fix(k9,deed): route --- per the coordination grammar; align IANA drafts

.github/workflows/actions.lock

@@ -13,8 +13,8 @@ workflows:
     '.github/workflows/apply-workflow-pins.yml':
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
         - 'actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1'
-        - 'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a'
-        - 'step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1'
+        - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+        - 'step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25'
     '.github/workflows/boj-build.yml':
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
     '.github/workflows/canon-spine-lockstep.yml':
@@ -49,15 +49,15 @@ workflows:
     '.github/workflows/dependabot-lock-regen.yml':
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
         - 'actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1'
-        - 'step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1'
+        - 'step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25'
     '.github/workflows/doc-format.yml':
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
     '.github/workflows/dyadt-verify.yml':
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
     '.github/workflows/echidna-verify.yml':
         - 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
-        - 'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a'
+        - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9'
     '.github/workflows/elixir-ci-reusable.yml':
         - 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
@@ -74,7 +74,7 @@ workflows:
     '.github/workflows/hypatia-scan-reusable.yml':
         - 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
-        - 'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a'
+        - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9'
         - 'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124'
         - 'github/codeql-action@b96794f015dfd88f77b49b1c93e0fa7110f94c63'
     '.github/workflows/hypatia-scan.yml': []
@@ -92,13 +92,13 @@ workflows:
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
     '.github/workflows/lockfile-drift-detect.yml':
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
-        - 'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a'
-        - 'step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1'
+        - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+        - 'step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25'
     '.github/workflows/makefile-blocker.yml':
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
     '.github/workflows/mirror-reusable.yml':
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
-        - 'dtolnay/rust-toolchain@7e38f4b43b4db5c8dd498af069a4f6196df1d067'
+        - 'dtolnay/rust-toolchain@e2a55d2ffb04f378e9626c28d38b36d230d1e12f'
         - 'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555'
     '.github/workflows/mirror.yml':
         - 'hyperpolymath/standards@b935e63937b1f1b5cbaeea7e375947d7b924038f'
@@ -117,25 +117,25 @@ workflows:
         - 'actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9'
     '.github/workflows/propagate-hooks.yml':
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
-        - 'step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1'
+        - 'step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25'
     '.github/workflows/provisioning-check-reusable.yml':
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
     '.github/workflows/readme-derive-reusable.yml':
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
     '.github/workflows/readme-derive.yml': []
     '.github/workflows/rust-ci-reusable.yml':
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
-        - 'dtolnay/rust-toolchain@7e38f4b43b4db5c8dd498af069a4f6196df1d067'
+        - 'dtolnay/rust-toolchain@e2a55d2ffb04f378e9626c28d38b36d230d1e12f'
         - 'goto-bus-stop/setup-zig@abea47f85e598557f500fa1fd2ab7464fcb39406'
         - 'swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6'
     '.github/workflows/scorecard-enforcer.yml':
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
-        - 'actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c'
-        - 'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a'
+        - 'actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333'
+        - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9'
         - 'ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc'
     '.github/workflows/scorecard-reusable.yml':
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
-        - 'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a'
+        - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9'
         - 'github/codeql-action@b96794f015dfd88f77b49b1c93e0fa7110f94c63'
         - 'ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc'
     '.github/workflows/secret-scanner-reusable.yml':
@@ -144,18 +144,18 @@ workflows:
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
     '.github/workflows/settings-drift-detect.yml':
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
-        - 'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a'
-        - 'step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1'
+        - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+        - 'step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25'
     '.github/workflows/signed-push-smoke.yml':
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
-        - 'step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1'
+        - 'step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25'
     '.github/workflows/spark-theatre-gate.yml':
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
     '.github/workflows/tag-ruleset-canon.yml':
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
         - 'actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1'
-        - 'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a'
-        - 'step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1'
+        - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+        - 'step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25'
     '.github/workflows/tailscale-connect-reusable.yml':
         - 'tailscale/github-action@d1b6cd204f8dceda5b3eaad7f1f767be390056cd'
     '.github/workflows/uuid-v7.yml':
@@ -177,7 +177,7 @@ dependencies:
         owner_id: 44036562
         repo_id: 513659658
     'actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1':
-        ref: 'v3.2.0'
+        ref: 'bcd2ba49218906704ab6c1aa796996da409d3eb1'
         commit: 'sha1-bcd2ba49218906704ab6c1aa796996da409d3eb1'
         owner_id: 44036562
         repo_id: 642580244
@@ -186,9 +186,9 @@ dependencies:
         commit: 'sha1-368f82528645a54fb793d4d04e342629a3f51346'
         owner_id: 44036562
         repo_id: 438112499
-    'actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c':
-        ref: 'v8.0.1'
-        commit: 'sha1-3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c'
+    'actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333':
+        ref: 'v8.0.2'
+        commit: 'sha1-9000827ccba6bdab643e8b6fd33ac0654aef8333'
         owner_id: 44036562
         repo_id: 192626254
     'actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3':
@@ -201,16 +201,16 @@ dependencies:
         commit: 'sha1-e9aba2c848f5ebd159c070c61ea2c4e2b122355e'
         owner_id: 44036562
         repo_id: 192625525
-    'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a':
-        ref: '043fb46d1a93c77aae656e7c1c64a875d1fc6a0a'
-        commit: 'sha1-043fb46d1a93c77aae656e7c1c64a875d1fc6a0a'
-        owner_id: 44036562
-        repo_id: 192625955
     'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f':
         ref: 'v7.0.0'
         commit: 'sha1-bbbca2ddaa5d8feaa63e36b76fdaad77386f024f'
         owner_id: 44036562
         repo_id: 192625955
+    'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9':
+        ref: 'v7.0.2'
+        commit: 'sha1-cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+        owner_id: 44036562
+        repo_id: 192625955
     'actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9':
         ref: 'fc324d3547104276b827a68afc52ff2a11cc49c9'
         commit: 'sha1-fc324d3547104276b827a68afc52ff2a11cc49c9'
@@ -230,6 +230,11 @@ dependencies:
         commit: 'sha1-7e38f4b43b4db5c8dd498af069a4f6196df1d067'
         owner_id: 1940490
         repo_id: 260749683
+    'dtolnay/rust-toolchain@e2a55d2ffb04f378e9626c28d38b36d230d1e12f':
+        ref: 'v1'
+        commit: 'sha1-e2a55d2ffb04f378e9626c28d38b36d230d1e12f'
+        owner_id: 1940490
+        repo_id: 260749683
     'editorconfig-checker/action-editorconfig-checker@51f63319f592f97930c73d9c46184d20bd206393':
         ref: 'v3.0.0'
         commit: 'sha1-51f63319f592f97930c73d9c46184d20bd206393'
@@ -289,9 +294,9 @@ dependencies:
         commit: 'sha1-28959ce8df70de7be546dd1250a005dd32156697'
         owner_id: 18365890
         repo_id: 220359305
-    'step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1':
-        ref: 'e14015d583714f6e62063499dc959a02595150a1'
-        commit: 'sha1-e14015d583714f6e62063499dc959a02595150a1'
+    'step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25':
+        ref: 'v2.22.1'
+        commit: 'sha1-ccd8616d44fd3846e67624a50d5aad6d37bf2d25'
         owner_id: 88700172
         repo_id: 422287306
     'swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6':

.machine_readable/svc/k9/README.adoc

@@ -130,7 +130,7 @@ K9 contractiles integrate with other RSR standards:
 ⚠️ **Never run as root unless required** +
 ⚠️ **Sandbox external components**
 
-**See:** https://github.com/hyperpolymath/standards/blob/main/k9-svc/docs/SECURITY-BEST-PRACTICES.adoc
+**See:** https://github.com/hyperpolymath/standards/blob/main/1-formats/k9/docs/SECURITY-BEST-PRACTICES.adoc
 
 == Template Files
 
@@ -169,15 +169,15 @@ cargo install just
 
 # Clone K9-SVC (for must shim and tooling)
 git clone https://github.com/hyperpolymath/standards.git
-# Note: K9-SVC is located in standards/k9-svc
+# Note: K9-SVC is located in standards/1-formats/k9
 ----
 
 == Learn More
 
-- **K9-SVC Specification:** https://github.com/hyperpolymath/standards/blob/main/k9-svc/SPEC.adoc
-- **K9 User Guide:** https://github.com/hyperpolymath/standards/blob/main/k9-svc/GUIDE.adoc
-- **Security Documentation:** https://github.com/hyperpolymath/standards/blob/main/k9-svc/docs/SECURITY-FAQ.adoc
-- **IANA Media Type:** `application/vnd.k9+nickel`
+- **K9-SVC Specification:** https://github.com/hyperpolymath/standards/blob/main/1-formats/k9/SPEC.adoc
+- **K9 User Guide:** https://github.com/hyperpolymath/standards/blob/main/1-formats/k9/GUIDE.adoc
+- **Security Documentation:** https://github.com/hyperpolymath/standards/blob/main/1-formats/k9/docs/SECURITY-FAQ.adoc
+- **IANA Media Type:** `application/vnd.k9` (application drafted, not yet filed; see https://github.com/hyperpolymath/standards/blob/main/1-formats/k9/IANA-MEDIA-TYPE-APPLICATION.adoc)
 
 == Contributing
 
@@ -189,4 +189,4 @@ When adding K9 contractiles to your repository:
 4. Sign Hunt-level components before committing
 5. Add K9 validation to CI/CD pipeline
 
-**Questions?** Open an issue on https://github.com/hyperpolymath/standards/tree/main/k9-svc
+**Questions?** Open an issue on https://github.com/hyperpolymath/standards/tree/main/1-formats/k9

1-formats/deed/docs/iana/application-vnd.deed-registration.txt

@@ -12,7 +12,7 @@ registration uses "application/vnd.deed" as the base type, matching the
 `:media-type:` attribute declared normatively in DEED-GRAMMAR-SPEC.adoc
 and following the same reasoning already applied to application/vnd.k9.
 
-Submission Date: NOT YET SUBMITTED (Revision 1, prepared 2026-09-14)
+Submission Date: NOT YET SUBMITTED (Revision 2, prepared 2026-10-13)
 Submitted By: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 
 ---
@@ -93,19 +93,20 @@ Interoperability considerations:
   version.
 
   Character encoding is UTF-8 (RFC 3629).  A leading Byte Order Mark
-  (U+FEFF) is permitted but not required; parsers MUST accept and
-  silently consume it.
+  (U+FEFF) is INVALID: the grammar begins with the SPDX header line
+  ";;", and parsers MUST reject a document that starts with a BOM
+  rather than silently consume it.
 
   Head-form dispatch is exact-stem-first.  The literal
   "estate_chora.deed" also matches the general "<stem>_chora.deed"
   repo-deed pattern, and a conforming implementation MUST resolve it as
   estate-deed, never as repo-deed.
 
 Published specification:
-  Primary specification (v0.1.0, DRAFT):
-  https://github.com/hyperpolymath/standards/blob/main/deed/spec/DEED-GRAMMAR-SPEC.adoc
+  Primary specification (v0.2.2, DRAFT):
+  https://github.com/hyperpolymath/standards/blob/main/1-formats/deed/spec/DEED-GRAMMAR-SPEC.adoc
 
-  Formal grammar (ABNF):
+  Formal grammar (ABNF v1.1.0, normative for parsing):
   https://github.com/hyperpolymath/standards/blob/main/1-formats/deed/spec/abnf/deed.abnf
 
 Applications which use this media type:
@@ -117,7 +118,7 @@ Applications which use this media type:
     with application/vnd.k9 (which enforces)
 
   Reference implementation:
-  https://github.com/hyperpolymath/standards/tree/main/deed
+  https://github.com/hyperpolymath/standards/tree/main/1-formats/deed
 
 Fragment identifier considerations:
   None defined at this revision.  DEED documents are whole-document
@@ -184,7 +185,8 @@ Author/Change controller:
 Provisional registration: Yes
 
   Registered provisionally to establish the subtype name while the
-  grammar specification is at v0.1.0 DRAFT.  A full registration will
+  grammar specification is at v0.2.2 DRAFT (ABNF v1.1.0).  A full
+  registration will
   be re-filed, superseding this one, once DEED-GRAMMAR-SPEC.adoc is
   marked Stable.  The re-filing is expected to change only the
   specification reference and the Security considerations (see OPEN
@@ -208,14 +210,14 @@ References:
 [2] RFC 3629 - UTF-8, a transformation format of ISO 10646
     https://www.rfc-editor.org/rfc/rfc3629.html
 
-[3] DEED Grammar Specification (v0.1.0, DRAFT)
-    https://github.com/hyperpolymath/standards/blob/main/deed/spec/DEED-GRAMMAR-SPEC.adoc
+[3] DEED Grammar Specification (v0.2.2, DRAFT)
+    https://github.com/hyperpolymath/standards/blob/main/1-formats/deed/spec/DEED-GRAMMAR-SPEC.adoc
 
-[4] DEED ABNF grammar
+[4] DEED ABNF grammar (v1.1.0)
     https://github.com/hyperpolymath/standards/blob/main/1-formats/deed/spec/abnf/deed.abnf
 
 [5] application/vnd.k9 registration (companion enforcement format)
-    https://github.com/hyperpolymath/standards/blob/main/k9-svc/docs/iana/application-vnd.k9-registration.txt
+    https://github.com/hyperpolymath/standards/blob/main/1-formats/k9/docs/iana/application-vnd.k9-registration.txt
 
 ---
 
@@ -230,6 +232,17 @@ Change Log:
             rather than binary because DEED has no opaque payload
             construct.
 
+2026-10-13: Revision 2 -- aligned with DEED-GRAMMAR-SPEC v0.2.2 and
+            deed.abnf v1.1.0.  A leading BOM is now stated as INVALID
+            (Revision 1 said parsers MUST accept it, contradicting the
+            spec's lexical rule and the grammar).  Specification and
+            reference-implementation links moved from the retired
+            deed/ path to 1-formats/deed/, and the vnd.k9 link from
+            k9-svc/ to 1-formats/k9/.  The :media-type: attribute this
+            file cites had been dropped from the current spec and
+            survived only in the archived v0.1; it is restored there.
+            Override mechanism re-checked: still absent.
+
 ---
 
 SETTLED BY OWNER RULING, 2026-09-14:
@@ -272,7 +285,8 @@ OPEN BEFORE SUBMISSION (owner action, not blocking this file):
      named + justified + expiring + countable, loosening only) has been
      designed for this family but appears NOWHERE in
      DEED-GRAMMAR-SPEC.adoc at v0.1.0 — verified 2026-09-14, 0
-     occurrences of "override" in the spec against 28 ABNF rules.  It is
+     occurrences of "override" in the spec against 28 ABNF rules.
+     Re-verified 2026-10-13 at spec v0.2.2 / ABNF v1.1.0: still 0.  It is
      therefore deliberately absent from the Security considerations
      above, which describe only what the registered grammar actually
      admits.  If overrides land in the normative grammar, this

1-formats/deed/spec/DEED-GRAMMAR-SPEC.adoc

@@ -1,6 +1,7 @@
 = DEED Grammar Specification
 :version: 0.2.2
 :status: DRAFT
+:media-type: application/vnd.deed
 :toc:
 :toclevels: 3