refactor(root): move root artefacts to their canonical locations

.github/workflows/dogfood-gate.yml

@@ -40,7 +40,7 @@ jobs:
 
       - name: Validate A2ML manifests
         if: steps.detect.outputs.count > 0
-        run: bash .githooks/validate-a2ml.sh
+        run: bash .github/hooks/validate-a2ml.sh
       - name: Write summary
         run: |
           A2ML_COUNT="${{ steps.detect.outputs.count }}"
@@ -85,7 +85,7 @@ jobs:
 
       - name: Validate K9 contracts
         if: steps.detect.outputs.k9_count > 0
-        run: bash .githooks/validate-k9.sh
+        run: bash .github/hooks/validate-k9.sh
       - name: Write summary
         run: |
           K9_COUNT="${{ steps.detect.outputs.k9_count }}"

.machine_readable/contractiles/Justfile

@@ -564,11 +564,11 @@ state-phase:
 
 # Enter Guix development shell (primary)
 guix-shell:
-    guix shell -D -f guix.scm
+    guix shell -D -f build/guix.scm
 
 # Build with Guix
 guix-build:
-    guix build -f guix.scm
+    guix build -f build/guix.scm
 
 # Enter Guix development shell (fallback)
 guix-shell:

CONTRIBUTING.adoc

@@ -24,7 +24,7 @@ git clone https://github.com/hyperpolymath/echidnabot.git
 cd echidnabot
 
 # Reproducible environment (Guix is the estate primary; guix is deprecated 2026-06-01)
-guix shell -D -f guix.scm         # Guix package (guix.scm)
+guix shell -D -f build/guix.scm         # Guix package (guix.scm)
 
 # Or bring your own toolchain (Rust 1.75+, SQLite, podman/bwrap)
 

Justfile

@@ -565,11 +565,11 @@ state-phase:
 
 # Enter Guix development shell (primary)
 guix-shell:
-    guix shell -D -f guix.scm
+    guix shell -D -f build/guix.scm
 
 # Build with Guix
 guix-build:
-    guix build -f guix.scm
+    guix build -f build/guix.scm
 
 # ═══════════════════════════════════════════════════════════════════════════════
 # HYBRID AUTOMATION

contractiles/must/Mustfile

@@ -65,7 +65,7 @@ checks:
   - name: M008-guix-scm-present
     description: "guix.scm or .guix-channel exists (guix is the sole reproducible-dev vehicle)."
     severity: warning
-    run: "test -f guix.scm || test -f .guix-channel"
+    run: "test -f build/guix.scm || test -f .guix-channel"
     recovery: "Add guix.scm or .guix-channel; owner input on channel URL if missing."
 
   - name: M009-no-secrets-committed