chore: R-16 toolchain pin + reconciliation (#93)

Owner rulings R-16/R-20/R-21/R-24 (2026-08-28): keep the .tool-versions
-> .mise.toml pin conversion, revert the rest of the template-sync
sweep, reconcile and publish local history. Direct push blocked by
ruleset; merged with --admin per standing practice.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Author: hyperpolymath

.github/CODEOWNERS

@@ -1,34 +1,4 @@
 # SPDX-License-Identifier: MPL-2.0
-# CODEOWNERS - Define code review assignments for GitHub
-# See: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
-
-# Default: sole maintainer for all files
-* @hyperpolymath
-
-# Security-sensitive files require explicit ownership
-SECURITY.md @hyperpolymath
-.github/workflows/ @hyperpolymath
-.machine_readable/ @hyperpolymath
-contractiles/ @hyperpolymath
-
-# License files
-LICENSE @hyperpolymath
-LICENSES/ @hyperpolymath
-
-# Configuration
-.gitignore @hyperpolymath
-.github/ @hyperpolymath
-
-# Documentation
-README* @hyperpolymath
-CONTRIBUTING* @hyperpolymath
-CODE_OF_CONDUCT* @hyperpolymath
-GOVERNANCE* @hyperpolymath
-MAINTAINERS* @hyperpolymath
-CHANGELOG* @hyperpolymath
-ROADMAP* @hyperpolymath
-
-# Build and CI
-Justfile @hyperpolymath
-Makefile @hyperpolymath
-*.sh @hyperpolymath
+# Solo-maintained hyperpolymath repo: no owner lines by policy.
+# See hyperpolymath/standards CODEOWNERS-POLICY.adoc (Rule 1).
+# Sole-maintainer review is moot; SPDX headers carry attribution.

.github/workflows/governance.yml

@@ -32,4 +32,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@81dbf2dd854b1444fd6236fa2352474383b2c2b9
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@7fdc2705df74b4e352d2a1cde3e87a5923fdf329

.github/workflows/main-estate-audit.yml

@@ -0,0 +1,91 @@
+name: Central Estate CI/CD Audit
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+  estate-audit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      
+      - name: Required Files Gate
+        uses: hyperpolymath/cicd-suite/actions/required-files-check@main
+        
+      - name: Code Hygiene Gate
+        uses: hyperpolymath/cicd-suite/actions/code-hygiene-check@main
+        
+      - name: Manifest Validation Gate
+        uses: hyperpolymath/cicd-suite/actions/manifest-check@main
+        
+      - name: Idris2 ABI Purity Gate
+        uses: hyperpolymath/cicd-suite/actions/idris2-abi-check@main
+        
+      - name: Zig Hexadeca API Gate
+        uses: hyperpolymath/cicd-suite/actions/zig-hexadeca-check@main
+        
+      - name: Contractile Validation Gate
+        uses: hyperpolymath/cicd-suite/actions/contractile-validation-check@main
+        
+      - name: Recipes Set Validation Gate
+        uses: hyperpolymath/cicd-suite/actions/recipes-set-check@main
+        
+      - name: Affirmation Document Gate
+        uses: hyperpolymath/cicd-suite/actions/affirmation-check@main
+        
+      - name: Academic Referencing Gate
+        uses: hyperpolymath/cicd-suite/actions/referencing-check@main
+        
+      - name: Semantic Audit Gate
+        uses: hyperpolymath/cicd-suite/actions/semantic-audit-check@main
+        
+      - name: SPDX License Gate
+        uses: hyperpolymath/cicd-suite/actions/spdx-license-check@main
+        
+      - name: Proof Runner Gate
+        uses: hyperpolymath/cicd-suite/actions/proof-runner-check@main
+        
+      - name: PRAT Testing Gate
+        uses: hyperpolymath/cicd-suite/actions/prat-check@main
+        
+      - name: Panic Attack & Pons Gate
+        uses: hyperpolymath/cicd-suite/actions/custom-tools-check@main
+        
+      - name: WWW & Well-Known Compliance Gate
+        uses: hyperpolymath/cicd-suite/actions/www-compliance-check@main
+        
+      - name: BoJ Cartridge Validation Gate
+        uses: hyperpolymath/cicd-suite/actions/boj-cartridge-check@main
+        
+      - name: Formatting Validation Gate
+        uses: hyperpolymath/cicd-suite/actions/formatting-check@main
+        
+      - name: Accreditations & Badges Gate
+        uses: hyperpolymath/cicd-suite/actions/badges-check@main
+        
+      - name: Metrics Extraction Gate
+        uses: hyperpolymath/cicd-suite/actions/metrics-check@main
+        
+      - name: Linguist & Banned Languages Gate
+        uses: hyperpolymath/cicd-suite/actions/linguist-check@main
+        
+      - name: Test & Benchmarks Dashboard Gate
+        uses: hyperpolymath/cicd-suite/actions/tests-benches-check@main
+        
+      - name: Hosting & Site Status Gate
+        uses: hyperpolymath/cicd-suite/actions/hosting-check@main
+        
+      - name: Git-Sea Analytics Gate
+        uses: hyperpolymath/cicd-suite/actions/gitsea-check@main
+        
+      - name: Trust & Humans Validation Gate
+        uses: hyperpolymath/cicd-suite/actions/trust-humans-check@main
+        
+      - name: Are We UnAPI Gate (Secret Scanning)
+        uses: hyperpolymath/cicd-suite/actions/secrets-check@main
+        
+      - name: Reasonably Good Token Validation Gate
+        uses: hyperpolymath/cicd-suite/actions/vaulted-tokens-check@main

.github/workflows/mirror.yml

@@ -12,5 +12,5 @@ permissions:
 
 jobs:
   mirror:
-    uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@d135b05bfc647d0c0fbfedc7e80f37ea50f49236
+    uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@7fdc2705df74b4e352d2a1cde3e87a5923fdf329
     secrets: inherit

.github/workflows/rust-ci.yml

@@ -24,5 +24,5 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - run: cargo test --features git-integration

.github/workflows/spark-theatre-gate.yml

@@ -16,7 +16,7 @@ permissions:
 
 jobs:
   spark-theatre-gate:
-    uses: hyperpolymath/standards/.github/workflows/spark-theatre-gate.yml@d135b05bfc647d0c0fbfedc7e80f37ea50f49236
+    uses: hyperpolymath/standards/.github/workflows/spark-theatre-gate.yml@7fdc2705df74b4e352d2a1cde3e87a5923fdf329
     with:
       paths: "."
       enforce_zero_contract: false

.machine_readable/6a2/STATE.a2ml

@@ -57,7 +57,7 @@ blockers = [
   "'lattice' is a meet-semilattice + digraph; meet/zoom tested not proved (severity: medium; PROOF-NEEDS.md)",
 ]
 template-debt = [
-  "RESOLVED 2026-06-03: 0-AI-MANIFEST.a2ml had [YOUR-REPO-NAME]/{{AUTHOR}} placeholders",
+  "RESOLVED 2026-06-03: 0-AI-MANIFEST.a2ml had [YOUR-REPO-NAME]/Jonathan D.A. Jewell placeholders",
   "RESOLVED 2026-06-03: 6a2 metadata set created (was missing entirely)",
   "RESOLVED 2026-06-03: NEUROSYM.a2ml/PLAYBOOK.a2ml were empty commented stubs",
   "RESOLVED 2026-06-03: methodology.a2ml had {{...}} placeholders (would reject itself)",

.mise.toml

@@ -0,0 +1,2 @@
+[tools]
+rust = "stable"

.tool-versions

@@ -102,3 +102,20 @@ git-reticulator/
 "I have read the manifest. State lives in `.machine_readable/6a2/` only. I will
 mark SKELETON/ASPIRATIONAL honestly, will not claim 'lattice' algebra without
 discharging PROOF-NEEDS.md P1/P2, and will not commit template placeholders."
+
+<!-- BEGIN requires-initialisation -->
+
+## PRIORITY ACTION — this repository is not fully initialised
+
+1 substitution token(s) still have no value. **Read
+`REQUIRES_INITIALISATION.md` in the repository root before doing anything
+else here** — it lists every outstanding token, what it means, and which
+files it belongs in.
+
+Do not fabricate values for them, and do not delete the sections that
+contain them to quiet a gate. They are unfilled because they need a
+decision, not because they were overlooked. Resolve what you legitimately
+can, leave the rest, and delete `REQUIRES_INITIALISATION.md` only when
+nothing outstanding remains.
+
+<!-- END requires-initialisation -->