fix: instantiate the RSR template for scaffoldia (#21)

## Summary

scaffoldia (sibling of `contractiles`) was scaffolded from
`rsr-template-repo` but never fully instantiated. Companion cure to
hyperpolymath/contractiles#21, adapted to
scaffoldia's actual (different) disease shape — scaffoldia had already
been partially cured in earlier PRs (#16/#17), so this closes the
*remaining* gaps rather than repeating contractiles' fix verbatim.

* **~420 `{{TOKEN}}` identity placeholders** resolved across ~65 files,
derived from the repo's own SPDX headers, LICENSE file, and GitHub's own
description (`gh repo view hyperpolymath/scaffoldia --json
description`). Deliberately left `container/*`,
`machine-readable-design/{canonical-directory-structure,harvested-registry}/`,
`docs-template/`, and drift-detector files whose job is to literally
match `{{PLACEHOLDER}}` as a pattern.
* **Literal `rsr-template-repo` self-identity string** fixed in ~15
files — most notably `.machine_readable/contractiles/*` (a stale,
never-updated copy of an earlier root `Justfile`) and three onboarding
docs that described a nonexistent installable app with fabricated `just
run`/`just heal`/`just setup` commands. Genuine references to the real
upstream (pipeline mentions, clone-to-start-new-project examples,
provenance notes) were left alone.
* **Two real (non-template) doc bugs** found and fixed:
`docs/attribution/CITATIONS.adoc` linked to
`github.com/hyperpolymath/Scaffoldia` (capitalised, wrong) in all five
citation formats; `docs/developer/ABI-FFI-README.adoc`'s Idris2 example
imported a nonexistent `SCAFFOLDIA.ABI.Foreign` module (real path is
`Abi.Foreign`).
* **Removed a fabricated PGP fingerprint/key** from
`.github/SECURITY.md` and `.well-known/security.txt` — confirmed via
`curl https://github.com/hyperpolymath.gpg` and `gh api
users/hyperpolymath/gpg_keys` that no key has ever been uploaded, rather
than inventing one.

## Zig — the hard requirement

`src/interface/ffi/src/main.zig` had the same three real Zig 0.16
compile bugs as contractiles, beyond placeholder text:
1. `Handle` was `opaque { allocator: ..., initialized: ... }` — opaque
types cannot have fields; changed to a plain `struct`.
2. `callconv(.C)` is not a valid `CallingConvention` member under Zig
0.16 — changed to `.c`.
3. `std.heap.c_allocator` requires libc; `build.zig` never linked it.

`build.zig` was a no-op stub — rewritten into a real build (static
library, `.link_libc = true`, test steps for both the main module and
the integration-test module). `test/integration_test.zig` was a
fully-commented-out placeholder — replaced with 10 real tests exercising
every exported `scaffoldia_*` function.

**Verified:**
- `zig fmt --check .` → exit 0
- `zig build` → exit 0
- `zig build test --summary all` → exit 0, **13/13 tests pass** (3 unit
+ 10 integration)
- `idris2 --build abi.ipkg` → exit 0
- `just --list` → exit 0
- All workflow YAML still parses

## Justfile

Fake-gate recipes (`build`, `build-release`, `test`, `test-verbose`,
`test-smoke`, `e2e`, `aspect`, `bench`, `fmt`, `fmt-check`, `lint`,
`deps`, `install`) replaced with real invocations. `run`/`run-verbose`
deleted (library, no executable). `readiness` deleted (duplicated
`crg-grade`/`crg-badge` with no distinct real check). `clean` fixed — it
previously did `rm -rf ... build/ ...`, which would have deleted the
repo's own tracked `build/` orchestration directory; now targets only
`build/ttc/`, `.zig-cache/`, `zig-out/`.

`tests/e2e.sh` (previously fully commented out) now runs real preflight
+ Idris2 build + Zig build/test. `benches/template_bench.sh` dropped its
two benchmark sections that called the now-deleted scripts and kept the
real ones.

## Deleted template-only machinery

`scripts/validate-template.sh`,
`tests/e2e/template_instantiation_test.sh`,
`.machine_readable/ai/PLACEHOLDERS.adoc`. No workflow referenced them.

`docs/status/TEST-NEEDS.adoc` rewritten — it previously narrated the
deleted `validate-template.sh`'s "8-phase validation" as the repo's own
feature; now describes the real test suite honestly.

## Test plan

- [x] `zig fmt --check .` exits 0
- [x] `zig build` exits 0 (from `src/interface/ffi`)
- [x] `zig build test --summary all` exits 0, 13/13 tests pass
- [x] `idris2 --build abi.ipkg` exits 0
- [x] `just --list` exits 0
- [x] All `.github/workflows/*.yml` still parse as valid YAML
- [x] `git diff --cached --stat` confirms `.editorconfig`,
`.gitattributes`, `.gitignore`, `flake.nix`, `.tool-versions` untouched
- [x] `tests/aspect_tests.sh` passes except the pre-existing,
out-of-scope false positive on proof-doc prose mentioning
"Admitted"/"sorry"

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 5 <noreply@anthropic.com>

Author: hyperpolymath

.devcontainer/Containerfile

@@ -1,9 +1,9 @@
 # SPDX-License-Identifier: MPL-2.0
-# Copyright (c) {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
+# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 #
-# Dev Container image for {{PROJECT_NAME}}
+# Dev Container image for Scaffoldia
 # Base: Chainguard Wolfi (minimal, supply-chain-secure)
-# Build: podman build -t {{PROJECT_NAME}}-dev -f .devcontainer/Containerfile .
+# Build: podman build -t Scaffoldia-dev -f .devcontainer/Containerfile .
 
 FROM cgr.dev/chainguard/wolfi-base:latest
 
@@ -24,7 +24,7 @@ RUN groupadd -g 1000 nonroot || true \
     && useradd -m -u 1000 -g 1000 -s /bin/bash nonroot || true
 
 # Set workspace directory
-WORKDIR /workspaces/{{PROJECT_NAME}}
+WORKDIR /workspaces/Scaffoldia
 
 # Default shell
 ENV SHELL=/bin/bash

.devcontainer/README.adoc

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Dev Container Usage
-:author: {{AUTHOR}} <{{AUTHOR_EMAIL}}>
+:author: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 
 == Overview
 
@@ -25,4 +25,4 @@ This dev container uses `cgr.dev/chainguard/wolfi-base` with git, curl, bash, an
 
 == Customization
 
-Replace `{{PROJECT_NAME}}` placeholders in both `devcontainer.json` and `Containerfile` with your actual project name. Run `just deps` to verify the environment after first launch.
+Replace `Scaffoldia` placeholders in both `devcontainer.json` and `Containerfile` with your actual project name. Run `just deps` to verify the environment after first launch.

.devcontainer/devcontainer.json

@@ -1,11 +1,11 @@
 // SPDX-License-Identifier: MPL-2.0
-// Copyright (c) {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
+// Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 //
-// Dev Container configuration for {{PROJECT_NAME}}
+// Dev Container configuration for Scaffoldia
 // Works with: VS Code Dev Containers, GitHub Codespaces, Gitpod
 // Container runtime: Podman (recommended) or any OCI-compliant runtime
 {
-  "name": "{{PROJECT_NAME}}",
+  "name": "Scaffoldia",
 
   "build": {
     "dockerfile": "Containerfile",

.envrc

@@ -18,7 +18,7 @@ if has nix && [ -f flake.nix ]; then
 fi
 
 # Project environment variables
-export PROJECT_NAME="{{PROJECT_NAME}}"
+export PROJECT_NAME="Scaffoldia"
 export RSR_TIER="infrastructure"
 # export DATABASE_URL="..."
 # export API_KEY="..."

.github/.mailmap

@@ -1 +1 @@
-{{AUTHOR}} <{{AUTHOR_EMAIL}}> <{{AUTHOR_EMAIL_ALT}}>
+Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk> <6759885+hyperpolymath@users.noreply.github.com>

.github/CODEOWNERS

@@ -1,14 +1,12 @@
 # SPDX-License-Identifier: MPL-2.0
 # CODEOWNERS - Define code review assignments
 # See: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
-#
-# Replace {{OWNER}} with your GitHub username or team
 
 # Default owners for everything
-* @{{OWNER}}
+* @hyperpolymath
 
 # Security-sensitive files require explicit review
-SECURITY.md @{{OWNER}}
-.github/workflows/ @{{OWNER}}
-Trustfile.a2ml @{{OWNER}}
-.machine_readable/ @{{OWNER}}
+SECURITY.md @hyperpolymath
+.github/workflows/ @hyperpolymath
+Trustfile.a2ml @hyperpolymath
+.machine_readable/ @hyperpolymath

.github/CODE_OF_CONDUCT.md

@@ -4,29 +4,9 @@ Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 # Code of Conduct
 
-<!-- 
-============================================================================
-TEMPLATE INSTRUCTIONS (delete this block before publishing)
-============================================================================
-Replace all {{PLACEHOLDER}} values:
-  {{PROJECT_NAME}}     - Your project name
-  {{OWNER}}            - GitHub/GitLab username or org
-  {{REPO}}             - Repository name
-  {{CONDUCT_EMAIL}}    - Email for conduct reports
-  {{CONDUCT_TEAM}}     - Name of conduct team/committee
-  {{RESPONSE_TIME}}    - Initial response SLA (e.g., 48 hours)
-  {{CURRENT_YEAR}}     - Current year
-
-Review and customise:
-- Adjust enforcement ladder for your community size
-- Add/remove examples based on your context
-- Ensure contact methods work for your team
-============================================================================
--->
-
 ## Our Pledge
 
-We as members, contributors, and leaders pledge to make participation in {{PROJECT_NAME}} a harassment-free experience for everyone, regardless of age, body size, visible or invisible disability, ethnicity, sex characteristics, gender identity and expression, level of experience, education, socio-economic status, nationality, personal appearance, race, caste, colour, religion, or sexual identity and orientation.
+We as members, contributors, and leaders pledge to make participation in Scaffoldia a harassment-free experience for everyone, regardless of age, body size, visible or invisible disability, ethnicity, sex characteristics, gender identity and expression, level of experience, education, socio-economic status, nationality, personal appearance, race, caste, colour, religion, or sexual identity and orientation.
 
 We pledge to act and interact in ways that contribute to an open, welcoming, diverse, inclusive, and healthy community.
 
@@ -140,7 +120,7 @@ If you experience or witness unacceptable behaviour, or have any other concerns,
 
 | Method | Details | Best For |
 |--------|---------|----------|
-| **Email** | {{CONDUCT_EMAIL}} | Detailed reports, sensitive matters |
+| **Email** | j.d.a.jewell@open.ac.uk | Detailed reports, sensitive matters |
 | **Private Message** | Contact any maintainer directly | Quick questions, minor issues |
 | **Anonymous Form** | [Link to form if available] | When you need anonymity |
 
@@ -156,8 +136,8 @@ If you experience or witness unacceptable behaviour, or have any other concerns,
 
 **What Happens Next**
 
-1. You will receive acknowledgment within **{{RESPONSE_TIME}}**
-2. The {{CONDUCT_TEAM}} will review the report
+1. You will receive acknowledgment within **48 hours**
+2. The the maintainer will review the report
 3. We may ask for additional information
 4. We will determine appropriate action
 5. We will inform you of the outcome (respecting others' privacy)
@@ -173,7 +153,7 @@ All reports will be handled with discretion:
 
 ### Conflicts of Interest
 
-If a {{CONDUCT_TEAM}} member is involved in an incident:
+If a the maintainer member is involved in an incident:
 
 - They will recuse themselves from the process
 - Another maintainer or external party will handle the report
@@ -183,7 +163,7 @@ If a {{CONDUCT_TEAM}} member is involved in an incident:
 
 ## Enforcement Guidelines
 
-The {{CONDUCT_TEAM}} will follow these guidelines in determining consequences:
+The the maintainer will follow these guidelines in determining consequences:
 
 ### 1. Correction
 
@@ -235,13 +215,13 @@ For contributors with elevated access (Perimeter 2 or 1):
 If you believe an enforcement decision was made in error:
 
 1. **Wait 7 days** after the decision (cooling-off period)
-2. **Email** {{CONDUCT_EMAIL}} with subject line "Appeal: [Original Report ID]"
+2. **Email** j.d.a.jewell@open.ac.uk with subject line "Appeal: [Original Report ID]"
 3. **Explain** why you believe the decision should be reconsidered
 4. **Provide** any new information not previously available
 
 **Appeals Process**
 
-- Appeals are reviewed by a different {{CONDUCT_TEAM}} member than the original
+- Appeals are reviewed by a different the maintainer member than the original
 - You will receive a response within 14 days
 - The appeals decision is final
 - You may only appeal once per incident
@@ -314,8 +294,8 @@ We thank these communities for their leadership in creating welcoming spaces.
 
 If you have questions about this Code of Conduct:
 
-- Open a [Discussion](https://{{FORGE}}/{{OWNER}}/{{REPO}}/discussions) (for general questions)
-- Email {{CONDUCT_EMAIL}} (for private questions)
+- Open a [Discussion](https://github.com/hyperpolymath/scaffoldia/discussions) (for general questions)
+- Email j.d.a.jewell@open.ac.uk (for private questions)
 - Contact any maintainer directly
 
 ---
@@ -328,4 +308,4 @@ We're all here because we care about this project. Let's make it a place where e
 
 ---
 
-<sub>Last updated: {{CURRENT_YEAR}} · Based on Contributor Covenant 2.1</sub>
+<sub>Last updated: 2026 · Based on Contributor Covenant 2.1</sub>

.github/CONTRIBUTING.md

@@ -3,15 +3,15 @@ SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 # Clone the repository
-git clone https://{{FORGE}}/{{OWNER}}/{{REPO}}.git
-cd {{REPO}}
+git clone https://github.com/hyperpolymath/scaffoldia.git
+cd scaffoldia
 
 # Using Nix (recommended for reproducibility)
 nix develop
 
 # Or using toolbox/distrobox
-toolbox create {{REPO}}-dev
-toolbox enter {{REPO}}-dev
+toolbox create scaffoldia-dev
+toolbox enter scaffoldia-dev
 # Install dependencies manually
 
 # Verify setup
@@ -21,7 +21,7 @@ just test    # Run test suite
 
 ### Repository Structure
 ```
-{{REPO}}/
+scaffoldia/
 ├── src/                 # Source code (Perimeter 1-2)
 ├── lib/                 # Library code (Perimeter 1-2)
 ├── extensions/          # Extensions (Perimeter 2)
@@ -62,7 +62,7 @@ just test    # Run test suite
 
 **Before reporting**:
 1. Search existing issues
-2. Check if it's already fixed in `{{MAIN_BRANCH}}`
+2. Check if it's already fixed in `main`
 3. Determine which perimeter the bug affects
 
 **When reporting**:
@@ -95,10 +95,10 @@ Use the [feature request template](.github/ISSUE_TEMPLATE/feature_request.md) an
 
 Look for issues labelled:
 
-- [`good first issue`](https://{{FORGE}}/{{OWNER}}/{{REPO}}/labels/good%20first%20issue) — Simple Perimeter 3 tasks
-- [`help wanted`](https://{{FORGE}}/{{OWNER}}/{{REPO}}/labels/help%20wanted) — Community help needed
-- [`documentation`](https://{{FORGE}}/{{OWNER}}/{{REPO}}/labels/documentation) — Docs improvements
-- [`perimeter-3`](https://{{FORGE}}/{{OWNER}}/{{REPO}}/labels/perimeter-3) — Community sandbox scope
+- [`good first issue`](https://github.com/hyperpolymath/scaffoldia/labels/good%20first%20issue) — Simple Perimeter 3 tasks
+- [`help wanted`](https://github.com/hyperpolymath/scaffoldia/labels/help%20wanted) — Community help needed
+- [`documentation`](https://github.com/hyperpolymath/scaffoldia/labels/documentation) — Docs improvements
+- [`perimeter-3`](https://github.com/hyperpolymath/scaffoldia/labels/perimeter-3) — Community sandbox scope
 
 ---
 

.github/FUNDING.yml

@@ -1,7 +1,7 @@
 # SPDX-License-Identifier: MPL-2.0
-# Funding platforms for {{OWNER}} projects
+# Funding platforms for hyperpolymath projects
 # See: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/displaying-a-sponsor-button-in-your-repository
 
-github: {{OWNER}}
-ko_fi: {{OWNER}}
-liberapay: {{OWNER}}
+github: hyperpolymath
+ko_fi: hyperpolymath
+liberapay: hyperpolymath

.github/GOVERNANCE.md

@@ -4,13 +4,13 @@ Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 # Project Governance
 
-This document describes the governance model for **{{PROJECT_NAME}}**.
+This document describes the governance model for **Scaffoldia**.
 
 ---
 
 ## Project Governance Model
 
-{{PROJECT_NAME}} follows a **Benevolent Dictator For Life (BDFL)** governance model.
+Scaffoldia follows a **Benevolent Dictator For Life (BDFL)** governance model.
 This model is well-suited for solo maintainers and small project teams where rapid,
 consistent decision-making is more valuable than formal consensus processes.
 
@@ -157,4 +157,4 @@ with the community before adoption, even though the BDFL retains final authority
 
 ---
 
-<sub>Copyright (c) {{CURRENT_YEAR}} {{OWNER}}. Licensed under MPL-2.0.</sub>
+<sub>Copyright (c) 2026 hyperpolymath. Licensed under MPL-2.0.</sub>