docs(issue-84): add validated conversion bundle for maa submodule swap

Dry-ran convert-to-submodule.sh against a fresh maa-framework clone
(exit 0): absolute-zero/ subtree -> submodule gitlink pinned at upstream
7da92b3; 232 files changed, 4 insertions, 36046 deletions.

Ship the proven result as a ready-to-apply git bundle so a maa-framework-
scoped session can land #84 via fast-forward without re-running the script:
- issue-84-submodule.bundle (683B thin pack; git fetch + ff-merge),
  test-applied onto a pristine clone -> correct gitlink + .gitmodules
- ARTIFACTS.md manifest; .gitattributes keeps the bundle byte-exact
- HANDOFF + script updated with the proven diffstat and apply steps

Rebased onto main (334c0ac) so the branch carries only this net delta,
not the files already landed via the #135 squash-merge.

Author: claude

docs/investigations/maa-framework-issue-84/.gitattributes

@@ -0,0 +1,2 @@
+# Conversion artifact must be stored byte-exact (no EOL/encoding normalization).
+*.bundle binary

docs/investigations/maa-framework-issue-84/ARTIFACTS.md

@@ -0,0 +1,46 @@
+<!-- SPDX-License-Identifier: MPL-2.0 -->
+<!-- Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk> -->
+
+# Prebuilt conversion artifacts — maa-framework #84
+
+This was generated from a **dry-run of `convert-to-submodule.sh` against a fresh
+`hyperpolymath/maa-framework` clone** (base `main @ 9dbf56b`) and **test-applied onto a pristine
+clone** before being committed here. It lets a maa-framework-scoped session land the #84 submodule
+conversion without re-running the script.
+
+## What the conversion commit does
+
+`refactor(absolute-zero): convert vendored subtree to submodule pinned upstream (#84)`
+
+- replaces the vendored `absolute-zero/` subtree (230 files) with a **submodule gitlink**
+  `160000 commit 7da92b360deacb31d6fc8a2121da57ed6f47f4f9` (upstream `absolute-zero` main HEAD at audit)
+- adds `.gitmodules` → `https://github.com/hyperpolymath/absolute-zero.git`
+- net diffstat: **232 files changed, 4 insertions(+), 36046 deletions(-)**
+
+## File
+
+| Artifact | Size | Apply with | Tested |
+|---|---|---|---|
+| `issue-84-submodule.bundle` | 683 B | `git fetch <bundle> refs/heads/claude/issue-84-submodule-dryrun && git merge --ff-only FETCH_HEAD` | ✓ applied onto fresh `main @ 9dbf56b`; gitlink + `.gitmodules` verified |
+
+It's a 683-byte thin pack (the deletions need no new objects) and applies as a fast-forward onto maa
+`main @ 9dbf56b` (the ref it `requires`). A full `git am` patch was deliberately omitted to keep this
+docs folder free of large blobs; if you prefer `git am`, regenerate it in the maa checkout with
+`git format-patch -1 <tip>` after fetching the bundle, or just re-run `convert-to-submodule.sh`.
+
+## After applying (still required — needs write access to maa-framework)
+
+1. `git submodule update --init --recursive`
+2. Wire `git submodule update --init --recursive` into CI/checkout; fix any `Justfile`/CI/build paths
+   that referenced `absolute-zero/…`.
+3. Keep maa-framework's repo-root `docs/proof-debt.md` (PR #82); note the 150 markers' canonical home
+   is now the submodule.
+4. If branch protection requires signed commits, re-commit with your signer (the artifact commit is
+   unsigned — the dry-run's signing server rejected an out-of-scope `/tmp` repo with a 400).
+5. Open a **draft PR**; post the §5 comment from `ISSUE-84-RESOLUTION.md` on #84 and close it.
+
+## Provenance / re-verify
+
+- Base: `maa-framework` main `9dbf56b53cbbd600b9de589a85521645eca18c2f`
+- Submodule pin: `absolute-zero` `7da92b360deacb31d6fc8a2121da57ed6f47f4f9`
+- Verify the bundle before trusting it: `git bundle verify issue-84-submodule.bundle`

docs/investigations/maa-framework-issue-84/HANDOFF-maa-framework-session.md

@@ -21,7 +21,24 @@ Authoritative findings — maa@9dbf56b subtree vs upstream `absolute-zero`@7da92
 (EchoBridge*.agda, ECHIDNA_*, examples/go, proofs/coq/quantum/) are now byte-identical to upstream
 (sha256-verified). maa is simply behind.
 
-DO THIS:
+DRY-RUN ALREADY PROVEN (2026-05-30): the conversion was executed against a fresh maa clone and the
+guarded script exited 0. Result commit: `absolute-zero` becomes a gitlink `160000 commit 7da92b3…`,
+`.gitmodules` added, **232 files changed, 4 insertions(+), 36046 deletions(-)**. The safety guard
+confirmed `jekyll-gh-pages.yml` is the ONLY maa-only path before deleting anything. All proof files
+(incl. the two new `common/` modules + EchoBridge/quantum) are restored via the submodule. So you can
+trust the mechanics; this handoff just needs the WRITE access this analysis session lacked.
+
+FASTEST PATH — apply the prebuilt, pre-tested bundle (recommended), then do steps 4–5 only.
+From a maa checkout on a fresh branch (bundle is 683 B, proven to fast-forward onto main @ 9dbf56b):
+  git fetch docs/investigations/maa-framework-issue-84/issue-84-submodule.bundle \
+    refs/heads/claude/issue-84-submodule-dryrun
+  git merge --ff-only FETCH_HEAD
+  git submodule update --init --recursive
+NOTE: if your environment signs commits, the bundle's commit is unsigned — re-commit with your signer
+if branch protection requires it (the dry-run hit a signing-server 400 in /tmp; --no-gpg-sign was used
+there only). Then jump to step 4.
+
+DO THIS (from scratch — equivalent to the artifact above):
 1. Re-verify (gates everything):
    git clone https://github.com/hyperpolymath/absolute-zero /tmp/az
    git -C /tmp/az checkout 7da92b360deacb31d6fc8a2121da57ed6f47f4f9

docs/investigations/maa-framework-issue-84/convert-to-submodule.sh

@@ -10,6 +10,12 @@
 #   * 15 differing files: 6 proof files (ALL upstream-ahead: 0 maa-only theorems/proofs, 0 sorry)
 #                         + 9 stale vendored-infra files
 #   * 2 files only upstream: proofs/coq/common/{PhysicsConstants,StatMechBasis}.v (refactor maa predates)
+#
+# DRY-RUN VERIFIED 2026-05-30: this script ran exit-0 against a fresh maa clone; result =
+#   232 files changed, 4 insertions(+), 36046 deletions(-); absolute-zero -> gitlink 160000 7da92b3.
+# A prebuilt, pre-tested artifact of that result lives alongside this script (see ARTIFACTS.md):
+#   issue-84-submodule.bundle  (683 B; git fetch + git merge --ff-only).
+# You can apply that directly instead of running this script; this remains the from-scratch path.
 #   => no maa-only proof work anywhere; the swap loses nothing but the inert CI file.
 set -euo pipefail