audit(2026-05-31): add AGENTS.md + fix broken uvicorn module path

[hizrianraz]

Part of the org-wide audit — Linear AIN-328. Do not merge without founder review.

Changes

• + AGENTS.md — operating contract. Documents the frozen audit-chain contract strings (jws_issuer="ainfera-os", sha256("ainfera-os:genesis"), OpenAPI title) that must never be renamed (renaming breaks verification of every historical receipt — they are correct, not stale), and the deliberate ainfera-mithril/ainfera-auto silent-alias layer.
• README — fix broken run command ainfera_os.main:app → ainfera_api.main:app (the package was renamed ainfera_os → ainfera_api on 2026-05-15; the old module path does not exist).

Verified

• ls confirms package dir is ainfera_api (no ainfera_os dir) — old command was broken.
• AGENTS.md present; LICENSE already Apache-2.0; ATS/AAMC CI grep-gate (tests/smoke/test_ats_aamc_retired.py) untouched.

NOT changed (flagged for founder — public copy / contract)

• README line ~38 ("Internal Ainfera company OS … lives in ainfera-ai/ainfera-os") — public narrative + a link to the internal valinor repo (going private, AIN-329). Rewriting public copy is the founder's call; the link will 404 post-privatization.
• The frozen ainfera-os contract strings above (must stay).

🤖 Aulë · audit branch audit/2026-05-31 · not merged.

---

Note

Low Risk
Documentation-only plus a README run-command fix; no runtime, auth, or data-path code changes.

Overview
Adds AGENTS.md, an operating contract for humans and agents on this repo: L2 routing runtime identity (ainfera_api), Naming law v1.3 (canonical ainfera-inference, legacy model aliases, retired ATS/AAMC), frozen audit-chain literals that must not be renamed (ainfera-os issuer/genesis/OpenAPI title), mandatory premise checks, definition-of-done commands, and secrets/Supabase guidance.

Updates README local quickstart so uvicorn targets ainfera_api.main:app instead of the removed ainfera_os module path.

^{Reviewed by Cursor Bugbot for commit ccdff7c. Bugbot is set up for automated code reviews on this repo. Configure here.}