Resolves the last three red lanes tracked in #41. Each had moved past
its original plumbing error into a genuine, distinct root cause:

| Lane | Original (already fixed) | Actual current root cause | Fix here
|
|---|---|---|---|
| **A2ML** | `@main` not SHA-pinned | Pinned SHA `fd7b2d8` pre-dated
[a2ml-validate-action#12](https://github.com/hyperpolymath/a2ml-validate-action/pull/12);
15 `.machine_readable/*` files lacked an in-file identity field | Bump
pin → `59145c7` (treats whole `.machine_readable/` tree as
structural-identity). **0 identity errors** with no repo-side `.a2ml`
edits |
| **Hypatia** | bad upload-artifact SHA | `hypatia-scan.yml` drifted:
`cd scanner` into a dir that no longer exists in the hypatia repo
(mix.exs is at root) → exit 1 | Sync workflow to canonical
`rsr-template-repo` version (builds at `$HOME/hypatia`; also brings
`\|\| true` guard, correct artifact SHA, concurrency, continue-on-error
on PR comment) |
| **fuzz** | Containerfile vs Dockerfile | Repo root is a *virtual*
workspace → `fuzz/Cargo.toml` build failed "believes it's in a workspace
when it's not"; also broken+unused `neurophone path=".."` dep and
undeclared `serde_json` | Add empty `[workspace]` to `fuzz/Cargo.toml`;
drop dead dep; declare `serde_json`; commit `fuzz/Cargo.lock`. Builds
clean locally |

### Verification
- A2ML: ran the `59145c7` validator against this repo's pristine tree →
`Errors: 0`.
- fuzz: `cargo build --manifest-path fuzz/Cargo.toml` → `Finished`
clean.
- Hypatia: canonical template is repo-agnostic and removes the failing
`cd scanner` step; will confirm green on CI.

K9 already passes on `main`. The redundant cross-repo validator PR
(a2ml-validate-action#13) was closed as superseded by #12.

Refs #41

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Signed-off-by: Jonathan D.A. Jewell <6759885+hyperpolymath@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>