docs: session close-out — ReScript->AffineScript cutover + licence fix recorded

[hyperpolymath]

What

Documentation + housekeeping close-out for this session's merged work (#70 Android companion, #73 AffineScript binding, #74 ReScript retirement + LICENSE/trusted-base fixes). Docs-only — no code or config behaviour changes.

• CHANGELOG.md — [Unreleased] Changed/Removed: the ReScript→AffineScript binding migration and the LICENSE AGPL→MPL-2.0 correction.
• README.adoc, ROADMAP.adoc — current-state binding references updated ReScript → AffineScript (the bindings table and the IDApTIK integration target).
• .machine_readable/6a2/STATE.a2ml — session close-out entry (machine record): all three PRs merged, the three governance gates now green, auto-merge used, stale branches pruned — plus a flag that standards/LICENSE and burble/LICENSE carry the same AGPL-vs-MPL drift (surfaced, not touched, per the licence guardrail).

Also done this pass (not in this diff)

• Deleted the 3 merged local gossamer branches (remotes were auto-deleted on merge).
• Confirmed no stray build artifacts in-tree; working trees clean across all in-scope repos.

CI: governance gates stay green (LICENSE is MPL-2.0; no ReScript), E2E unaffected (docs only); abi-typecheck/android correctly skip (no src/interface change).

---

Generated by Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 138 issues detected

Severity	Count
🔴 Critical	3
🟠 High	40
🟡 Medium	95

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Action perpolymath/standards/.github/workflows/governance-reusable.yml@main\n needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in abi-typecheck.yml",
    "type": "missing_timeout_minutes",
    "file": "abi-typecheck.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in boj-build.yml",
    "type": "missing_timeout_minutes",
    "file": "boj-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "missing_timeout_minutes",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in governance.yml",
    "type": "missing_timeout_minutes",
    "file": "governance.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence