docs(staleness): surface the pin-freshness feature + park the cross-repo half

Make the workflow-pin staleness work discoverable from the human and machine
front doors, and capture the deferred cross-repo automation in-repo so it is
not lost at session close:

- README.adoc (human) + 0-AI-MANIFEST.a2ml (machine): extend the
  drift/staleness row to point at ADR-003, check-workflow-staleness.sh, and
  propagate-workflow-pins.sh.
- docs/FUTURE-WORK.adoc: park item #16 — the cross-repo half (activate
  hypatia sha_bump_propagation; wire gitbot-fleet to open draft bump PRs;
  optional standards-side scheduled audit). Out of scope for a standards PR
  (lives in other repos) and gated on a dispatch PAT + owner sign-off.

Registry + topology stay in sync (edited files are root/docs, not spec homes).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BKyi8Bht8xdXyajpkaTdYP

Author: claude

0-AI-MANIFEST.a2ml

@@ -26,7 +26,7 @@ content-addressed `source_hash`. Prose explanation: `REGISTRY.adoc`.
 | Protocols | `*-protocol/` (registry stream `protocol`) |
 | Readiness grades | `adoption-readiness-grades/`, `foundations-readiness-grades/`, `component-readiness-grades/`, `toolchain-readiness-grades/` |
 | Enforcement / CI | `.github/workflows/`, `hooks/` |
-| Drift / staleness automation | `REGISTRY.adoc`, `hypatia-rules/` (HYP-S006) |
+| Drift / staleness automation | `REGISTRY.adoc`, `hypatia-rules/` (HYP-S006); reusable-pin freshness: `docs/decisions/ADR-003-workflow-pin-staleness-window.adoc`, `scripts/check-workflow-staleness.sh`, `scripts/propagate-workflow-pins.sh` |
 | Derived architecture map | `TOPOLOGY.md` (generated — do not edit) |
 | Current project state | `.machine_readable/6a2/STATE.a2ml` |
 

README.adoc

@@ -54,7 +54,7 @@ Every other "what is this repo" doc is now a thin pointer back to these two
 | link:.github/workflows/[.github/workflows/] + link:hooks/[hooks/] + <<Enforcement>>
 
 | The **drift / staleness automation** — how this repo keeps itself honest
-| link:REGISTRY.adoc[REGISTRY.adoc] + link:hypatia-rules/[hypatia-rules/] (HYP-S006)
+| link:REGISTRY.adoc[REGISTRY.adoc] + link:hypatia-rules/[hypatia-rules/] (HYP-S006); reusable-workflow pin freshness: link:docs/decisions/ADR-003-workflow-pin-staleness-window.adoc[ADR-003] (`scripts/check-workflow-staleness.sh` gate + `scripts/propagate-workflow-pins.sh` deliberate-bump)
 
 | The **architecture map** (derived, never frozen)
 | link:TOPOLOGY.md[TOPOLOGY.md] (generated from STATE + registry)

docs/FUTURE-WORK.adoc

@@ -48,6 +48,34 @@ grades ingested. Five upstream dependencies.
 **When to revive:** Once the full 5-layer innervation stack is running
 end-to-end on at least 10 pilot repos.
 
+=== 16. Cross-repo reusable-workflow pin propagation (auto-bump)
+
+**What:** The cross-repo half of the workflow-pin staleness story. The
+standards-side is done (ADR-003: the gate tolerates a recency window, and
+`scripts/propagate-workflow-pins.sh` performs an audit-first bump). What
+remains is the *fleet* wiring so a deliberate bump fans out automatically:
+
+* Activate the Hypatia rule `lib/rules/sha_bump_propagation.ex`
+  (hyperpolymath/hypatia) so a "consumer pin is behind standards HEAD"
+  finding is routed (`:review`) rather than inert.
+* Wire gitbot-fleet to run `propagate-workflow-pins.sh --fix` in the flagged
+  consumer and open a DRAFT bump PR (mirrors the `.git-private-farm`
+  dispatch pattern in `instant-sync.yml`; gated on a PAT, graceful-skip
+  without it).
+* Optional standards-side scheduled workflow (`propagate-workflow-pins.yml`)
+  that, on a cadence, audits the fleet and dispatches the above — sketch
+  only; do not ship the cross-repo dispatch without the PAT + owner sign-off
+  (estate "no unattended mutations" guardrail).
+
+**Why parked:** The actionable pieces live in *other* repos (hypatia,
+gitbot-fleet) — out of scope for a standards PR. No technical precursor; it
+needs cross-repo PRs + a dispatch PAT, not a VeriSimDB-style dependency.
+
+**When to revive:** Whenever the deliberate-bump cadence is wanted. The gate
+no longer forces it (consumers are green within the window), so this is a
+convenience/freshness improvement, not a treadmill fix. Track via issues in
+hypatia + gitbot-fleet referencing ADR-003.
+
 == Out-of-scope (not parked — closed)
 
 - Per-repo dashboards (PanLL handles this organically via manifests)