docs: 2026-06-02 rule-catalogue extensions (#414, #415, #422)

[hyperpolymath]

Summary

Reflect recent rule-catalogue PRs in CHANGELOG and STATE.a2ml:

• feat(rules): extend 5 existing rules to auto-classify recurring estate failure modes #414 — scoped MPL-2.0 carve-outs for upstream-derived submodules
• rules(license): cap licence findings at :review strategy (neurophone#99 closeout) #415 — SC-010 transitive_dep_drift flipped to auto_fixable:false (manual-only)
• feat(rules): extend WF024 chapel + add cron-drift + inherited-debt detectors (auto-fix wiring) #422 — WF024 chapel_runs_on_drift auto-fix + WF025 cron_schedule_drift + BH008 inherited_main_debt

Files

• CHANGELOG.md — Unreleased entries
• .machine_readable/6a2/STATE.a2ml — session-history entry

Test plan

• Markdown renders
• No license/SPDX content touched

[github-actions]

🔍 Hypatia Security Scan

Findings: 146 issues detected

Severity	Count
🔴 Critical	0
🟠 High	0
🟡 Medium	146

View findings

[
  {
    "reason": "Action urin 21 JRE\n        uses: actions/setup-java@be666c2fcd27 needs attention",
    "type": "unpinned_action",
    "file": "verify-proofs.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in ci.yml",
    "type": "missing_timeout_minutes",
    "file": "ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in ci.yml",
    "type": "missing_timeout_minutes",
    "file": "ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in ci.yml",
    "type": "missing_timeout_minutes",
    "file": "ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in ci.yml",
    "type": "missing_timeout_minutes",
    "file": "ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in ci.yml",
    "type": "missing_timeout_minutes",
    "file": "ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in ci.yml",
    "type": "missing_timeout_minutes",
    "file": "ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in ci.yml",
    "type": "missing_timeout_minutes",
    "file": "ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in ci.yml",
    "type": "missing_timeout_minutes",
    "file": "ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in clusterfuzzlite.yml",
    "type": "missing_timeout_minutes",
    "file": "clusterfuzzlite.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence