Merge Layer 1 local work into main

.bot_directives

@@ -0,0 +1 @@
+.machine_readable/bot_directives

.gitattributes

@@ -1,65 +1,48 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
-# RSR-compliant .gitattributes
-
-* text=auto eol=lf
-
-# Source
-*.rs    text eol=lf diff=rust
-*.ex    text eol=lf diff=elixir
-*.exs   text eol=lf diff=elixir
-*.jl    text eol=lf
-*.res   text eol=lf
-*.resi  text eol=lf
-*.ada   text eol=lf diff=ada
-*.adb   text eol=lf diff=ada
-*.ads   text eol=lf diff=ada
-*.hs    text eol=lf
-*.chpl  text eol=lf
-*.scm   text eol=lf
-*.ncl   text eol=lf
-*.nix   text eol=lf
-
-# Docs
-*.md    text eol=lf diff=markdown
-*.adoc  text eol=lf
-*.txt   text eol=lf
-
-# Data
-*.json  text eol=lf
-*.yaml  text eol=lf
-*.yml   text eol=lf
-*.toml  text eol=lf
-
-# Config
-.gitignore     text eol=lf
-.gitattributes text eol=lf
-justfile       text eol=lf
-Makefile       text eol=lf
-Containerfile  text eol=lf
+# SPDX-License-Identifier: PMPL-1.0-or-later
+
+# Auto detect text files and perform LF normalization
+* text=auto
+
+# Source code
+*.rs text eol=lf diff=rust
+*.ex text eol=lf diff=elixir
+*.exs text eol=lf diff=elixir
+*.ml text eol=lf diff=ocaml
+*.mli text eol=lf diff=ocaml
+*.res text eol=lf diff=javascript
+*.resi text eol=lf diff=javascript
+*.ts text eol=lf diff=typescript
+*.js text eol=lf diff=javascript
+*.idr text eol=lf
+*.v text eol=lf
+*.zig text eol=lf
+
+# Configuration
+*.toml text eol=lf
+*.json text eol=lf
+*.yml text eol=lf
+*.yaml text eol=lf
+*.scm text eol=lf linguist-language=Scheme
+
+# Documentation
+*.md text eol=lf diff=markdown
+*.adoc text eol=lf
+*.txt text eol=lf
 
 # Scripts
-*.sh   text eol=lf
-
-# Binary
-*.png   binary
-*.jpg   binary
-*.gif   binary
-*.pdf   binary
-*.woff2 binary
-*.zip   binary
-*.gz    binary
-
-# Lock files
-Cargo.lock  text eol=lf -diff
-flake.lock  text eol=lf -diff
-
-# GitHub Linguist configuration
-*.woke linguist-language=WokeLang
-*.idr linguist-language=Idris
-*.zig linguist-language=Zig
-
-# Exclude from language stats
-docs/** linguist-documentation
-examples/** linguist-documentation
-target/** linguist-generated
-*.lock linguist-generated
+*.sh text eol=lf
+*.bash text eol=lf
+
+# Build artifacts (binary)
+*.wasm binary
+*.rlib binary
+*.beam binary
+*.so binary
+*.dylib binary
+*.dll binary
+*.exe binary
+
+# Lock files (generated)
+Cargo.lock linguist-generated=true
+package-lock.json linguist-generated=true
+mix.lock linguist-generated=true

.github/workflows/ocaml-core.yml

@@ -30,7 +30,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Setup OCaml
         uses: ocaml/setup-ocaml@v2
@@ -57,7 +57,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Setup OCaml
         uses: ocaml/setup-ocaml@v2

.gitignore

@@ -1,79 +1,37 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
-# RSR-compliant .gitignore
+# SPDX-License-Identifier: PMPL-1.0-or-later
 
-# OS & Editor
-.DS_Store
-Thumbs.db
+# Rust/Cargo
+/target/
+Cargo.lock
+**/*.rs.bk
+*.pdb
+
+# IDE
+.vscode/
+.idea/
 *.swp
 *.swo
 *~
-.idea/
-.vscode/
-
-# Build
-/target/
-/_build/
-/build/
-/dist/
-/out/
-
-# Dependencies
-/node_modules/
-/vendor/
-/deps/
-/.elixir_ls/
-
-# Rust
-# Cargo.lock  # Keep for binaries
-
-# Elixir
-/cover/
-/doc/
-*.ez
-erl_crash.dump
-
-# Julia
-*.jl.cov
-*.jl.mem
-/Manifest.toml
-
-# ReScript
-/lib/bs/
-/.bsb.lock
-
-# Python (SaltStack only)
-__pycache__/
-*.py[cod]
-.venv/
-
-# Ada/SPARK
-*.ali
-/obj/
-/bin/
-
-# Haskell
-/.stack-work/
-/dist-newstyle/
+.DS_Store
 
-# Chapel
-*.chpl.tmp.*
+# Build artifacts
+*.wasm
+*.so
+*.dylib
+*.dll
 
-# Secrets
-.env
-.env.*
-*.pem
-*.key
-secrets/
+# Testing
+.coverage/
+*.profraw
+*.profdata
 
-# Test/Coverage
-/coverage/
-htmlcov/
+# OS
+Thumbs.db
+.Trash-*/
 
-# Logs
+# Temporary
+*.tmp
 *.log
-/logs/
 
-# Temp
-/tmp/
-*.tmp
-*.bak
+# Crash recovery artifacts
+ai-cli-crash-capture/