fix: resolve audit blockers, lint config, stale governance lines, and org email standard

[attaullahfayyaz4u-ux]

Summary

This PR resolves the current BridgeLayer audit blockers required before repo hygiene can advance.

It adds ESLint configuration, clears lint errors, replaces stale governance/status placeholders, standardizes public repo contact identity to the RewriteReality Labs org email, and removes unsafe explicit any usage from the audited source/type paths.

Changes

• Added .eslintrc.json so npm run lint executes correctly.
• Installed required TypeScript ESLint dependencies.
• Replaced explicit any usage in src/bridge.ts and src/types.ts.
• Preserved PROPOSED_NOT_AFFIRMED as a valid runtime ATTA status, not a stale placeholder.
• Standardized public repo contact identity to rewriterealitylabs@gmail.com.
• Removed stale placeholder / governance status references from public-facing governance files.
• Fixed whitespace issues caught by git diff --check.

Validation

Local validation completed before push:

• git diff --check — clean
• npx tsc --noEmit — clean
• npm run lint — 0 errors, 3 warnings
• npm test -- --runInBand — 43/43 passing

Notes

Lint warnings remain for unused imports/test helpers only. They are non-blocking under the current lint configuration.

The Anthropic model deprecation warning is a future dependency-risk item and is intentionally out of scope for this PR.

Scope boundary

Included:

• Audit blocker cleanup
• Lint gate repair
• Org identity standardization
• Safe type cleanup

Excluded:

• Model migration
• Runtime behavior changes beyond lint/type safety
• Release tagging
• Main branch direct push

[attaullahfayyaz4u-ux]

Extended PR Title

fix: complete BridgeLayer audit-blocker cleanup and restore governance preflight readiness

Extended PR Description

Governance Context

This PR resolves the BridgeLayer audit blockers that were preventing repo hygiene from advancing under ATTA + GBSE repository governance.

The PR does not claim full repository AFFIRMED status. It only advances the branch from audit-blocked state to PR-review-ready state.

Full repo affirmation remains blocked until:

• PR checks/CI are verified
• PR is merged into main
• main is pulled locally after merge
• validation is rerun on main
• roadmap/spec impact is reviewed
• branch cleanup is completed

Extended Scope Included

• Added ESLint configuration so the lint gate can execute.
• Added TypeScript ESLint dependencies through package.json and package-lock.json.
• Removed unsafe explicit any usage from src/bridge.ts and src/types.ts.
• Preserved PROPOSED_NOT_AFFIRMED as a valid ATTA runtime state, not a stale placeholder.
• Standardized public repo contact identity to rewriterealitylabs@gmail.com.
• Removed stale placeholder/governance status references from public-facing governance files.
• Fixed whitespace issues detected by git diff --check.

Extended Scope Excluded

• No model migration from claude-sonnet-4-20250514.
• No release tag.
• No direct push to main.
• No runtime architecture expansion.
• No dashboard, adapter, or product feature work.
• No claim that the repository is fully AFFIRMED before merge and post-merge validation.

Documentation Impact Matrix

• README.md — affected only where public contact identity required standardization.
• CONTRIBUTING.md — affected only where public contact identity required standardization.
• SECURITY.md — public security contact standardized to org email.
• CODE_OF_CONDUCT.md — public conduct contact standardized to org email.
• docs/SPECIFICATION.md — stale governance/contact status corrected if affected.
• ROADMAP.md — no change in this PR unless reviewer requests post-merge governance update.
• CHANGELOG.md — no release entry; this is not a release PR.

Change Impact Review

• CI/CD: lint gate now has a valid ESLint configuration.
• Dependencies: TypeScript ESLint parser/plugin added.
• Source code: explicit any usage removed in audited paths.
• Public governance docs: org email standard applied.
• Security/conduct identity: moved to organization-level contact.
• Tests: no behavioral test change; existing 43 tests pass.

Benchmark Impact

No benchmark files changed.

Benchmark impact: NO_CHANGE.

Validation Evidence

Local validation before PR:

• git diff --check — clean
• npx tsc --noEmit — clean
• npm run lint — 0 errors, 3 warnings
• npm test -- --runInBand — 43/43 passing
• placeholder scan for INSERT_GITHUB_HANDLE and personal email — clean
• stale governance scan in public docs/config paths — clean

Known Risks / Deferrals

• ESLint reports 3 non-blocking unused-variable warnings.
• TypeScript version warning appears because the installed TypeScript version is newer than the officially supported range for @typescript-eslint/typescript-estree.
• Anthropic model deprecation warning remains a future dependency-risk item and is intentionally out of scope.

Timeline Window

Estimated duration: same-session audit cleanup.

Actual duration: completed through local validation and pushed branch.

Timeline confidence: HIGH for PR creation; CONDITIONAL for merge because CI/review is not yet verified.

Value Added

Value added score: 3 / 5.

Reason: this improves internal repo governance by restoring lint execution, removing stale audit blockers, and standardizing public repo identity.

Risk Reduced

Risk reduced score: 4 / 5.

Reason: this reduces governance drift, public contact inconsistency, lint-gate failure, and unsafe typing in audited source/type paths.

Completion % Contribution

Completion contribution: conditional.

No repository completion percentage should increase until this PR is merged, main is pulled, validation passes on main, roadmap/completion state is updated, and branch cleanup is complete.

Rollback / Revert Notes

Safe rollback path:

• Revert commit 85e8c53 if CI fails or reviewer rejects the ESLint/dependency approach.
• No release has been cut from this branch.
• No production deployment is attached to this PR.

ATTA Status

TRACKED / COMMIT_PUSH_AFFIRMED / PR_PENDING

GBSE Verdict

CONDITIONAL

This PR is ready for review. Merge is not clear until CI passes, review is complete, PR is merged, main is pulled, validation is rerun, and branch cleanup is completed.