Correct pre-registration claims and add documentation and Actions policy checks

[arena-ai-coding-agent]

Summary

• Describe the repository honestly as a pre-registration with open, postulated application targets; remove nonexistent build instructions, stale references, and the placeholder certification badge.
• Retire the A2ML state file while preserving provenance and research obligations in plain AsciiDoc; distinguish historical tropical-resource documentation from current claims.
• Add documentation-integrity checks, 12 regression tests, and a read-only CI workflow; simplify mise configuration to the tooling actually used.
• Add canonical Actions allow-list payload preparation and exact read-back comparison for this repository and echo-types, with an owner-only repair runbook.

Validation

• node scripts/check-repository.mjs — passed.
• node --test tests/*.test.mjs — all 12 tests passed.
• git diff --check — passed.
• Canonical payload preparation at standards commit 2479cf769ed5f0481ccf64860a2ab954514c2b59 — succeeded, 93 patterns.
• Live policy audit — correctly failed closed as UNKNOWN for both repositories because administrative API reads returned HTTP 403.

Remaining owner actions

Related to #15 and #16; deliberately does not auto-close either issue.

• The remote repository-description update returned HTTP 403 and still requires an authorised owner.
• Issue Actions allow-list is selected with 0 patterns — any third-party action dies at startup with jobs=0; owner PUT of the canon needed #16 reserves the allow-list PUT for the owner. Apply the reviewed canonical payload and verify both repositories using docs/actions-policy.adoc.
• The new workflow has not yet been verified remotely. Its empty actions.lock entry was added manually because the actions-lock extension installation failed.

These checks validate documentation and policy handling, not Agda proofs. K-CUT remains open. Recent existing Secret Scanner runs were green; historical billing failures were not treated as source defects.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: e69219df-0493-4ba4-b3b8-f02586b9f70c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}