+harmony platform. These are hard requirements — CI and pre-commit
 hooks fail if any check fails.
 @end
 

.machine_readable/contractiles/Trustfile.a2ml

@@ -1,12 +1,14 @@
 # SPDX-License-Identifier: MPL-2.0
-# Trustfile — Trust boundaries and integrity invariants for rsr-template-repo
+# Trustfile — Trust boundaries and integrity invariants for flat-mate
 # Author: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 #
+# Provisional substitution 2026-06-11 pending estate machine-readable respec programme
+#
 # Defines what LLM/SLM agents are trusted to do without asking, and
 # integrity invariants that verify the repo has not been tampered with.
 
 @abstract:
-Trust boundaries and integrity checks for rsr-template-repo. This file
+Trust boundaries and integrity checks for flat-mate. This file
 combines the trust-level definitions from the original TRUST.contractile
 with the integrity invariants from the old Trustfile.a2ml. It defines
 what AI agents may do autonomously and what requires human approval,
@@ -15,7 +17,7 @@ plus checks that verify repository integrity.
 
 ## Trust Levels
 
-The rsr-template-repo operates at trust level: maximal
+The flat-mate repo operates at trust level: maximal
 
 Trust levels:
 - maximal:    Agent may read, build, test, lint, format, heal freely.

EXPLAINME.adoc

@@ -16,9 +16,17 @@ Profiles, listings, and swipe events are stored as hexads in VeriSimDB. The API
 on Deno; the web client uses React + Vite; the mobile client uses Expo. See
 link:docs/architecture.md[] and link:TOPOLOGY.md[] for the full architecture.
 
-**Caveat:** This is an MVP. University email verification (`.ac.uk`) is stubbed but not
-yet enforced server-side, and the compatibility scoring uses a simple dot-product rather
-than a trained model.
+**Caveat:** This is an MVP. University email validation (`.ac.uk`) *is* enforced
+server-side — every profile write runs `validateProfileInput`
+(`packages/shared/src/domain.js`), which rejects non-`.ac.uk` addresses — but it is a
+domain-suffix check only: no confirmation email is sent, so address ownership is not
+verified. Compatibility scoring is explicit weighted-factor arithmetic (budget ×0.4,
+lifestyle ×0.4, preferences ×0.2), not a dot-product and not a trained model; the
+profile vector is used only for candidate retrieval in VeriSimDB. The planned evolution
+is literature-seeded weights with an outcome-calibration flywheel, not a trained model.
+
+The flow described above is the legacy v0 marketplace; the current product design is
+the Squad Audit — see link:docs/design/squad-audit-v1.adoc[].
 
 === Evidence
 

QUICKSTART-USER.adoc

@@ -1,9 +1,9 @@
 // SPDX-License-Identifier: MPL-2.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
-= Flat Mate Fix — User Quickstart
+= flat-mate — User Quickstart
 :toc: preamble
 
-Get up and running in 60 seconds.
+Clone and explore in 60 seconds.
 
 == Prerequisites
 
@@ -14,10 +14,9 @@ Get up and running in 60 seconds.
 
 [source,bash]
 ----
-git clone https://github.com/hyperpolymath/flat-mate-fix
-cd flat-mate-fix
+git clone https://github.com/hyperpolymath/flat-mate
+cd flat-mate
 just doctor    # check toolchain
-just heal      # auto-install missing tools
 ----
 
 == First Run
@@ -32,4 +31,4 @@ just help-me   # see common workflows
 
 * `just help-me` — common workflows
 * `just doctor` — diagnose toolchain issues
-* https://github.com/hyperpolymath/flat-mate-fix/issues — report bugs
+* https://github.com/hyperpolymath/flat-mate/issues — report bugs

README.adoc

@@ -8,37 +8,47 @@ image:https://img.shields.io/badge/OpenSSF-Best_Practices-green?logo=openssource
 :toc: preamble
 :icons: font
 
-London-first flatmate matching + room listings for students.
+Squad Audit for student house-shares: bring the friend group you already
+have; `flat-mate` tells you whether it survives a lease, then drafts the
+house agreement and search brief to make sure it does.
 
 This repo includes:
 
-* `apps/api` — Node API using `verisimdb` as the persistence/search layer.
+* `apps/api` — Deno API using `verisimdb` as the persistence/search layer.
 * `apps/web` — React + Vite web client.
 * `apps/mobile` — Expo React Native mobile client.
-* `packages/shared` — Domain models, compatibility scoring, and verisimdb encoding helpers.
+* `packages/shared` — Domain models, matching/scoring rules, and verisimdb encoding helpers.
 
-== Why this MVP
+== Why this product (v1 = Squad Audit)
 
-Student renters in London need two things at once:
+UK first-years are allocated halls; by January they must form private-market
+groups of 3–6 with people they met eight weeks earlier, with no compatibility
+input. No incumbent serves that moment. `flat-mate` audits an
+*already-formed* group — harmony + feasibility check, auto-drafted house
+agreement, search brief — and sits *upstream* of SpareRoom and its peers.
+Listings are explicitly *out of scope*: flat-mate hosts none and is not a
+SpareRoom rival. Target wave: Jan–May 2027, London second years.
 
-* *matching*: who to live with.
-* *listing*: where to live.
+The earlier swipe + listings flow (v0) remains in-tree as *legacy* code until
+a quarantine/removal decision. It is not the product. Authoritative spec:
+link:docs/design/squad-audit-v1.adoc[].
 
-`flat-mate` handles both in one flow, with profile compatibility and listing
-discovery centered around London boroughs and universities.
+*What we never promise:* a "stable matching" — typically nonexistent in roommate markets; see the theory constraints in link:docs/design/squad-audit-v1.adoc[].
 
 == Architecture
 
-`flat-mate` writes profiles, listings, and swipe events as hexads in `verisimdb`:
+`flat-mate` writes entities as hexads in `verisimdb` (`POST /hexads`,
+`GET /search/text`, `POST /search/vector`). Because current `verisimdb` API
+responses are compact, the app stores encoded payloads in searchable document
+titles as an MVP strategy.
 
-* `POST /hexads` for writes.
-* `GET /search/text` to retrieve encoded entities.
-* `POST /search/vector` for compatibility feed ranking.
+The in-tree profile/listing/swipe write paths are the legacy v0 flow. The v1
+target is an epistemic-typed server: per-field governance metadata,
+conceal-lattice disclosure tiers, no special-category fields by schema
+construction — see the design doc. Matching rules live in
+`packages/shared/src/matching/`, never in UI components.
 
-Because current `verisimdb` API responses are compact, the app stores encoded
-payloads in searchable document titles as an MVP strategy.
-
-See `docs/architecture.md`.
+See `docs/architecture.md`, link:TOPOLOGY.md[], and link:EXPLAINME.adoc[].
 
 == Quick Start
 
@@ -93,30 +103,29 @@ VERISIMDB_BASE_URL=http://127.0.0.1:8080
 VERISIMDB_VECTOR_DIM=384
 ----
 
-Optional web variable: `VITE_API_BASE_URL=http://127.0.0.1:4000`
-
-Optional Expo variable: `EXPO_PUBLIC_API_BASE_URL=http://127.0.0.1:4000`
+Optional: `VITE_API_BASE_URL=http://127.0.0.1:4000` (web),
+`EXPO_PUBLIC_API_BASE_URL=http://127.0.0.1:4000` (Expo).
 
 Profiles require a `.ac.uk` `studentEmail` for student verification in the first pilot.
 
 == Product Scope (First Instance)
 
-* Student profile creation with compatibility preferences.
-* Swipe-style profile matching.
-* Listing creation and browsing.
-* Match discovery from mutual likes.
+* Group creation and member questionnaires, eliciting both *behaviour* and *tolerance* per dimension.
+* Pairwise harmony audit across the group, with internal dealbreaker detection.
+* Feasibility by budget *intersection* (`[max(mins), min(maxes)]`, never by mean).
+* House-agreement draft generated from the group's actual divergence points.
+* Search brief to take to the listings market.
 
 == Next Product Increments
 
-* University email verification (`.ac.uk`).
-* Safety workflows (reporting, blocklist, check-in sharing).
-* Built-in chat and viewing scheduler.
-
-== Architecture
-
-See link:TOPOLOGY.md[TOPOLOGY.md] for a visual architecture map and completion dashboard.
+Deferred roadmap, in liquidity order (see the design doc):
 
-Wondering how this works? See link:EXPLAINME.adoc[].
+. Solo *top-up* discovery for groups with open slots, gated by
+  conceal-lattice disclosure tiers and a mutual-consent lifecycle.
+. Deferred-acceptance rounds for solo-joins-household — the one genuinely
+  bipartite, theory-clean centralized mechanism.
+. Calibration flywheel: anonymised outcome events so scoring weights become
+  fitted rather than literature-seeded.
 
 == License