feat: add RSR scaffolding and update manifest dependencies

Adds .bot_directives/, contractiles/, updates ECOSYSTEM.scm with
FlatRacoon cross-references, and adds hesiod-dns-map dependency
to manifest.ncl for DNS infrastructure integration.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: Jonathan D.A. Jewell

.bot_directives/README.scm

@@ -0,0 +1,9 @@
+;; SPDX-License-Identifier: PMPL-1.0-or-later
+;; .bot_directives — per-bot rules and constraints
+;; Media-Type: application/vnd.bot-directives+scm
+
+(bot-directives
+  (version "1.0")
+  (notes
+    "Repo-specific bot constraints."
+    "Bots must follow these directives in addition to global policies."))

.bot_directives/echidnabot.scm

@@ -0,0 +1,7 @@
+;; SPDX-License-Identifier: PMPL-1.0-or-later
+(bot-directive
+  (bot "echidnabot")
+  (scope "formal verification and fuzzing")
+  (allow ("analysis" "fuzzing" "proof checks"))
+  (deny ("write to core modules" "write to bindings"))
+  (notes "May open findings; code changes require explicit approval"))

.bot_directives/finishbot.scm

@@ -0,0 +1,7 @@
+;; SPDX-License-Identifier: PMPL-1.0-or-later
+(bot-directive
+  (bot "finishbot")
+  (scope "release readiness")
+  (allow ("release checklists" "docs updates" "metadata fixes"))
+  (deny ("code changes without approval"))
+  (notes "Focus on polish, licensing, and packaging"))

.bot_directives/glambot.scm

@@ -0,0 +1,7 @@
+;; SPDX-License-Identifier: PMPL-1.0-or-later
+(bot-directive
+  (bot "glambot")
+  (scope "presentation + accessibility")
+  (allow ("docs" "readme badges" "ui/accessibility suggestions"))
+  (deny ("logic changes"))
+  (notes "Edits limited to presentation layers"))

.bot_directives/rhodibot.scm

@@ -0,0 +1,7 @@
+;; SPDX-License-Identifier: PMPL-1.0-or-later
+(bot-directive
+  (bot "rhodibot")
+  (scope "rsr-compliance")
+  (allow ("metadata" "docs" "repo-structure checks"))
+  (deny ("destructive edits without approval"))
+  (notes "Auto-fix allowed only for formatting in docs and metadata"))

.bot_directives/robot-repo-automaton.scm

@@ -0,0 +1,7 @@
+;; SPDX-License-Identifier: PMPL-1.0-or-later
+(bot-directive
+  (bot "robot-repo-automaton")
+  (scope "automated fixes")
+  (allow ("low-risk automated edits"))
+  (deny ("core logic changes without approval"))
+  (notes "Only apply fixes backed by explicit rule approval"))

.bot_directives/seambot.scm

@@ -0,0 +1,7 @@
+;; SPDX-License-Identifier: PMPL-1.0-or-later
+(bot-directive
+  (bot "seambot")
+  (scope "integration health")
+  (allow ("analysis" "contract checks" "docs updates"))
+  (deny ("code changes without approval"))
+  (notes "May add integration test suggestions"))

.bot_directives/sustainabot.scm

@@ -0,0 +1,7 @@
+;; SPDX-License-Identifier: PMPL-1.0-or-later
+(bot-directive
+  (bot "sustainabot")
+  (scope "eco/economic standards")
+  (allow ("analysis" "reporting" "docs updates"))
+  (deny ("code changes without approval"))
+  (notes "Focus on measurement and recommendations"))

.machine_readable/ECOSYSTEM.scm

@@ -1,20 +1,8 @@
 ;; SPDX-License-Identifier: PMPL-1.0-or-later
-;; ECOSYSTEM.scm - Ecosystem position for ipv6-site-enforcer
-;; Media-Type: application/vnd.ecosystem+scm
-
-(ecosystem
-  (version "1.0")
-  (name "ipv6-site-enforcer")
-  (type "")
-  (purpose "")
-
-  (position-in-ecosystem
-    (category "")
-    (subcategory "")
-    (unique-value ()))
-
-  (related-projects ())
-
-  (what-this-is ())
-
-  (what-this-is-not ()))
+(ecosystem (metadata (version "0.2.0") (last-updated "2026-02-08"))
+  (project (name "ipv6-site-enforcer") (purpose "IPv6 enforcement with NAT64/DNS64") (role network-enforcement))
+  (flatracoon-integration
+    (parent "flatracoon/netstack")
+    (layer network)
+    (depended-on-by ())
+    (depends-on ("hesiod-dns-map"))))

contractiles/README.adoc

@@ -0,0 +1,19 @@
+= Contractiles Template Set
+:toc:
+:sectnums:
+
+This directory contains the generalized contractiles templates. Copy the `contractiles/` directory into a new repo to establish a consistent operational, validation, trust, recovery, and intent framework.
+
+== Fill-In Instructions
+
+1. Update the Mustfile to reflect your real invariants (paths, schema versions, ports).
+2. Replace Trustfile.hs placeholders with your actual key paths and verification commands.
+3. Adjust Dustfile handlers to match your rollback and recovery tooling.
+4. Update Intentfile to mirror the roadmap you want the system to evolve toward.
+
+== Contents
+
+* `must/Mustfile` - required invariants and validations.
+* `trust/Trustfile.hs` - cryptographic verification steps.
+* `dust/Dustfile` - rollback and recovery semantics.
+* `lust/Intentfile` - future intent and roadmap direction.