data: regen index.json from scans/ (301 entries) + add freshness CI

The committed index.json was stale: total_scans=301 (correct) but
repos=["nafa-app","outreach","playbooks","project-cb","v-ecosystem"]
(5 entries when there are 301 on disk), last_updated=2026-03-07
(two months stale at time of regen).

Changes:
- scripts/regen-index.sh — deterministic regen from scans/ on disk.
  last_updated derived from `git log -1 --format=%cI -- scans` so
  running it twice produces byte-identical output. Schema preserved
  (last_updated/total_scans/total_repos/repos); subdirectories under
  scans/ (e.g. scans/octads/) are intentionally not counted in
  total_scans — they are a separate space; if they need their own
  index, that is a follow-up.
- index.json — regenerated. 301 scans, 301 repos
  (one repo per top-level file), last_updated=2026-03-28T08:28:32+00:00
  (commit time of the most recent scans/ change).
- .github/workflows/index-freshness.yml — runs regen-index.sh on push/PR
  and fails if index.json drifts from scans/. Triggers only on changes
  to scans/, index.json, the regen script, or the workflow itself.
  Pair with branch protection so the check is required for merge.

Verified locally:
- bash scripts/regen-index.sh produces a clean tree on second run
  (`git diff --quiet index.json` passes).

Closes #1

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/index-freshness.yml

@@ -0,0 +1,54 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
+#
+# Fails if the committed index.json drifts from what scripts/regen-index.sh
+# produces from scans/ on disk. Pair with branch protection so this check
+# is required on PRs touching scans/ or index.json.
+#
+# Closes V-L3-M1.
+
+name: index.json freshness
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+    paths:
+      - 'scans/**'
+      - 'index.json'
+      - 'scripts/regen-index.sh'
+      - '.github/workflows/index-freshness.yml'
+
+concurrency:
+  group: index-freshness-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  check:
+    name: index.json matches scans/
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: Checkout (with history; regen-index needs git log on scans/)
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          fetch-depth: 0
+
+      - name: Regenerate index.json
+        run: bash scripts/regen-index.sh
+
+      - name: Fail if index.json drifted
+        run: |
+          if ! git diff --quiet --exit-code index.json; then
+            echo "::error::index.json is out of sync with scans/."
+            echo "Run 'bash scripts/regen-index.sh' locally and commit the result."
+            echo ""
+            echo "----- diff -----"
+            git --no-pager diff index.json
+            exit 1
+          fi
+          echo "index.json is in sync with scans/."

index.json

@@ -1,12 +1,308 @@
 {
-  "last_updated": "2026-03-07T22:19:01+00:00",
-  "total_scans": 301,
+  "last_updated": "2026-03-28T08:28:32+00:00",
   "repos": [
+    "0-ai-gatekeeper-protocol",
+    "7-tentacles",
+    "Axiology.jl",
+    "Axiom.jl",
+    "BowtieRisk.jl",
+    "Causals.jl",
+    "Cladistics.jl",
+    "Cliodynamics.jl",
+    "Cliometrics.jl",
+    "Exnovation.jl",
+    "HackenbushGames.jl",
+    "IDApixiTIK",
+    "KnotTheory.jl",
+    "PolyglotFormalisms.jl",
+    "ProvenCrypto.jl",
+    "SMTLib.jl",
+    "ZeroProb.jl",
+    "_pathroot",
+    "a2ml",
+    "absolute-zero",
+    "academic-workflow-suite",
+    "accessibility-everywhere",
+    "accessibilitybot",
+    "ada-loom-registry",
+    "aerie",
+    "affinescript",
+    "aggregate-library",
+    "aletheia",
+    "algorithm-shield",
+    "alkahest-shell-transmuter",
+    "ambientops",
+    "amethe",
+    "anamnesis",
+    "anvomidav",
+    "asdf-augmenters",
+    "asdf-tool-plugins",
+    "assemblyline-20260307195240",
+    "ats2-tui",
+    "avatar-fabrication-facility",
+    "avow-protocol",
+    "axel-protocol",
+    "befunge93-vault-cracker",
+    "betlang",
+    "bgp-backbone-lab",
+    "bitfuckit",
+    "blocky-writer",
+    "blue-screen-of-app",
+    "bofig",
+    "boinc-boinc",
+    "branch-newspaper",
+    "bridge-nginx-zig",
+    "broad-spectrum",
+    "bunsenite",
+    "cadre-router",
+    "candy-crash",
+    "casket-ssg",
+    "cccp",
+    "cerro-torre",
+    "checky-monkey",
+    "chimichanga",
+    "cicada",
+    "cipherbot",
+    "civic-connect",
+    "civic-stream",
+    "claim-forge",
+    "claude-integrations",
+    "cloud-sync-tuner",
+    "cloudflare-dns-terraform",
+    "conative-gating",
+    "conflow",
+    "consent-aware-http",
+    "contractiles",
+    "coq-jr",
+    "czech-file-knife",
+    "defensive-multiplicity",
+    "defiant",
+    "deno-ecosystem",
+    "developer-ecosystem",
+    "devkit-risc-v",
+    "dicti0nary-attack",
+    "did-you-actually-do-that",
+    "disinfo-nesy-detector",
+    "displace",
+    "dnfinition",
+    "docmatrix",
+    "docudactyl",
+    "dotmatrix-fileprinter",
+    "double-track-browser",
+    "echidna",
+    "echidnabot",
+    "echomesh",
+    "eclexia",
+    "elegant-state",
+    "elixir-mcp-server",
+    "emergency-button",
+    "empty-linter",
+    "ephapax",
+    "error-lang",
+    "esn",
+    "etma-handler",
+    "excel-economic-numbers-tool",
+    "explicit-trust-plane",
+    "feedback-o-tron",
+    "ffmpeg-ffi",
+    "filesoup",
+    "finishingbot",
+    "fireflag",
+    "flat-mate",
+    "flatracoon",
+    "flatracoon-os",
+    "fogbinder",
+    "formatrix-docs",
+    "formdb-http",
+    "forth-dotmatrix",
+    "funfriendly-git",
+    "games",
+    "git-inflate",
+    "git-private-farm",
+    "gitbot-fleet",
+    "glambot",
+    "glyphbase",
+    "gql-dt",
+    "grim-repo",
+    "gsbot",
+    "hesiod-dns-map",
+    "heterogenous-mobile-computing",
+    "http-capability-gateway",
+    "hybrid-automation-router",
+    "hypatia",
+    "hyperpolymath",
+    "hyperpolymath-archive",
+    "hyperpolymath-sovereign-registry",
+    "hyperpolymath.github.io",
+    "idaptik",
+    "idris2-ecosystem",
+    "im-docs",
+    "immutable-linux-auditor",
+    "indieweb2-bastion",
+    "ipfs-overlay",
+    "ipv6-site-enforcer",
+    "ipv6-tools",
+    "januskey",
+    "julia-the-viper",
+    "k9-svc",
+    "k9-tools",
+    "kaldor-iiot",
+    "kea-tools",
+    "kith",
+    "laminar",
+    "language-bridges",
+    "language-interop-compiler",
+    "laniakea",
+    "lcb-website",
+    "libstamp",
+    "lithoglyph",
+    "live-files",
+    "llm-tools",
+    "lol",
+    "lsm",
+    "maa-framework",
+    "manifesto",
+    "mcp-repo-guardian",
+    "me-dialect",
+    "megadog",
+    "metadata-grammar",
+    "misinformation-defence-platform",
+    "modshells",
+    "must",
+    "my-lang",
+    "my-lang-archive",
     "nafa-app",
+    "nafa-app-ambient",
+    "nano-aider",
+    "nerdsafe-restart",
+    "network-dashboard",
+    "network-orchestrator",
+    "neural-foundations",
+    "neurophone",
+    "nexia-list",
+    "nextgen-languages",
+    "nick-shells",
+    "nickel-augmentation",
+    "no-nonsense-nntps",
+    "nuj-lcb-production",
+    "oblibeny",
+    "ochrance",
+    "odds-and-sods-package-manager",
+    "opam-repository",
+    "opm-canonicalizer",
+    "opsm-ui",
     "outreach",
+    "package-publishers",
+    "packages",
+    "palimpsest-license",
+    "palimpsest-plasma",
+    "panic-attacker",
+    "panll",
+    "panoptes",
+    "patallm-gallery",
+    "personal-sysadmin",
+    "phantom-metal-taste",
+    "php-aegis",
+    "phronesis",
+    "pimcore-fortress",
     "playbooks",
+    "poly-k8s-mcp",
+    "poly-observability-mcp",
+    "poly-secret-mcp",
+    "polyglot-formalisms-elixir",
+    "polyglot-formalisms-gleam",
+    "polyglot-i18n",
+    "polysafe-gitfixer",
+    "polystack",
+    "preference-injector",
+    "presswerk",
     "project-cb",
-    "v-ecosystem"
+    "project-wharf",
+    "proof-of-work",
+    "protocol-squisher",
+    "proven",
+    "proven-specialist-repos",
+    "qubes-sdp",
+    "raze-tui",
+    "reasonably-good-token-vault",
+    "recon-silly-ation",
+    "refugia",
+    "repo-batcher",
+    "repo-customiser",
+    "repo-guardian-fs",
+    "repo-slm-augmentor",
+    "reposystem",
+    "rescript-ecosystem",
+    "resource-record-fluctuator",
+    "rhodibot",
+    "rhodium-pipeline",
+    "rhodium-standard-repositories",
+    "riscv-guix-buildsys",
+    "robodog-ecm",
+    "robot-repo-automaton",
+    "robot-vacuum-cleaner",
+    "rpa-elysium",
+    "rrecord-verity",
+    "rsr-template-repo",
+    "safe-brute-force",
+    "sanctify-php",
+    "scaffoldia",
+    "scripts",
+    "sdp-hkdf-deployment",
+    "seambot",
+    "seamstress",
+    "selur",
+    "slopctl",
+    "snapcreate",
+    "social-media-tools",
+    "squisher-corpus",
+    "ssg-collection",
+    "standards",
+    "stapeln",
+    "stateful-artefacts",
+    "stateful-artefacts-for-gitforges",
+    "supernorma",
+    "sustainabot",
+    "svalinn",
+    "synapse",
+    "system-tools",
+    "tangle",
+    "techstack-filterlist",
+    "template-repo",
+    "the-hotchocolabot",
+    "thejeffparadox",
+    "theoneshow",
+    "thunderbird-template-reloaded",
+    "tma-mark2",
+    "total-recall",
+    "total-update",
+    "traffic-conditioner",
+    "tree-navigator",
+    "twingate-helm-deploy",
+    "ubicity",
+    "unified-dataset-vocab",
+    "union-policy-parser",
+    "universal-chat-extractor",
+    "universal-extension-format",
+    "universal-language-server-plugin",
+    "universal-project-manager",
+    "v-ecosystem",
+    "v3-templater",
+    "valence-shell",
+    "verified-container-spec",
+    "verisimdb",
+    "vex-tools",
+    "volumod",
+    "vordr",
+    "voyage-enterprise-decision-system",
+    "well-known-ecosystem",
+    "wokelang",
+    "wordpress-tools",
+    "zerostep",
+    "zerotier-k8s-link",
+    "zig-ffi",
+    "zotero-tools"
   ],
-  "total_repos": 5
+  "total_repos": 301,
+  "total_scans": 301
 }