[umbrella] Estate audit & optimization — make the enforcement real (Waves 0–6)

[hyperpolymath]

Program tracker for the estate-wide audit-and-uplift anchored in standards. Ordered by estate doctrine (RSR-PHILOSOPHY.adoc): holes before goals, solutions at source, always fail loudly.

The diagnosis (7-agent recon): the estate's declarations were rich but enforcement was largely theatre — validators passed vacuously, mandatory checks were declared-but-never-run, and there was no post-action check on an agent's claims. Each wave converts a layer of theatre into a check that genuinely can fail.

Landed

• Wave 0 — kill the false green (Estate audit & optimization — Wave 0: kill the false green (holes before goals) #453): check-6scm.sh no longer passes vacuously; the boj-build K9 stub became a real structural check; rsr-audit.sh arg bug fixed (closes rsr-audit.sh: stale v1.0.0 canon + positional-arg bug → false-negative scores #387); the || true masking a broken RSR audit removed; audit-contractiles.sh de-hardcoded. Every fix ships a red-team fixture. Also fixed the root cause of estate-wide PR-red: main itself carried un-regenerated registry drift (relates REGISTRY.a2ml drift recurs and blocks every PR — needs a regen step or pre-commit hook #381/CI: governance + hypatia-scan red on main — 104 Hypatia findings vs empty baseline #399).
• Wave 1 — make automation run (Estate audit & optimization — Wave 0: kill the false green (holes before goals) #453): the Mustfile's 16 invariants now execute in CI (run-mustfile.sh); hooks/install.sh + just hooks-install; registry-drift CI now self-explains the fix; hypatia-scan honestly labelled ADVISORY (relates Proposal: an honest, adoptable readiness/insight badge framework — grade our own work, and challenge the evaluators #446).
• Wave 3 — compliance scorecards + dashboard (Estate audit — Wave 3: MUST/SHOULD/COULD compliance scorecards + generated dashboard #454): COMPLIANCE-DASHBOARD.md generated from 28 per-spec scorecards keyed to the registry, --check-gated. Honest baseline: 41/138 MUSTs passing, 66% systems coverage. Aspirational Grade-A gates never count as pass (operationalises Proposal: an honest, adoptable readiness/insight badge framework — grade our own work, and challenge the evaluators #446).
• Wave 4 — DYADT post-action claim verification (Estate audit — Wave 4: DYADT, post-action agent-claim verification (rein in LLMs) #457) + hardening (Harden the DYADT claim verifier against adversarial-review bypasses #458): the missing Tier-4 "agent claimed X → mechanically confirm/refute X". Reference verifier + conformance vectors + dogfood; hardened fail-safe against a 3-lens adversarial review.
• Wave 5 — per-language testing standard v2.0.0 (Estate audit — Waves 5 + 6: per-language testing standard, canonical-names guard, DYADT residual fix #459): RFC-2119 R1–R9 mapped to the CRG taxonomy; guide template; AffineScript guide (honest gaps); check-language-guide.sh gate.

Remaining charters (hand-off to other sessions / bots)

• DYADT production verifier — implement the continuous, network-capable verifier in hyperpolymath/did-you-actually-do-that against the conformance vectors in did-you-actually-do-that/spec/conformance/. Acceptance = passes that suite. (child issue)
• Per-language guides — Zig, Elixir+Gleam, Idris2/Agda from the template; refresh the Julia guide to R1–R9; migrate the AffineScript guide SSOT to hyperpolymath/affinescript. (child issue)
• Promote advisory scanners to blocking — flip affinescript-verify.yml and hypatia-scan critical-issue steps to gating against a committed baseline (relates CI: governance + hypatia-scan red on main — 104 Hypatia findings vs empty baseline #399, Hypatia scanner build-cache is stale-by-design — merged scanner fixes never activate in CI #437, Proposal: an honest, adoptable readiness/insight badge framework — grade our own work, and challenge the evaluators #446).
• Mustfile enforcement as a PR gate — run-mustfile.sh runs on push-to-main today; also gate PRs.
• 6a2 → descriptiles — complete the file migration + adopt a reintroduction guard estate-wide (rsr-template-repo); relates the CANONICAL-NAMES mandate.
• RSR v2.0 machine-half — port spec.scm/* (Guile, references deprecated STATE.scm) to .machine_readable/, reconciled with TIERS.adoc.
• Estate scorecard rollout — per-repo scorecards + an estate-wide grade dashboard.
• Release hygiene — first tagged release; rand<0.9.3 advisory expiry; audits/licence-flags-2026-07.adoc (flag-only).

Cross-links to existing issues

Relates: #381 (registry drift), #399 (CI-red on main), #426 (estate CI-red master cause), #437 (hypatia stale cache), #446 (honest badge framework), #451 (reusable-workflow permissions), #387 (rsr-audit bugs, fixed), #124 (proof-debt epic), #348 (gitbot fan-out).

Licence/SPDX is flag-only throughout every wave — no header edits.

[hyperpolymath]

Wave 6 continuation update (2026-08-24):

Canonical metadata naming:

• refactor(metadata): migrate 6a2 to descriptiles #625 merged: 31 active .machine_readable/6a2/ directories migrated to .machine_readable/descriptiles/ (180 file renames); the exact archived Wave-3 provenance payload remains under its historical path.
• fix(rules): retire 6a2 descriptile paths hypatia#719 is open: Hypatia’s own six metadata files plus SD001/SD004/SD007/SD023 enforcement are aligned to descriptiles; planted retired-path controls and 49 focused tests pass.
• fix(test): make aggregate runner fail loudly #627 merged and closed test runner reports false green for missing and failing suites #626: the root aggregate test runner now fails loudly and runs the four actually executable suites.
• fix(registry): refresh hashes after merged changes #628 is the one-file post-merge registry repair: fix(test): make aggregate runner fail loudly #627 changed tracked content in ten registered homes after refactor(metadata): migrate 6a2 to descriptiles #625 generated hashes, so current main needs those hashes refreshed.

Reproducible HYP-S009 inventory:

• production evaluator and independent reference checker agree on exactly 74 findings
• normalized path-set SHA-256: 4146215e89683c762eb320aac69417901ca343ceeb6abadc6103c078b853f954
• [carve-out 1/9] Evict a2ml/ product → hyperpolymath/a2ml; keep the spec home slim (runbook inside) #490 a2ml: 27
• [carve-out 2/9] Evict k9-svc/ implementations → k9-ecosystem; dedupe k9-svc/actions/validate → k9-validate-action #491 k9-svc: 29
• [carve-out 3/9] Evict protocol implementations (avow, axel, consent-aware-http, mcp-repo-guardian, repo-guardian-fs); keep spec text #492 gatekeeper: 2; axel: 7
• [carve-out 4/9] rhodium-standard-repositories/ cleanup: de-vendor satellites/, merge templates into rsr-template-repo, delete the lying .gitmodules #493 RSR satellites: 8
• unassigned k9-coordination outlier: 1 (tools/k9-init/Cargo.toml)
• [carve-out 5/9] Evict lol/ (corpus crawler product) → own repo #494 lol: 0 within the configured HYP-S009 basename/LOCAL-home horizon
• [carve-out 7/9] Delete/archive scaffold junk & session detritus at the canon root #496 session detritus: 0 within the merged archiver’s tracked-path/name-pattern horizon; planted-positive smoke test passed first

Recommended extraction order remains #492 AXEL pilot, then #491. #490 and #494 are destination-blocked from the authenticated horizon (hyperpolymath/a2ml and /lol not visible); do not create/delete destinations without owner direction. #493 must remain licence-neutral.

Licence boundary: no licence/SPDX content was edited. The 32 tracked #497 paths remain owner-only; this includes 25 (not the stale issue-body count of 24) under toolchain-readiness-grades/references/007/.

[hyperpolymath]

2026-08-25 — full triage of all 65 open issues; four new umbrellas filed

A complete pass over this repo's open issues was done on 2026-08-25. Results: 3 closed (#407, #303, #313), 4 issue bodies corrected for false premises, 1 canon conflict ruled, and the outstanding work regrouped under four new umbrellas:

• [umbrella] Estate control plane — close the automation loop (the last link was never connected) #633 — Estate control plane: close the automation loop. The load-bearing finding. Detection and fan-out are wired; nothing merges the PRs. Measured: 1,152 pinned references to standards reusables across 25 SHA generations, with current HEAD d67def67 appearing zero times.
• [umbrella] Template family rationalisation — variant packs, not variant repos (measured: 6-file delta) #634 — Template family rationalisation. Measured: the spine↔Julia-variant delta is six files; everything else is backwards drift. Variant packs, not variant repos.
• [umbrella] Surface the buried projects — DYADT is the worked example, the detector is the deliverable #635 — Surface the buried projects. DYADT is the worked example (a full implementation orphaned inside patallm-gallery while three estate registries name a repo that was never minted); the generalisable deliverable is a detector.
• [charter] git-logistics-office — the estate control plane (repo lifecycle: birth, enrollment, life, death) #636 — git-logistics-office charter: the estate control plane, owning repo lifecycle birth → enrollment → life → death.
• [register] Owner-decision backlog — 17 issues blocked on a ruling, not on effort #637 — Owner-decision register: 17 issues blocked on a ruling, not on effort.

Work already shipped from that pass:

PR	What
hyperpolymath/.git-private-farm#127	wires observe.sh — the merge sense organ, written 2026-07-13 and called by no workflow since
hyperpolymath/hypatia#721	points the merge brain at a populated store
hyperpolymath/hypatia#720	fixes a dispatch to dot-git-private-farm, a repo that does not exist
hyperpolymath/gitbot-fleet#490	same defect, other end of the hop
#632	rules the TypeScript/AffineScript canon conflict — AffineScript governs

[hyperpolymath]

Re-verified 2026-08-27 — three "remaining charters" are in fact done

charter	state
Mustfile PR gate	✅ registry-verify.yml runs scripts/run-mustfile.sh on pull_request, with an explicit "Wave-8 gate promotion" comment
RSR v2.0 machine-half	✅ spec.scm/ has 0 tracked files; .machine_readable/ has 95
6a2 → descriptiles	✅ 6 residual 6a2 paths vs 180 descriptile paths

Genuinely still open

• DYADT production verifier — blocked. hyperpolymath/did-you-actually-do-that 404s; the spec and its 10 conformance vectors live inside standards/did-you-actually-do-that/. Retarget is already recorded in [umbrella] Surface the buried projects — DYADT is the worked example, the detector is the deliverable #635.
• Per-language testing guides — 2 of 5 written. Present: affinescript-testing-guide.adoc, julia-testing-tools-guide.adoc, plus the TEMPLATE. Missing: Zig, Elixir+Gleam, Idris2/Agda.

Recommend: tick the three completed charters, and let this umbrella close once #635 and the guides land.