docs: publish verified Rust modularization artifacts and org-sync ledger

[ORESoftware]

Summary

Publishes the durable, reviewed evidence for the HypeSiege/StreemPilot Rust-service modularization program and its GitHub/Linear organization mappings.

Contents

• docs/rust-server-modularization/org-sync-ledger-2026-08-05.md
  • exact Wave 1 merge heads and merge commits;
  • HypeSiege Wave 2 merge/run/artifact evidence;
  • current StreemPilot media-router PR and hosted-Actions billing blocker;
  • secure GitHub-App repository-provisioning boundary;
  • canonical Linear projects and program issues; and
  • an explicit statement that Projects-v2 mutation is unavailable, so no organization-board creation is claimed.
• docs/rust-server-modularization/provenance-2026-08-05.json
  • machine-readable PR, SHA, run, artifact, Linear, runner, and credential-policy data.
• docs/rust-server-modularization/artifacts/hypesiege-wave2-rust-service-starters.zip
  • exact artifact from successful workflow run 31032025476, artifact ID 8941056209.
• docs/rust-server-modularization/SHA256SUMS-2026-08-05
  • external checksums for the ledger, provenance, and binary artifact.

Artifact verification

The committed ZIP has SHA-256:

9040cb80f3f875e29b1a0119c26460b86e2c31be3c8bbd326d0c1208759fde69

That equals the GitHub Actions artifact digest from the exact green HypeSiege head. The inner scheduler, publishing-worker, and analytics archives retain their generator-recorded SHA-256 values in the ledger.

Trust boundaries

• No PAT is used or published.
• Generated repositories remain provisioning_required until real repositories and green initialization PRs exist.
• No successful GitHub Projects mutation is claimed.
• StreemPilot remains draft until its sonus-ci exact-head jobs execute.
• Historical repository aliases are separated from current canonical names.

Linear: DEN-1682, DEN-1757