feat(stdlib): STDLIB-04a — Mut effect externs (make_ref/get/set) → real impl (Closes #328)

[hyperpolymath]

Summary

Lands real implementations of the three Mut effect externs declared in stdlib/effects.affine:

extern fn make_ref<T>(x: T) -> Ref<T> / Mut;
extern fn get<T>(r: Ref<T>) -> T / Mut;
extern fn set<T>(r: Ref<T>, x: T) -> Unit / Mut;

Before this PR they were stubs — the surface parsed and typechecked, but no backend wired the runtime semantics, so any caller would compile and then fail at runtime with make_ref is not defined.

Changes

• lib/interp.ml — three new VBuiltin entries: make_ref allocates a VMut cell (the existing runtime mutable-cell variant in Value); get/set route through the standard deref / assign primitives. Reuses the same store the borrow-surface &mut already uses.
• lib/codegen_deno.ml — three new entries in deno_builtins: make_ref → {__cell: x}, get → ((r).__cell), set → (((r).__cell = x), null). Single-field object so get/set are O(1); set returns null (Unit) via comma-expression to match the signature.
• test/test_e2e.ml — three hermetic tests under E2E STDLIB-04a Mut #328:
  1. Int round-trip: make_ref(7); set(r, 42); get(r) == 42
  2. String round-trip (value-polymorphic): make_ref("alpha"); set(r, "omega"); get(r) == "omega"
  3. Deno codegen emits __cell shape (proves the new table entries actually fire).
• docs/TECH-DEBT.adoc — row 04a marked DONE per the audit-split contract from docs(tech-debt): split STDLIB-04 into 04a–04e per per-extern audit (Refs #175) #333.

Conceptual note

These are runtime mutable cells (Ref<T> parameterised type), distinct from the borrow-checker's &/&mut references — different concept that happens to share the word "ref". The Mut effect on the signatures is what marks the call sites as observably stateful.

Test plan

• Three new hermetic tests added to the gate (E2E STDLIB-04a Mut #328)
• No change to stdlib AOT gate count (no new stdlib file)
• CI: dune runtest green (gate moves from 281 → 284)
• Hypatia DOC-FORMAT: no .md introduced

Closes #328. Refs #175.

---

Generated by Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 143 issues detected

Severity	Count
🔴 Critical	13
🟠 High	70
🟡 Medium	60

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Stray AI.a2ml in root -- use 0-AI-MANIFEST.a2ml only",
    "type": "banned",
    "file": "AI.a2ml",
    "action": "delete",
    "rule_module": "root_hygiene",
    "severity": "high"
  },
  {
    "reason": "Superseded by 0-AI-MANIFEST.a2ml",
    "type": "banned",
    "file": "AI.djot",
    "action": "delete",
    "rule_module": "root_hygiene",
    "severity": "high"
  },
  {
    "reason": "Issue in quality.yml",
    "type": "missing_workflow",
    "file": "quality.yml",
    "action": "create",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in security-policy.yml",
    "type": "missing_workflow",
    "file": "security-policy.yml",
    "action": "create",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action hyperpolymath/standards/.github/workflows/governance-reusable.yml@main needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Action actions/checkout@v6 needs attention",
    "type": "unpinned_action",
    "file": "publish-jsr.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action denoland/setup-deno@v2 needs attention",
    "type": "unpinned_action",
    "file": "publish-jsr.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/affinescript/affinescript/affinescript-deno-test/example/smoke_driver.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/affinescript/affinescript/affinescript-deno-test/cli.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/affinescript/affinescript/affinescript-deno-test/mod.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence