fix(ci): make main green — test-suite syntax, workflow YAML/SPDX, Pages timeout (#25)

- test: remove invalid trailing message strings from @test macro calls in
  e2e_test.jl and property_test.jl (Julia's @test takes no positional
  message; the LoadError aborted the entire 478-test suite at load time,
  so the E2E + Aspect workflow had never passed)
- ci(dogfood-gate): move inline eclexiaiser validator to
  .github/scripts/validate_eclexiaiser.py — the column-0 Python heredoc
  broke out of the YAML block scalar (startup_failure at 0s)
- ci(instant-sync): remove dangling step fragment at jobs: level (merge
  artifact that made the workflow YAML invalid)
- ci: put SPDX header on line 1 in the 7 workflows the Governance linter
  flagged (it checks line 1; copyright line moved to line 2)
- ci(pages): raise build job timeout 15→60 min — cold cabal build of
  casket-ssg always exceeded 15 min, so the job was cancelled every run
  and the cache never saved
- tests: remove tests/fuzz/placeholder.txt (fake-fuzz false-impression
  artifact flagged in TEST-NEEDS.md)
- docs: purge remaining template placeholders (QUICKSTART-MAINTAINER
  deps/paths, ABI-FFI-README delete-me marker); refresh stale TEST-NEEDS
  state table (benchmarks and e2e/property tests now exist)

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Author: hyperpolymath

.github/scripts/validate_eclexiaiser.py

@@ -0,0 +1,30 @@
+# SPDX-License-Identifier: MPL-2.0
+# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
+# Owner: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
+#
+# Validates eclexiaiser.toml structure (called by dogfood-gate.yml).
+import sys
+import tomllib
+
+with open("eclexiaiser.toml", "rb") as f:
+    data = tomllib.load(f)
+
+project = data.get("project", {})
+if not project.get("name", "").strip():
+    print("ERROR: project.name is required", file=sys.stderr)
+    sys.exit(1)
+
+functions = data.get("functions", [])
+if not functions:
+    print("ERROR: at least one [[functions]] entry is required", file=sys.stderr)
+    sys.exit(1)
+
+for fn in functions:
+    if not fn.get("name", "").strip():
+        print("ERROR: function name cannot be empty", file=sys.stderr)
+        sys.exit(1)
+    if not fn.get("source", "").strip():
+        print(f'ERROR: function {fn["name"]} has no source path', file=sys.stderr)
+        sys.exit(1)
+
+print(f'Valid: {project["name"]} ({len(functions)} function(s))')

.github/workflows/boj-build.yml

@@ -1,5 +1,5 @@
-# // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 # SPDX-License-Identifier: MPL-2.0
+# // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 name: BoJ Server Build Trigger
 on:
   push:

.github/workflows/casket-pages.yml

@@ -1,5 +1,5 @@
-# // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 # SPDX-License-Identifier: MPL-2.0
+# // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 name: GitHub Pages
 on:
   push:
@@ -15,7 +15,9 @@ concurrency:
 jobs:
   build:
     runs-on: ubuntu-latest
-    timeout-minutes: 15
+    # Cold cabal build of casket-ssg (GHC 9.8) exceeds 15 min and was being
+    # cancelled before the cache could ever save; warm-cache runs are fast.
+    timeout-minutes: 60
     steps:
       - name: Checkout
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4

.github/workflows/codeql.yml

@@ -1,5 +1,5 @@
-# // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 # SPDX-License-Identifier: MPL-2.0
+# // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 name: CodeQL Security Analysis
 on:
   push:

.github/workflows/dependabot-automerge.yml

@@ -1,5 +1,5 @@
-# // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 # SPDX-License-Identifier: MPL-2.0
+# // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 #
 # dependabot-automerge.yml — enable GitHub's native auto-merge on
 # Dependabot pull requests that match a declared severity / ecosystem

.github/workflows/dogfood-gate.yml

@@ -262,27 +262,7 @@ jobs:
           echo "has_manifest=true" >> "$GITHUB_OUTPUT"
 
           # Validate TOML structure using Python 3.11+ tomllib
-          python3 -c "
-import tomllib, sys
-with open('eclexiaiser.toml', 'rb') as f:
-    data = tomllib.load(f)
-project = data.get('project', {})
-if not project.get('name', '').strip():
-    print('ERROR: project.name is required', file=sys.stderr)
-    sys.exit(1)
-functions = data.get('functions', [])
-if not functions:
-    print('ERROR: at least one [[functions]] entry is required', file=sys.stderr)
-    sys.exit(1)
-for fn in functions:
-    if not fn.get('name', '').strip():
-        print('ERROR: function name cannot be empty', file=sys.stderr)
-        sys.exit(1)
-    if not fn.get('source', '').strip():
-        print(f'ERROR: function {fn[\"name\"]} has no source path', file=sys.stderr)
-        sys.exit(1)
-print(f'Valid: {project[\"name\"]} ({len(functions)} function(s))')
-" || {
+          python3 .github/scripts/validate_eclexiaiser.py || {
             echo "::error file=eclexiaiser.toml::Invalid eclexiaiser.toml — see step output for details"
             exit 1
           }

.github/workflows/instant-sync.yml

@@ -1,5 +1,5 @@
-# // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 # SPDX-License-Identifier: MPL-2.0
+# // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 # Instant Forge Sync - Triggers propagation to all forges on push/release
 name: Instant Sync
 
@@ -33,8 +33,3 @@ jobs:
 
       - name: Confirm
         run: echo "::notice::Propagation triggered for ${{ github.event.repository.name }}"
-
-  - name: K9-SVC Validation
-    run: |
-      echo "K9-SVC validation"
-      [ -d .machine_readable/contractiles ] && echo "Contractiles present" || echo "No contractiles"

.github/workflows/mirror.yml

@@ -1,5 +1,5 @@
-# // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 # SPDX-License-Identifier: MPL-2.0
+# // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 name: Mirror to Git Forges
 
 on:

.github/workflows/secret-scanner.yml

@@ -1,5 +1,5 @@
-# // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 # SPDX-License-Identifier: MPL-2.0
+# // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 # Prevention workflow - scans for hardcoded secrets before they reach main
 name: Secret Scanner
 on:

ABI-FFI-README.md

@@ -2,8 +2,6 @@
 SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
-{{~ Aditionally delete this line and fill out the template below ~}}
-
 # STATISTEASE ABI/FFI Documentation
 
 ## Overview