docs(ledger): truth INT-02 closure + spin satellite-shell scope to #489 (Refs #179, #489)

[hyperpolymath]

INT-02 substrate (host-agnostic loader bridge) shipped in #250 + proven in #267 back on 2026-05-19, but the issue (#179) stayed open under the PR-body convention "Refs not Closes — owner-gated; the affinescript-dom-loader satellite shell is downstream".

Re-verified on main @ efa0339 2026-05-31 — 14/14 unit tests via deno task test + e2e harness tests/modules/loader-bridge/run.sh on real compiler-emitted xmod wasm both green. Closed #179.

The satellite-shell scope question (separate hyperpolymath/affinescript-dom-loader repo vs. fold into packages/affine-js vs. defer until INT-08 runtime unblocks) is now #489 with A/B/C options + recommendation pending owner call.

Ledger updates

Doc	Row	Change
ECOSYSTEM.adoc	satellite-registry affinescript-dom-loader	scaffold → scope-deferred; back-pointer to #489 / #183 / #255
ECOSYSTEM.adoc	INT-02	added "#179 CLOSED 2026-05-31"; satellite-shell pointer → #489
ECOSYSTEM.adoc	INT-05	"blocked by INT-02" → INT-02 dep cleared; flagged next-up for issue-spinout
ECOSYSTEM.adoc	INT-11	INT-02 dep cleared; still blocked by INT-08 runtime via #255; satellite-repo pointer → #489
TECH-DEBT.adoc	INT-02	matched closure language; satellite-repo pointer → #489

SAT-02 row in TECH-DEBT was already marked FIXED + Proven + locked — left as-is.

No code change. Pure ledger truthing.

Refs #179, #489.

[github-actions]

🔍 Hypatia Security Scan

Findings: 83 issues detected

Severity	Count
🔴 Critical	2
🟠 High	13
🟡 Medium	68

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Action perpolymath/standards/.github/workflows/governance-reusable.yml@main\n needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action ons/checkout@v6\n    needs attention",
    "type": "unpinned_action",
    "file": "publish-jsr.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action land/setup-deno@v2\n    needs attention",
    "type": "unpinned_action",
    "file": "publish-jsr.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in affine-vscode-publish.yml",
    "type": "missing_timeout_minutes",
    "file": "affine-vscode-publish.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in ci.yml",
    "type": "missing_timeout_minutes",
    "file": "ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in ci.yml",
    "type": "missing_timeout_minutes",
    "file": "ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in ci.yml",
    "type": "missing_timeout_minutes",
    "file": "ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in ci.yml",
    "type": "missing_timeout_minutes",
    "file": "ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence