docs: Item 11 Group B — diverged .md/.adoc governance pairs → canonical AsciiDoc

[hyperpolymath]

Resolves diverged governance doc pair(s) where a generic RSR-template .adoc shadowed a substantive hand-authored .md. The .md is canonical — converted to AsciiDoc with a vocabulary-preservation gate (≥98% token coverage, fails otherwise) and removed. Content-preserving.

Resolved: `tools/hud/CODE_OF_CONDUCT`

Special case `tools/hud/CODE_OF_CONDUCT`: existing `.adoc` kept (it has project-specific Palimpsest / AI-disclosure clauses the `.md` lacks); the missing Contributor Covenant enforcement ladder (Correction/Warning/Temporary Ban/Permanent Ban) + fuller attribution were folded in by hand. The standard-boilerplate Scope/Standards examples remain intentionally condensed as in the prior `.adoc`.

Skipped for manual review: recon-silly-ation/MAINTAINERS.md (no md@origin)

🤖 Generated with Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 192 issues detected

Severity	Count
🔴 Critical	14
🟠 High	110
🟡 Medium	68

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/reposystem/reposystem/tools/rsr-certified/extensions/vscode/src/extension.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "innerHTML assignment -- XSS risk, use textContent or SafeDOM (5 occurrences, CWE-79)",
    "type": "js_innerhtml",
    "file": "/home/runner/work/reposystem/reposystem/stateful-artefacts/browser-extension/scripts/popup.js",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "innerHTML assignment -- XSS risk, use textContent or SafeDOM (1 occurrences, CWE-79)",
    "type": "js_innerhtml",
    "file": "/home/runner/work/reposystem/reposystem/stateful-artefacts/browser-extension/scripts/content.js",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "innerHTML assignment -- XSS risk, use textContent or SafeDOM (4 occurrences, CWE-79)",
    "type": "js_innerhtml",
    "file": "/home/runner/work/reposystem/reposystem/stateful-artefacts/dashboard/js/dashboard.js",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "innerHTML assignment -- XSS risk, use textContent or SafeDOM (5 occurrences, CWE-79)",
    "type": "js_innerhtml",
    "file": "/home/runner/work/reposystem/reposystem/stateful-artefacts/annotation-layer/annotations.js",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "innerHTML assignment -- XSS risk, use textContent or SafeDOM (7 occurrences, CWE-79)",
    "type": "js_innerhtml",
    "file": "/home/runner/work/reposystem/reposystem/web/app.js",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "HTTP URL in code -- use HTTPS for non-localhost (16 occurrences, CWE-319)",
    "type": "js_http_url_in_code",
    "file": "/home/runner/work/reposystem/reposystem/web/app.js",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "medium"
  },
  {
    "reason": "HTTP URL in code -- use HTTPS for non-localhost (1 occurrences, CWE-319)",
    "type": "js_http_url_in_code",
    "file": "/home/runner/work/reposystem/reposystem/gui/lib/rescript-tea/src/tea_svg.res.js",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "medium"
  },
  {
    "reason": "HTTP URL in code -- use HTTPS for non-localhost (10 occurrences, CWE-319)",
    "type": "js_http_url_in_code",
    "file": "/home/runner/work/reposystem/reposystem/gui/lib/rescript-tea/src/tea_svg_attributes.res.js",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "medium"
  },
  {
    "reason": "Nickel file missing SPDX-License-Identifier header (1 occurrences, CWE-1104)",
    "type": "ncl_missing_spdx",
    "file": "/home/runner/work/reposystem/reposystem/scaffoldia/repo-slm-augmentor/ncl/lib/schema.ncl",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence

[hyperpolymath]

Superseded by reposystem#46 (concurrent Item 11 tail sweep), already merged to main. That resolution produced a more complete tools/hud/CODE_OF_CONDUCT.adoc (7698b/195L) than this PR's hand-merge: it preserves the project-specific Palimpsest / AI-disclosure / attribution-strip clauses and folds in the full Contributor Covenant enforcement ladder and retains the standard Scope/Standards boilerplate (which this PR intentionally condensed). Closing to avoid regressing main. recon-silly-ation/MAINTAINERS in this PR's scope was also already resolved faithfully (100% vocab) by reposystem#46.