chore: add UX infrastructure (quickstart, doctor, setup)

Added by ux-rollout.jl batch script.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

Justfile

@@ -299,26 +299,36 @@ clean-all: clean
 # TEST & QUALITY
 # ═══════════════════════════════════════════════════════════════════════════════
 
-# Run all tests
+# Run all tests — ReScript parser tests + Zig FFI tests
 test *args:
-    @echo "Running tests..."
-    # TODO: Replace with your test command
-    # Examples:
-    #   cargo test {{args}}
-    #   mix test {{args}}
-    #   zig build test {{args}}
-    #   deno test {{args}}
-    @echo "Tests passed!"
+    @echo "Running ReScript parser tests..."
+    rescript build
+    node tests/parser/ParserTests.mjs
+    @echo ""
+    @echo "Running Zig FFI tests..."
+    cd ffi/zig && zig build test
+    @echo ""
+    @echo "All tests passed!"
 
 # Run tests with verbose output
 test-verbose:
-    @echo "Running tests (verbose)..."
-    # TODO: Replace with verbose test command
+    @echo "Running all tests (verbose)..."
+    rescript build
+    node tests/parser/ParserTests.mjs
+    cd ffi/zig && zig build test
+    node tests/smoke/e2e-smoke.mjs
 
-# Smoke test
+# End-to-end smoke test — parse example, verify ABI correspondence
 test-smoke:
-    @echo "Smoke test..."
-    # TODO: Add basic sanity checks
+    @echo "Running E2E smoke test..."
+    rescript build
+    node tests/smoke/e2e-smoke.mjs
+
+# Type-check Idris2 ABI modules (formal proofs)
+check-abi:
+    @echo "Type-checking Idris2 ABI modules..."
+    cd src/abi && idris2 --build typed-wasm.ipkg
+    @echo "All 9 ABI modules type-check successfully."
 
 # Run all quality checks
 quality: fmt-check lint test

contractiles/intend/Intentfile.a2ml

@@ -0,0 +1,22 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# Intentfile (A2ML Canonical)
+# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath)
+
+@abstract:
+Declared intent and purpose for Typed Wasm.
+@end
+
+## Purpose
+
+Typed Wasm — // SPDX-License-Identifier: PMPL-1.0-or-later
+
+## Anti-Purpose
+
+This project is NOT:
+- A fork or wrapper around another tool
+- A monorepo (unless explicitly structured as one)
+
+## If In Doubt
+
+If you are unsure whether a change is in scope, ask.
+Sensitive areas: ABI definitions, license headers, CI workflows.

contractiles/must/Mustfile.a2ml

@@ -0,0 +1,42 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# Mustfile (A2ML Canonical)
+# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath)
+
+@abstract:
+Physical State contract for Typed Wasm. Baseline UX Manifesto invariants
+that MUST hold at all times.
+@end
+
+@requires:
+- section: Core-Files
+- section: Banned
+@end
+
+## Core-Files
+
+### license-present
+- description: LICENSE file must exist
+- run: test -f LICENSE
+- severity: critical
+
+### readme-present
+- description: README must exist
+- run: test -f README.adoc || test -f README.md
+- severity: critical
+
+## Banned
+
+### no-hardcoded-paths
+- description: No hardcoded developer paths
+- run: "! grep -rn '/home/hyper\|/mnt/eclipse' --include='*.rs' --include='*.res' --include='*.ex' --include='*.gleam' --include='*.zig' --include='*.sh' . 2>/dev/null | grep -v '.git/' | grep -v 'ux-rollout.jl' | head -1"
+- severity: critical
+
+### no-dockerfiles
+- description: No Dockerfiles (use Containerfile)
+- run: test ! -f Dockerfile
+- severity: warning
+
+### no-makefiles
+- description: No Makefiles (use Justfile)
+- run: test ! -f Makefile
+- severity: warning

contractiles/trust/Trustfile.a2ml

@@ -0,0 +1,25 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# Trustfile (A2ML Canonical)
+# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath)
+
+@abstract:
+Trust and provenance verification for Typed Wasm.
+Maximal trust by default — LLM may read, build, test, lint, format.
+@end
+
+@trust-level: maximal
+@trust-boundary: repo
+@trust-actions: [read, build, test, lint, format]
+@trust-deny: [delete-branch, force-push, modify-ci-secrets, publish]
+
+## Integrity
+
+### license-content
+- description: LICENSE contains expected SPDX identifier
+- run: grep -q 'SPDX\|License\|MIT\|Apache\|PMPL\|MPL' LICENSE
+- severity: critical
+
+### no-secrets-committed
+- description: No .env or credential files in repo
+- run: test ! -f .env && test ! -f credentials.json && test ! -f .env.local
+- severity: critical