fix: repair dangling AI-manifest parent pointers (Phase-2 WP-1)

[hyperpolymath]

Phase-2 WP-1 — the zero-risk, decision-free piece of the snifs Phase-2 de-template plan (drafted in dev-notes). Independent of #42 (disjoint files).

Five nested AI-manifests had parent pointers that didn't resolve — pre-existing drift surfaced by #42's manifest-integrity audit but outside that PR's scope:

Manifest	Fix
examples/0.1-AI-MANIFEST.a2ml	one-line stub → full META + AI_MANIFEST
.github/0.1-AI-MANIFEST.a2ml	one-line stub → full META + AI_MANIFEST
verification/tests/0.2-AI-MANIFEST.a2ml	one-line stub → full META (level 2)
container/0.1-AI-MANIFEST.a2ml	had a full body but no level/parent → added
docs/governance/0.1-AI-MANIFEST.a2ml	parent pointed at non-existent ../0-AI-MANIFEST.a2ml → repoint to docs pillar ../0.1-AI-MANIFEST.a2ml

Every manifest parent pointer in the repo now resolves (verified by re-running the audit).

Flagged, not fixed here: the docs/governance/ subtree uses an off-by-one numbering (calls itself a top-level governance-pillar at level 1 while living under docs/). Normalizing that subtree — or promoting governance to a repo-root pillar — is a separate structural decision; this PR only makes the dangling pointer resolve.

🤖 Generated with Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 52 issues detected

Severity	Count
🔴 Critical	5
🟠 High	23
🟡 Medium	24

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Action actions/checkout@v4 needs attention",
    "type": "unpinned_action",
    "file": "rust-guest-verify.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in rust-guest-verify.yml",
    "type": "missing_timeout_minutes",
    "file": "rust-guest-verify.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in scorecard-enforcer.yml",
    "type": "scorecard_publish_with_run_step",
    "file": "scorecard-enforcer.yml",
    "action": "split_scorecard_publish_job",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in instant-sync.yml",
    "type": "secret_action_without_presence_gate",
    "file": "instant-sync.yml",
    "action": "peter-evans/repository-dispatch",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in scorecard.yml",
    "type": "scorecard_wrapper_missing_job_permissions",
    "file": "scorecard.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "codeql_missing_actions_language",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Python file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/snifs/snifs/benches/assert_safer.py",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "Python file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/snifs/snifs/verification/tools/abi_conformance.py",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "unsafe block -- requires SAFETY comment (4 occurrences, CWE-676)",
    "type": "unsafe_block",
    "file": "/home/runner/work/snifs/snifs/rust/crates/snif-abi/src/lib.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "medium"
  },
  {
    "reason": "unsafe block -- requires SAFETY comment (1 occurrences, CWE-676)",
    "type": "unsafe_block",
    "file": "/home/runner/work/snifs/snifs/rust/crates/demo-guest/src/lib.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence