fix: baseline defects — 6a2→descriptiles, HAR-specific contractiles (all six verbs), documented CLI surface (#111)

## What

Three of the recorded baseline defects, fixed in turn (curated
multi-commit series — one logical change per commit):

### 1. `chore(naming)` — 6a2 → descriptiles + real contractiles
- `.machine_readable/6a2/` → `.machine_readable/descriptiles/` per the
estate naming mandate; references updated in `0-AI-MANIFEST.a2ml`,
`GOVERNANCE.adoc`, `.claude/CLAUDE.md`.
- All six contractile verbs now exist **and describe this repository**:
the four existing files were verbatim rsr-template-repo copies (wrong
repo name, JS/TS-only secret scan in a Rust repo, template-drift checks,
a Mustfile asserting the old `6a2/anchors` path — so `must` failed by
construction). Rewritten HAR-specific; **Dustfile + Bustfile created**
(the two missing canon verbs). Bust failure modes reference the real
test surface; Must gains a `no-deprecated-6a2` regression guard;
Intentfile now carries the actual north star (ADR-0002/0003, arghda
track #104).

### 2. `docs` — crate-count drift
README/EXPLAINME/ROADMAP said "7 crates"; the workspace has 8 since
`har-abi` (#109). Also reflects har-abi's implemented+tested status in
the README ABI row (Idris2 stubs stay honestly marked scaffold).

### 3. `feat(cli)` — documented route-management surface
har-cli was a 3-command demo with zero tests against a documented
`list/add/remove/inspect` surface. Now config-backed: `--config` file
bootstrap, add/remove with validation and orphan-rule cleanup, inspect
with rule cross-references, `route --tag` dry-runs, `default_strategy`
honoured from config. 8 unit tests; clippy `-D warnings` clean; every
subcommand smoke-tested e2e against a real config file.

Note: the "4/7 routing strategies are dead placeholders" defect from the
same list was already fixed by a prior session (all seven strategies
implemented and tested in har-router) — verified, nothing to do.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Author: hyperpolymath

.claude/CLAUDE.md

@@ -41,7 +41,7 @@ The following files in `.machine_readable/` contain structured project metadata:
 | **Bash/POSIX Shell** | Scripts, automation | Keep minimal |
 | **JavaScript** | Only where AffineScript cannot | MCP protocol glue, Deno APIs |
 | **Nickel** | Configuration language | For complex configs |
-| **Guile Scheme** | State/meta files | .machine_readable/6a2/STATE.a2ml, .machine_readable/6a2/META.a2ml, .machine_readable/6a2/ECOSYSTEM.a2ml |
+| **Guile Scheme** | State/meta files | .machine_readable/descriptiles/STATE.a2ml, .machine_readable/descriptiles/META.a2ml, .machine_readable/descriptiles/ECOSYSTEM.a2ml |
 | **Julia** | Batch scripts, data processing | Per RSR |
 | **OCaml** | AffineScript compiler | Language-specific |
 | **Ada** | Safety-critical systems | Where required |

.github/workflows/secret-scanner.yml

@@ -19,5 +19,5 @@ jobs:
     # `timeout-minutes` is NOT permitted here and makes GitHub reject the whole
     # workflow (startup_failure on every push). The timeout belongs inside the
     # reusable workflow in hyperpolymath/standards, not on the caller.
-    uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@c4d24103506d9519ef87047eaabc3d5f5efaccd0
+    uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@db12a6ad3ef9076d5f7bdcf98d7d15cf8547555a
     secrets: inherit

.machine_readable/contractiles/Adjustfile.a2ml

@@ -1,5 +1,5 @@
 # SPDX-License-Identifier: MPL-2.0
-# Adjustfile — Drift-tolerance contract for rsr-template-repo
+# Adjustfile — Drift-tolerance contract for hybrid-automation-router
 # Author: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 #
 # Cumulative-drift catchment: tolerance bands + corrective actions.
@@ -8,65 +8,57 @@
 # Fix with: adjust fix (applies deterministic patches; advisory otherwise)
 
 @abstract:
-Drift tolerances and corrective actions for rsr-template-repo. Unlike
-MUST (hard gate), ADJUST tracks cumulative drift against tolerance bands
-and proposes corrective actions. Advisory — it warns and trends, it does
-not block.
+Drift tolerances and corrective actions for hybrid-automation-router (HAR).
+Unlike MUST (hard gate), ADJUST tracks cumulative drift against tolerance
+bands and proposes corrective actions. Advisory — it warns and trends, it
+does not block.
 @end
 
-## Template Drift
-
-### placeholder-drift
-- description: Template placeholders should be replaced when copied
-- tolerance: 0 placeholder markers in copied repos
-- corrective: Search and replace all {{PLACEHOLDER}} markers
-- severity: advisory
-- notes: This check only applies to repos that copied from this template
+## Documentation Drift
 
-### template-version-drift
-- description: Template version should match RSR spec version
-- tolerance: Template version matches current RSR spec
-- corrective: Update template to match latest RSR spec
+### crate-count-accuracy
+- description: Docs stating the crate count must match the actual workspace
+- tolerance: Documented count equals `ls crates | wc -l`
+- corrective: Update README/ROADMAP crate counts when the workspace changes
 - severity: advisory
+- notes: Historical drift — "8 crates" claims while the workspace held 7
 
-## Documentation Drift
-
-### readme-completeness
-- description: README should document all template features
-- tolerance: README covers all contractiles and directory structure
-- corrective: Update README.adoc with missing sections
+### planned-vs-present-dirs
+- description: Directories documented as done must exist; absent ones must be marked planned
+- tolerance: panels/ and services/ status in docs matches the filesystem
+- corrective: Demote absent artefacts to "planned" in README/ROADMAP
 - severity: advisory
 
 ### example-accuracy
-- description: Examples in documentation should match actual template content
-- tolerance: All code examples in docs are accurate
+- description: Code examples in documentation should match actual crate APIs
+- tolerance: All examples compile against the current workspace
 - corrective: Audit and fix examples in documentation
 - severity: advisory
 
 ## Structural Drift
 
-### contractile-sync
-- description: All contractiles should have matching a2ml and ncl implementations
-- tolerance: Every .a2ml has a corresponding .ncl
-- corrective: Generate missing .ncl files from .a2ml
+### abi-wiring-honesty
+- description: ABI/FFI artefacts claimed as wired must be consumed by a crate
+- tolerance: Every src/abi spec is referenced from build.rs, a crate, or marked scaffold
+- corrective: Mark unwired specs as scaffold in docs, or wire them
 - severity: advisory
 
 ### no-broken-symlinks
-- description: No broken symbolic links in template structure
+- description: No broken symbolic links in the repository
 - tolerance: 0 broken symlinks
-- corrective: Run symlink-check script
+- corrective: Remove or repoint broken links
 - severity: advisory
 
-## Accessibility Drift
+## Style Drift
 
 ### adoc-not-md
-- description: Template docs should prefer AsciiDoc
-- tolerance: New prose docs are *.adoc
-- corrective: Convert any new *.md to *.adoc
+- description: Prose docs should prefer AsciiDoc
+- tolerance: New prose docs are *.adoc (README.md is a deliberate exception)
+- corrective: Convert any new *.md prose to *.adoc
 - severity: advisory
 
 ### spdx-header-consistency
-- description: All template files have correct SPDX headers
-- tolerance: 0 files missing SPDX-License-Identifier
-- corrective: Add SPDX headers to files that need them
+- description: All source files have correct SPDX + Owner headers
+- tolerance: 0 files missing SPDX-License-Identifier (see AGENT-HEADERS.md)
+- corrective: Add SPDX/Owner headers to files that need them
 - severity: advisory

.machine_readable/contractiles/Bustfile.a2ml

@@ -0,0 +1,63 @@
+# SPDX-License-Identifier: MPL-2.0
+# Bustfile — failure mode contractile for hybrid-automation-router
+# Author: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
+#
+# Verb:      bust
+# Semantics: Every declared failure mode must have a working recovery path
+#            that has been exercised. Status moves:
+#              declared → drilled (probe run) → verified (recovery confirmed)
+#              or → failing (recovery broken)
+
+@abstract:
+Failure modes for hybrid-automation-router (HAR): the routing engine's
+no-target, unhealthy-target, and queue-backpressure paths, plus contractile
+format integrity. Probes reference the repository's real test surface so a
+drill is a runnable command, not a fiction.
+@end
+
+## Failure Modes
+
+### routing-no-eligible-target
+- class: routing
+- description: An event arrives whose category/capabilities no registered target can satisfy
+- injection_probe: "cargo test -p har-router test_no_matching_target"
+- recovery_probe: "cargo test -p har-dispatch"
+- expected_recovery_time_seconds: 5
+- status: declared
+- notes: route() must return Error::NoTarget (never panic); dispatch layer owns the dead-letter path
+
+### primary-target-unhealthy
+- class: routing
+- description: The preferred target is unhealthy and traffic must move to a fallback
+- injection_probe: "cargo test -p har-router failover_primary_and_ordered_fallback_chain"
+- recovery_probe: "cargo test -p har-router"
+- expected_recovery_time_seconds: 5
+- status: declared
+- notes: Failover strategy emits the primary plus an ordered fallback chain in alternatives
+
+### dispatch-queue-backpressure
+- class: dispatch
+- description: The target queue saturates and backpressure must engage without event loss
+- injection_probe: "cargo test -p har-dispatch"
+- recovery_probe: "cargo test --workspace"
+- expected_recovery_time_seconds: 30
+- status: declared
+- notes: Queue semantics follow the proven-queueconn ABI (src/abi/ProvenQueue.idr); dead-letter handling covers rejects
+
+### contractile-parse-error
+- class: contractile_format
+- description: A contractile file fails to parse due to syntax errors
+- injection_probe: "echo 'invalid syntax' >> .machine_readable/contractiles/Intentfile.a2ml"
+- recovery_probe: "git checkout .machine_readable/contractiles/Intentfile.a2ml"
+- expected_recovery_time_seconds: 5
+- status: declared
+- notes: All .a2ml files should be valid A2ML; the dogfood gate validates manifests in CI
+
+### workflow-pin-drift
+- class: ci
+- description: A pinned reusable-workflow SHA in .github/workflows goes stale or breaks (the d135b05 class)
+- injection_probe: "grep -rn 'hyperpolymath/standards' .github/workflows/ | head -5"
+- recovery_probe: "gh run list --branch main --limit 5"
+- expected_recovery_time_seconds: 600
+- status: declared
+- notes: Recovery is a pin bump to a known-green standards SHA; see estate CI-red master-cause records

.machine_readable/contractiles/Dustfile.a2ml

@@ -0,0 +1,56 @@
+# SPDX-License-Identifier: MPL-2.0
+# Dustfile — Cleanup and hygiene contract for hybrid-automation-router
+# Author: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
+#
+# Verb:      dust
+# Semantics: What should be cleaned up. Housekeeping, not blockers.
+
+@abstract:
+Cleanup and hygiene items for hybrid-automation-router (HAR). Maintenance
+tasks that keep the repository tidy; none of these block CI on their own.
+@end
+
+## Stale Files
+
+### no-build-artifacts-tracked
+- description: No Cargo build artifacts tracked in git
+- run: test -z "$(git ls-files target/ 2>/dev/null)"
+- severity: warning
+
+### no-merge-leftovers
+- description: No merge/patch leftovers (*.orig, *.rej) anywhere
+- run: test -z "$(find . -name '*.orig' -o -name '*.rej' 2>/dev/null | grep -v '^./.git/')"
+- severity: warning
+
+### no-example-placeholders
+- description: No example placeholder files (EXAMPLE-, SAMPLE-) in contractiles/
+- run: test -z "$(find .machine_readable/contractiles/ -name 'EXAMPLE-*' -o -name 'SAMPLE-*' 2>/dev/null)"
+- severity: warning
+
+## Format Duplicates
+
+### no-duplicate-readme-format
+- description: Only one README format in contractiles/ (.adoc canonical)
+- run: test ! -f .machine_readable/contractiles/README.md
+- severity: info
+
+## Naming Hygiene
+
+### no-deprecated-6a2-references
+- description: No prose/path references to the deprecated 6a2 name outside Cargo.lock checksums
+- run: test -z "$(grep -rl '6a2' --exclude-dir=.git --exclude-dir=target --exclude=Cargo.lock --exclude=Dustfile.a2ml --exclude=Mustfile.a2ml . 2>/dev/null)"
+- severity: warning
+- notes: Canon is descriptiles (see standards/CANONICAL-NAMES.adoc); migrate on sight
+
+### panels-are-panels
+- description: Dashboard panels are called "panels", never "panes"
+- run: test -z "$(grep -rniw 'panes' docs/ panels/ 2>/dev/null | grep -iv 'window panes')"
+- severity: info
+
+## Documentation Hygiene
+
+### template-placeholder-trend
+- description: Track unexpanded {{...}} template markers outside deliberate exemplars
+- run: sh -c "grep -rl '{{' docs/ 2>/dev/null | wc -l"
+- severity: info
+- notes: Which files stay as literal exemplars is an open owner decision; this only trends the count

.machine_readable/contractiles/Intentfile.a2ml

@@ -1,9 +1,8 @@
 # SPDX-License-Identifier: MPL-2.0
-# Intentfile (A2ML Canonical) — north-star contractile for rsr-template-repo
+# Intentfile (A2ML Canonical) — north-star contractile for hybrid-automation-router
 # Author: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 #
-# Paired runner: intend.ncl
-# Verb:          intend
+# Verb: intend
 #
 # Semantics: North-star contractile. Declares BOTH concrete committed
 #            next-actions AND horizon aspirations the project wishes to
@@ -20,80 +19,93 @@
 #            contractile for hard gates.
 
 @abstract:
-North-star contractile for rsr-template-repo. This repository is the
-canonical template for Rhodium Standard Repository compliance. It provides
-the scaffold that all hyperpolymath repos should copy and customize.
+North-star contractile for hybrid-automation-router (HAR). HAR is a
+pluggable routing engine that dispatches automation events from sources to
+targets; its strategic direction (ADR-0002) is an automation interlingua —
+a tool-neutral meta-model carried on A2ML that doubles as an execution IR —
+letting heterogeneous automation estates hand off and resume across each
+other.
 @end
 
 ## Purpose
 
-The rsr-template-repo serves as the master template for all hyperpolymath
-repositories. It contains the complete set of contractile files, machine-readable
-specifications, and governance documentation that define the Rhodium Standard.
-
-Every new repository in the hyperpolymath estate should be initialized by
-copying this template and substituting the placeholder values with
-repo-specific content.
+HAR routes automation events to the best target (rpa-elysium first-class)
+via composable strategies, and is growing a declarative surface: translate
+between desired routing state and ordered dispatch (Phase 2A), then
+generalise to cross-tool handoff and federation (Phase 2B), with software
+installation & package management as the first concrete resource domain
+(Phase 2C, ADR-0003 ladder).
 
 ## Anti-Purpose
 
 This repository is NOT:
-- A general-purpose project scaffold for external use (hyperpolymath-only)
-- A replacement for per-repo customization (all files must be bespoke)
-- A static template that never changes (evolves with RSR spec)
-- A runtime library or framework (build-time only)
+- A replacement for incumbent automation tools (Puppet/Salt/Terraform/
+  Ansible) — replacement is out of scope and sponsor-gated (ADR-0002)
+- An RPA engine — it routes to rpa-elysium, it does not drive UIs itself
+- A general message broker — queue semantics follow the proven-queueconn
+  ABI; NATS is a feature-gated transport, not the product
+- A package manager — the 2C ladder subsumes install functionality behind
+  the meta-model; incumbent managers are wrapped last, not rebuilt
 
 ## If In Doubt
 
 If you are unsure whether a change is in scope, ask. Sensitive areas:
+- src/abi/ (Idris2 + Ephapax normative specs — parallel-track discipline)
 - .machine_readable/ contractile definitions
-- RSR specification files
-- Governance templates
-- License policy documents
+- docs/decisions/ (ADRs record owner-ratified direction)
+- Routing strategy semantics (deterministic selection is load-bearing)
 
 ## Committed Next-Actions
 
-### repo-initialization
-- description: Provide just copy-and-substitute template for new repos
-- probe: test -f scripts/init-repo.sh
-- status: done
-- notes: Run with source scripts/init-repo.sh <new-repo-name>
+### phase-2a-meta-model-skeleton
+- description: Meta-model + A2ML interchange dialect + two-level IR (graph ⇄ plan) proven on HAR's own routing domain
+- probe: test -d crates/har-metamodel
+- status: declared
+- notes: The de-risking gate for everything downstream (ADR-0002); Idris2 spec and Rust IR as parallel tracks
 
-### contractile-completeness
-- description: Every RSR contractile has an a2ml and ncl implementation
-- probe: ls .machine_readable/contractiles/*.a2ml | wc -l | grep -q "^6$"
-- status: in_progress
-- notes: Currently 6 contractile verbs: intend, must, trust, adjust, bust, dust
+### phase-2c-tier-1-managerless
+- description: Regularise package-manager-less installs (curl|sh, tarballs, make install) — issue #97
+- probe: gh issue view 97 --json state -q .state | grep -q CLOSED
+- status: declared
+- notes: Gated on the 2A skeleton; flagship workload = prover/solver/toolchain centralisation (#106)
 
-### automation-scripts
-- description: All repetitive tasks have just recipes
-- probe: grep -c "^# " Justfile | grep -q "^[6-9][0-9]*$"
-- status: in_progress
+### routing-strategies-complete
+- description: All seven routing strategies implemented with deterministic selection
+- probe: cargo test -p har-router
+- status: done
+- notes: RoundRobin/WeightedRandom/LeastLoaded/Failover landed 2026-07-07; route() honours the configured strategy
+
+### cli-documented-surface
+- description: har-cli exposes the documented route-management surface (list, add, remove, inspect) with tests
+- probe: cargo test -p har-cli
+- status: done
+- notes: Config-backed list/add/remove/inspect + dry-run route/status landed 2026-07-07; 8 unit tests + e2e smoke
 
 ## Wishes
 
 ### Near Horizon
 
-#### cross-repo-validation
-- description: Tooling to validate all repos against RSR spec
-- horizon: near
-- status: declared
-
-#### automated-substitution
-- description: Script to automate repo-specific substitution in template
+#### arghda-proof-pipeline-pilot
+- description: arghda-core as an estate-internal front-end adapter — ladder pipelines over proof obligations (issue #104)
 - horizon: near
 - status: declared
+- notes: Owner decisions D1–D3 pending; no meta-model extension required
 
 ### Mid Horizon
 
-#### formal-verification
-- description: Idris2 proofs for all critical contractile invariants
+#### puppet-salt-flagship-handoff
+- description: Puppet-in → A2ML → Salt-out handoff of a partially-realised estate (Phase 2B flagship)
+- horizon: mid
+- status: declared
+
+#### formal-stack-load-bearing
+- description: Ephapax exactly-once ownership + proven-FSM lifecycle + Idris2 invariants wired end-to-end, not decorative
 - horizon: mid
 - status: declared
 
 ### Far Horizon
 
-#### ecosystem-visualization
-- description: Interactive graph of all hyperpolymath repos and dependencies
+#### lingua-franca-surface-language
+- description: Human-authored router language over the meta-model; N front-ends + M back-ends replace N×M translators
 - horizon: far
 - status: declared