Merge branch 'main' into chore/license-phase-2-subdir-license-agpl

Author: hyperpolymath

.github/workflows/scorecard.yml

@@ -2,11 +2,11 @@
 name: Scorecards supply-chain security
 
 on:
-  branch_protection_rule:
   schedule:
     - cron: '23 4 * * 1'
   push:
     branches: [main]
+  workflow_dispatch:
 
 permissions:
   contents: read
@@ -17,4 +17,3 @@ jobs:
       security-events: write
       id-token: write
     uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@3f34549c03274ec7a74683068f03a492b0fa805f
-    secrets: inherit

.machine_readable/6a2/STATE.a2ml

@@ -5,9 +5,9 @@
 [metadata]
 project = "standards"
 version = "0.2.0"
-last-updated = "2026-04-04T00:00:00Z"
+last-updated = "2026-06-02T18:00:00Z"
 status = "active"
-session = "converted from scheme — 2026-04-11"
+session = "2026-06-02 inbox cleanup + license-policy hardening + estate sweeps"
 
 [project-context]
 name = "Standards"
@@ -34,5 +34,31 @@ actions = [
 ]
 
 [maintenance-status]
-last-run-utc = "2026-04-04T00:00:00ZT00:00:00Z"
-last-result = "unknown"  # unknown | pass | warn | fail
+last-run-utc = "2026-06-02T18:00:00Z"
+last-result = "pass"  # unknown | pass | warn | fail
+
+[session-history-2026-06-02]
+session = "2026-06-02 inbox cleanup wave + license-policy hardening + estate sweeps"
+prs-merged = [
+  "#338 docs(carveouts): add zotpress/** upstream-fork ReScript carve-out",
+  "#339 docs(policy): top-of-file 'License Policy — Manual Only' section + 5-way classification",
+  "#340 ci(governance): allow Java in android/**/src/**/*.java (platform-required JVM shims)"
+]
+issues-still-open = [
+  "#288 [campaign] Estate CodeQL weekly→monthly sweep (cut 3) — sweep RESUMED today 13:08Z, ~22h remaining at 7-min cadence",
+  "#323 [standing] Estate CodeQL cron drift detection + 6-week budget review",
+  "#324 [campaign] Long-tail non-canonical CodeQL cron sweep — corrected audit posted (17 not 86; no daily); long-tail sweep queued behind #288",
+  "#331 [campaign] Estate boj-build.yml sweep — repair or retire"
+]
+estate-policy-changes = [
+  "License auto-PR pipeline DISABLED at 3 layers: hypatia#414/#415 (SC-010 auto_fixable:false + license_finding_strategy) + gitbot-fleet#247 (dispatch-runner refusal + fix-script exit-1 banners) + standards#339 (CLAUDE.md top-of-file Manual-Only header)",
+  "Trigger: neurophone#99 method-violation closed",
+  "Verified by synthetic test: bash scripts/fix-license-hygiene.sh exits 1; SC-010 carries auto_fixable:false; dispatch-runner refuses license/spdx/pmpl/mpl-2/agpl/palimpsest categories",
+  "Companion auto-remediation: hypatia#422 (WF024 chapel + WF025 cron-drift + BH008 inherited-debt) + gitbot-fleet#251 (5 fix scripts for chapel + codeql-cron-monthly)"
+]
+related-memories = [
+  "[[estate-license-policy-umbrella]]",
+  "[[no-automated-licence-edits]]",
+  "[[pr-sweep-title-keyword-exclusion]]",
+  "[[session_2026_06_02_inbox_root_cause_wave]]"
+]