Completes the consolidation. bitfuckit, contractiles, recon-silly-ation,
scaffoldia, stateful-artefacts each have a populated, active standalone forge
repo (main + live estate-standardization branches). Replace the vendored trees
with submodule gitlinks pinned at each forge main HEAD, declared in .gitmodules
(git@ URLs, matching the existing submodules).

No content pushed: the forges are canonical (the vendored copies were stale
snapshots, same situation as rpa-elysium). The pre-extraction trees are
preserved on branch archive/vendored-standalones-2026-06-21
(bitfuckit 158 / contractiles 236 / recon-silly-ation 114 / scaffoldia 197 /
stateful-artefacts 97 files) for recovery/diffing — nothing is lost.

.gitmodules now declares 8 consistent gitlinks (git-scripts, git-reticulator,
rpa-elysium + these 5); ~807 vendored files removed from reposystem's tree.

config/tools.ncl: the 6 extracted tools' status 'extracting -> 'extracted
(embed was already 'standalone).

repos.toml: recon-silly-ation is already indexed (verification-ecosystem/...);
the other four have no determinable ecosystem group in-repo, so their
estate-index entries are left to the index generator rather than fabricated.

Not Cargo workspace members — build unaffected (cf. rpa-elysium in #133).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01KhFfkfjKaB7Rg957u3uCT6

…r triage

Informational, non-gating workflow. Runs the Hypatia scanner the same way the
standards hypatia-scan-reusable does, then dumps findings to the job log
(totals; by severity/rule/path; one line per finding). Submodules are not
checked out, so it scans reposystem's own tree only — the residual after the
de-vendor (#133) + extraction (#134) work. Lets the residual be triaged from
CI output without needing artifact download. Safe to delete once triaged.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01KhFfkfjKaB7Rg957u3uCT6

… diagnostic

After de-vendor (#133) + extraction (#134) cut the hypatia residual 222 -> 92,
this fixes the genuine first-party items (the rest being ReScript-migration debt
+ vendored libs, see below).

code_safety (CWE):
- src/commands/apply.rs: replace 3 unwrap() (DoS-via-panic, CWE-754) with safe
  handling -- error.as_deref().unwrap_or(...) and an if-let on failure_index
  (both were provably Some; now panic-free).
- src/verisimdb.rs: VeriSimDbClient::new() no longer .expect()s the HTTP client
  build; falls back to a default client (CWE-754).

structural_drift (anti-fiction doc accuracy -- verified src/ has only
abi/ commands/ importers/, not the referenced dirs):
- EXPLAINME.adoc: src/graph/ -> src/graph.rs; src/aspects/ -> src/commands/aspect.rs;
  src/cli/ -> src/tui.rs; src/scenarios/ -> src/commands/scenario.rs;
  src/export/ -> src/commands/export.rs.
- 0-AI-MANIFEST.a2ml: .machines_readable/6scm/*.scm -> .machine_readable/6a2/*.a2ml.

Also removes the spent hypatia-findings-dump diagnostic workflow.

Verified: cargo check + cargo test -p reposystem green.

Deferred, with reason (NOT silently suppressed): migration_rules (36) + vendored
gui/lib code_safety belong to the ReScript->AffineScript migration (epic #93);
web/app.js "HTTP URL" findings are false positives (SVG xmlns
http://www.w3.org/2000/svg + localhost); web innerHTML is grandfathered-prototype
debt; workflow_audit (13) reason is not surfaced by the scanner; CRG-AUDIT refs
are historical. The neurosymbolic gate stays non-green (long-standing accepted
debt; it has never blocked a merge) but the genuine issues are resolved.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01KhFfkfjKaB7Rg957u3uCT6

## Why

Completes the **Q4 hypatia** work. The de-vendor (#133) + extraction
(#134) already cut the neurosymbolic residual **222 → 92**. This PR
fixes the genuine **first-party** items in that residual; the remainder
is tracked migration debt, vendored third-party code, or scanner
false-positives (enumerated below).

> The scanner has no baseline file for reposystem (the existing
`.hypatia-ignore` keys off `type` and serves only the
**banned-language** gate), and blanket-suppressing 2 criticals + real
CWEs wouldn't be honest — so this **fixes** rather than suppresses.

## Fixed

**`code_safety` (CWE):**
- **`src/commands/apply.rs`** — 3× `unwrap()` (DoS-via-panic, CWE-754) →
`error.as_deref().unwrap_or("unknown error")` and an `if let (true,
Some(idx))` on `failure_index`. Both were provably `Some`; now
panic-free.
- **`src/verisimdb.rs`** — `VeriSimDbClient::new()` no longer
`.expect()`s the HTTP-client build; falls back to a default client
(CWE-754).

**`structural_drift` (anti-fiction doc accuracy)** — verified `src/`
actually contains only `abi/ commands/ importers/` (+ flat `.rs`), not
the referenced dirs:
- **`EXPLAINME.adoc`** — `src/graph/`→`src/graph.rs`,
`src/aspects/`→`src/commands/aspect.rs`, `src/cli/`→`src/tui.rs`,
`src/scenarios/`→`src/commands/scenario.rs`,
`src/export/`→`src/commands/export.rs`. (This is the very doc the CRG-D
demotion was about.)
- **`0-AI-MANIFEST.a2ml`** — `.machines_readable/6scm/*.scm` →
`.machine_readable/6a2/*.a2ml`.

Also removes the spent `hypatia-findings-dump` diagnostic workflow.

**Verified:** `cargo check` + `cargo test -p reposystem` green.

## Deferred — with reasons (not silently suppressed)

| Findings | Why deferred |
|---|---|
| `migration_rules` (36) + vendored `gui/lib/rescript-*` `code_safety` |
ReScript→AffineScript migration debt (epic #93); `Obj.magic`/`getExn`
are inherent to vendored FFI bindings |
| `web/app.js` "HTTP URL" (16) | **False positives** — all
`http://www.w3.org/2000/svg` (required SVG xmlns) + `localhost` |
| `web/app.js` `innerHTML` (8) | grandfathered no-build web prototype;
data is estate-controlled |
| `workflow_audit` (13) | scanner reason not surfaced ("Issue in
`<wf>.yml`") — undiagnosable without rule source |
| `CRG-AUDIT-2026-04-18.adoc` refs | historical governance record |

The long-red neurosymbolic gate stays non-green (accepted debt; it has
never blocked a merge), but the genuine in-scope issues are now
resolved.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

https://claude.ai/code/session_01KhFfkfjKaB7Rg957u3uCT6

---
_Generated by [Claude
Code](https://claude.ai/code/session_01KhFfkfjKaB7Rg957u3uCT6)_

Co-authored-by: Claude <noreply@anthropic.com>