docs: TS→AS migration 01-triage — algorithm spec preserved as .md (closes 1 of standards#241)

[hyperpolymath]

Summary

Part of standards#239 (TS→AffineScript estate migration) — closes 1 of the 9 file candidates in standards#241 STEP 2.

Replaces `docs/campaigns/2026-05-26/01-triage.ts` (183 lines, Deno TypeScript) with `01-triage.md` (196 lines, algorithmic spec). The TS file was a historical campaign snapshot from 2026-05-26; a direct AffineScript port surfaced 10 stdlib gaps that block a clean compile until standards#242 STEP 3 (stdlib fill) lands.

Why .md, not .affine

Attempted a full .affine port in the session that produced this PR. The port surfaced fundamental stdlib gaps:

1. `Set` membership — no native AS surface
2. `Map<String, [T]>` group-by — no native AS surface
3. Async generators (`async function* walk(...)`) — no AS surface
4. Typed JSON decoder for nested `AssailReport` shape — `json.affine` v0.3 pending
5. Regex object construction (`new RegExp(pat)`) — `Deno::regexMatch` is the limit
6. `Date.toISOString()` — no `dateNowIso` extern
7. `Object.fromEntries(...)` builder — no `jsonObjectFromPairs` extern
8. Optional chaining (`?.`) — explicit `Option`/`match` (fine)
9. `async` / `await` on sync FS — Deno.affine is sync (fine)
10. Spread / rest destructuring — explicit helpers needed

Rather than ship a syntactically-iffy partial port that would block other STEP 2 work in review, this PR preserves the algorithmic spec in a structured Markdown document and removes the .ts file. A future PR will land the `.affine` implementation once standards#242 STEP 3 closes the relevant gaps.

Per standards#241 acceptance

• One per-repo PR per file group (this PR = 1 file in panic-attack/)
• Hypatia ownership gate passes (no .ts after merge; .md is governance-clean)
• Stdlib gap list populated (see commit body + .md §"Stdlib gaps surfaced")

What the .md preserves

Every algorithmic detail needed to re-implement:

• Domain types (Severity, WeakPoint, AssailReport, PrCandidate)
• Static policy tables (proof exts, autofix-OK, issue-only, parked debts)
• Category alias mapping (13 entries)
• 8-step classification algorithm
• PR grouping by `(repo, file_dir, category)`
• Output summary JSON shape
• Side-channel stderr log shape

Net delta

• `docs/campaigns/2026-05-26/01-triage.ts`: −183 lines (removed)
• `docs/campaigns/2026-05-26/01-triage.md`: +196 lines (added)

Refs

• standards#239 — TS→AS estate migration umbrella
• standards#241 — STEP 2 candidate list (this is 1 of 9)
• standards#242 — STEP 3 stdlib fill (consumes this PR's gap list)
• `project_estate_ts_to_affinescript_2026_05_28.md` — memory tracker

🤖 Generated with Claude Code

[hyperpolymath]

Note: post-PR review of the project tracker memory shows affinescript#445 (Step-3 first-cut, merged) already closed gaps 5 (regex via existing regexMatch) and 6 (dateNowIso), and added walkRecursive + args + exit + consoleError — partially unblocking the eager-list workaround in gap 3. The .md spec remains canonical for the algorithm preservation; the remaining gaps for a clean .affine port are 1 (Set), 2 (Map group-by), 4 (typed Json decoder for nested AssailReport), 7 (jsonObjectFromPairs builder), and 10 (spread/rest helpers). Tracked at standards#242 (STEP 3).

[github-actions]

🔍 Hypatia Security Scan

Findings: 78 issues detected

Severity	Count
🔴 Critical	5
🟠 High	8
🟡 Medium	65

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Action uses: dtolnay/rust-toolchain@4be9e76fd7c4901c61fb841f5599 needs attention",
    "type": "unpinned_action",
    "file": "e2e.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action es: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb needs attention",
    "type": "unpinned_action",
    "file": "e2e.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action perpolymath/standards/.github/workflows/governance-reusable.yml@main\n needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in boj-build.yml",
    "type": "unknown",
    "file": "boj-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in cargo-audit.yml",
    "type": "unknown",
    "file": "cargo-audit.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "unknown",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "unknown",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "unknown",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in coverage.yml",
    "type": "unknown",
    "file": "coverage.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dependency-review.yml",
    "type": "unknown",
    "file": "dependency-review.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence