chore: drop editor and renderer after transfer to Seraphina Studios

AGENTS.md

@@ -117,7 +117,7 @@
   the source association, verify anonymous digest access, and remove obsolete
   repository grants without altering foreign entries.
   The private linux-build package keeps its exact package/source identities;
-  record client/editor-only read grants separately from effective workflow pulls.
+  record client-only read grants separately from effective workflow pulls.
   Metadata verifies identity/source/visibility, not grants or effective pulls.
   Preserve all foreign grants and prove each owning authenticated workflow pulls
   its pinned manifest before claiming effective access; never widen visibility.
@@ -126,8 +126,8 @@
   branch policies and reviewer sets, and variable and secret names only. Never
   record credential values. Provision them only after the owning workflow is
   merged and reviewed, and do not imply that `bin/publish` applies them.
-- Crates.io Trusted Publishing is a value-free desired contract for protocol,
-  renderer, and content-toolkit. Bind exact stable repository IDs,
+- Crates.io Trusted Publishing is a value-free desired contract for protocol
+  and content-toolkit. Bind exact stable repository IDs,
   `publish-crate.yml`, protected `refs/heads/main`, `crates-io-release`, and the
   official auth action with a full immutable workflow SHA; allow the reviewed
   `rust-lang/crates-io-auth-action@*` pattern for Dependabot updates without a
@@ -151,16 +151,16 @@
   in the producer helper. Before registry PUT, atomically reserve the global
   crate/version Git-reference coordinate; existing/ambiguous reservations block
   absent-version retries and must never be automatically deleted or reset.
-  First owner-local API-token publication is limited to the fourteen declared
-  renderer/toolkit libraries; exclude CLIs, revoke bootstrap credentials, and
+  First owner-local API-token publication is limited to the seven declared
+  toolkit libraries; exclude CLIs, revoke bootstrap credentials, and
   use OIDC only afterward. Protocol 0.2 retains its approved manual path. Before
   any broad publisher apply mutation, qualify newly added live immutable
   producer selections through fresh scoped source/environment verification;
   pending/missing inventory or drift fails closed. Initial draft-first code
   qualification is separate from later immutable-release/runtime proof, and
   does not require a pre-existing immutable release.
 - Keep the crate dependency App separate from unrelated Apps. Select only
-  client/editor, exactly contents/PR write and metadata read, no events,
+  client, exactly contents/PR write and metadata read, no events,
   bypass or auto-merge; inventory names only for repository secret
   `CRATE_DEPENDENCY_UPDATE_APP_PRIVATE_KEY` and variable
   `CRATE_DEPENDENCY_UPDATE_APP_ID`. Record observed installation and name-only
@@ -228,6 +228,10 @@
   `release_policy: semantic-release` are released by semantic-release; active
   services without a release contract remain pull-request governed with
   `release_policy: none` and are omitted from `release_tags`.
+- Remove a repository transferred out of the organization from every
+  desired-state inventory, validator identity map and test fixture in one
+  change, and record its transfer in `README.md#transferred-repositories`.
+  Historical evidence sections stay as written.
 - Update this `AGENTS.md` in the same change when major rework alters governance
   ownership, policy scope, publisher behavior, required checks, or validation.
 

CONTRIBUTING.md

@@ -222,8 +222,8 @@ Dependabot updates without a central version lock. Automatic publication follows
 source/version merges with zero environment reviewers/wait and no registry
 secrets. Keep pending onboarding distinct from observed source/environment and
 owner-observed external registration; verify live protected main and exact
-refs. First owner-local API-token bootstrap is restricted to the fourteen
-listed renderer/toolkit libraries and ends with revocation; subsequent releases
+refs. First owner-local API-token bootstrap is restricted to the seven
+listed toolkit libraries and ends with revocation; subsequent releases
 use OIDC only. Protocol 0.2 retains its approved manual path. Crate
 publication must qualify both exact-main workflows, isolate inert source
 signing from build/semantic-release OIDC, and keep automatic verify permissions
@@ -241,7 +241,7 @@ newly added live producer selections before its first mutation, with observed
 inventory and fresh scoped source/environment checks. Initial independently
 qualified draft-first code is sufficient for setup; actual immutable public
 release and registry proof remain later runtime obligations. Dependency-update
-App setup is client/editor only, exact contents/PR write and metadata read,
+App setup is client only, exact contents/PR write and metadata read,
 repository credential names only, registry readiness before owned PR creation,
 and ordinary review/checks without auto-merge. Distinguish observed installation
 and credential-name provisioning from pending reviewed workflow activation and
@@ -252,7 +252,7 @@ creation; that internal deadline does not assert upstream expiry. Verify a
 replacement key in the owning writing workflow before revoking the old key.
 Keep App-authenticated selected-set readback or owner
 UI evidence, and do not infer the webhook switch from an empty event set.
-Private linux-build consumption needs separate client/editor-only read grants
+Private linux-build consumption needs separate client-only read grants
 through owner UI. Keep exact private package/source identities and pending grant
 state until observed; metadata and owner pulls do not prove an effective owning
 workflow pull. Preserve foreign grants and visibility. Changes require negative schema