chore(governance): adopt estate-standardization wave + 2026-06-12 checkpoint (#72)

## Summary

Reconciles the orphaned `estate-standardization-20260607` branch (the
most conflicted of the seven) and applies the 2026-06-12 governance
checkpoint.

1. **Estate merge** — content conflicts (`.claude/CLAUDE.md`,
`casket-pages.yml`, `instant-sync.yml`) all resolved to **main's
versions** (CLAUDE.md verified byte-identical to main); modify/delete
conflicts on the old root `MUST.contractile` + nested
`contractiles/{intend,must,trust}/` resolved by **porting main's real
content into the new flat contractiles first**, then accepting the
deletions (nothing lost — KitchenSpeak ADR invariants, Hypatia-waiver
rule, trust carve-out, WCAG set all carried over). Wave brings:
`6a2/0-AI-MANIFEST` + `6a2/anchor/`,
`agent_instructions/`→`bot_directives/`, flat contractiles,
GOVERNANCE.adoc, CODEOWNERS, OpenSSF badge; `flake.nix` removed (estate
decision).
2. **codeql cron** weekly→monthly (cherry-pick).
3. **Checkpoint layer**: contractiles fully repopulated repo-true
(estate stubs said "rsr-template-repo"); Dustfile ported + **Bustfile
net-new fully written**; **`bot_directives/` trio** (hypatia
accepted-findings from the real NEUROSYM waiver registry; instant-sync
presence-gate verified true); STATE bumped to 2026-06-12; ANCHOR
converted to TOML + realignment entry; PLAYBOOK stale pointer fixed;
**wiki refreshed** (Home status note 2026-06-12; Me re-framed per
CLAUDE.md as agent-generated projection, not a 4th dialect;
`7-tentacles`→`tentacles-agentic-syllabus` links);
QUICKSTART/CONTRIBUTING flake.nix staleness fixed.

3 ISSUES-PROPOSED (filed separately): CLAUDE.md↔tree path mismatch
(`my-lang/frontier-practices` etc. — maintainer-only file),
`verisim.a2ml` vs siblings' `verisimdb.a2ml` naming, CLAUDE.md
"Fallback: Nix (flake.nix)" staleness.

**After merge, deletable branches**: `estate-standardization-20260607`,
`cicd/codeql-cron-monthly`.

🤖 Draft — opened for review.

https://claude.ai/code/session_01GJatEm2TVFSTBEkKXmserJ

---
_Generated by [Claude
Code](https://claude.ai/code/session_01GJatEm2TVFSTBEkKXmserJ)_

---------

Co-authored-by: Claude <noreply@anthropic.com>

Author: hyperpolymath

.github/CODEOWNERS

@@ -0,0 +1,34 @@
+# SPDX-License-Identifier: MPL-2.0
+# CODEOWNERS - Define code review assignments for GitHub
+# See: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
+
+# Default: sole maintainer for all files
+* @hyperpolymath
+
+# Security-sensitive files require explicit ownership
+SECURITY.md @hyperpolymath
+.github/workflows/ @hyperpolymath
+.machine_readable/ @hyperpolymath
+contractiles/ @hyperpolymath
+
+# License files
+LICENSE @hyperpolymath
+LICENSES/ @hyperpolymath
+
+# Configuration
+.gitignore @hyperpolymath
+.github/ @hyperpolymath
+
+# Documentation
+README* @hyperpolymath
+CONTRIBUTING* @hyperpolymath
+CODE_OF_CONDUCT* @hyperpolymath
+GOVERNANCE* @hyperpolymath
+MAINTAINERS* @hyperpolymath
+CHANGELOG* @hyperpolymath
+ROADMAP* @hyperpolymath
+
+# Build and CI
+Justfile @hyperpolymath
+Makefile @hyperpolymath
+*.sh @hyperpolymath

.github/ISSUE_TEMPLATE/bug_report.md

@@ -1,3 +1,7 @@
+<!--
+SPDX-License-Identifier: MPL-2.0
+Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
+-->
 ---
 name: Bug report
 about: Create a report to help us improve

.github/ISSUE_TEMPLATE/custom.md

@@ -1,3 +1,7 @@
+<!--
+SPDX-License-Identifier: MPL-2.0
+Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
+-->
 ---
 name: Custom issue template
 about: Describe this issue template's purpose here.

.github/ISSUE_TEMPLATE/documentation.md

@@ -1,3 +1,7 @@
+<!--
+SPDX-License-Identifier: MPL-2.0
+Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
+-->
 ---
 name: Documentation
 about: Report unclear, missing, or incorrect documentation

.github/ISSUE_TEMPLATE/feature_request.md

@@ -1,3 +1,7 @@
+<!--
+SPDX-License-Identifier: MPL-2.0
+Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
+-->
 ---
 name: Feature request
 about: Suggest an idea for this project

.github/ISSUE_TEMPLATE/question.md

@@ -1,3 +1,7 @@
+<!--
+SPDX-License-Identifier: MPL-2.0
+Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
+-->
 ---
 name: Question
 about: Ask a question about usage or behaviour

.github/copilot/coding-agent.yml

@@ -0,0 +1,6 @@
+mcp_servers:
+  boj-server:
+    command: npx
+    args: ["-y", "@hyperpolymath/boj-server@latest"]
+    env:
+      BOJ_URL: http://localhost:7700

.github/workflows/codeql.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: MPL-2.0
 name: CodeQL Security Analysis
 
 on:
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'   # monthly 1st 06:00 UTC
 
 # Estate guardrail: cancel superseded runs so re-pushes / rebased PR
 # updates do not pile up queued runs against the shared account-wide

.github/workflows/governance.yml

@@ -31,4 +31,5 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@main
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@861b5e911d9e5dcfb3c0ab3dd2a9a3c8fd0a1613
+    timeout-minutes: 10

.github/workflows/hypatia-scan.yml

@@ -26,4 +26,5 @@ permissions:
 jobs:
   hypatia:
     uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@5eb28d7d8790d5389b7b6a5233fe6265a775e3d0
+    timeout-minutes: 10
     secrets: inherit