diff --git a/.claude/CLAUDE.md b/.claude/CLAUDE.md
index 0786b9f..43f51ae 100644
--- a/.claude/CLAUDE.md
+++ b/.claude/CLAUDE.md
@@ -21,7 +21,7 @@ The following files in `.machine_readable/6a2/` contain structured project metad
 
 > **Disambiguation (READ FIRST — see [`DISAMBIGUATION.adoc`](../DISAMBIGUATION.adoc)):** this repo is **OikosBot** and **only** OikosBot. Do not conflate it with two separate, similarly-named projects:
 > - **oikos** — the stock-flow-consistent economics *DSL* (crates `oikos-syntax`/`oikos-parser`/`oikos-desugar`/`oikos-check`). It lives in its **own** repo `hyperpolymath/oikos-economics-accounting-dsl`, **not here**. Do **not** add `oikos-*` DSL crates to this repo.
-> - **sustainabot** — a *reserved member slot* of `hyperpolymath/gitbot-fleet` (`bots/sustainabot/`). **Not here.** A misfiled copy of OikosBot once lived there; it was moved into this repo and renamed `sustainabot-*` → `oikosbot-*`. Do **not** reintroduce the `sustainabot` name here (the sole exception is the legacy `crates/oikosbot-fleet` bridge, which still targets the fleet's `BotId::Sustainabot`).
+> - **sustainabot** — a *reserved member slot* of `hyperpolymath/gitbot-fleet` (`bots/sustainabot/`). **Not here.** A misfiled copy of OikosBot once lived there; it was moved into this repo and renamed `sustainabot-*` → `oikosbot-*`. Do **not** reintroduce the `sustainabot` name here. (The `crates/oikosbot-fleet` bridge now publishes under its own `BotId::Oikosbot` identity — distinct from the fleet's reserved `BotId::Sustainabot` slot.)
 >
 > **Policy refresh 2026-06-19**: This repo has two surfaces, both OikosBot. (1) The **Rust analysis workspace** at the repo root — crates `oikosbot-*` (`oikosbot-cli`/`-analysis`/`-metrics`/`-sarif`/`-eclexia`, plus the optional, workspace-excluded `oikosbot-fleet` bridge). The default `cargo` workspace builds **standalone** with no dependency on gitbot-fleet. (2) **OikosBot's webhook bot** at `bot-integration-affine/` is **AffineScript** as of the 2026-05-28 legacy-shutoff (oikos#41) — the previous ReScript implementation at `bot-integration/` was removed in the same PR. Write no new ReScript or TypeScript here. MPL-1.0 / MPL-1.0-or-later are banned; rewrite to MPL-2.0 wherever encountered (DR-010 supersedes DR-002).
 
diff --git a/.machine_readable/6a2/META.a2ml b/.machine_readable/6a2/META.a2ml
index 2fad296..b0f5275 100644
--- a/.machine_readable/6a2/META.a2ml
+++ b/.machine_readable/6a2/META.a2ml
@@ -13,7 +13,7 @@ author = "Jonathan D.A. Jewell (hyperpolymath)"
 [architecture-decisions]
 decisions = [
   { id = "ADR-001", date = "2026-06-20", status = "accepted", title = "Single datastore = VeriSimDB (octad of modal witnesses)", detail = "Replace the twin ArangoDB (graph/document) + Virtuoso (RDF/SPARQL semantic) design with one VeriSimDB identity-consonance store. VeriSimDB represents one identity as an octad of witnesses (graph, vector, tensor, semantic, document, temporal, provenance, spatial): the graph + document witnesses subsume ArangoDB; the semantic witness subsumes Virtuoso/RDF; built-in drift detection + self-normalisation remove the old two-store synchronisation problem. The eco/econ ontology is kept as the semantic-witness seed at databases/ontology/eco.ttl. ArangoDB + Virtuoso assets were retired (recoverable in git). Runtime client is DEFERRED/GATED — VeriSimDB is v0.1.0 and the AffineScript transport is gated, so the data layer is retargeted in design + config only (config/oikos.yaml, ARCHITECTURE.adoc, .machine_readable/integrations/verisimdb.a2ml)." },
-  { id = "ADR-002", date = "2026-06-19", status = "accepted", title = "Rust analysis workspace builds standalone", detail = "crates/oikosbot-* form the default cargo workspace and build with no dependency on gitbot-fleet. The crates/oikosbot-fleet bridge (targets the fleet's BotId::Sustainabot) is excluded from the default workspace and built on demand only." },
+  { id = "ADR-002", date = "2026-06-19", status = "accepted", title = "Rust analysis workspace builds standalone", detail = "crates/oikosbot-* form the default cargo workspace and build with no dependency on gitbot-fleet. The crates/oikosbot-fleet bridge (publishes under its own BotId::Oikosbot identity; requires a gitbot-fleet providing that variant) is excluded from the default workspace and built on demand only." },
   { id = "ADR-003", date = "2026-05-28", status = "accepted", title = "Bot integration is AffineScript", detail = "The webhook receiver is AffineScript at bot-integration-affine/. The legacy ReScript bot-integration/ was removed 2026-05-28 (oikos#41). No new ReScript / TypeScript / JavaScript." },
   { id = "ADR-004", date = "2026-06-20", status = "accepted", title = "Docs are AsciiDoc; SPDX preserved verbatim", detail = "Documentation uses .adoc except the GitHub community-health .md files (SECURITY / CONTRIBUTING / CODE_OF_CONDUCT / CHANGELOG). No duplicate .md/.adoc basenames. SPDX headers are preserved verbatim across renames; new files are MPL-2.0 from birth; licence drift is flagged, not swept (DR-010: MPL-1.0 / MPL-1.0-or-later rewrite to MPL-2.0 where encountered)." }
 ]
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8d943cf..b50f766 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -34,6 +34,7 @@ this project aims to follow [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 
+- fix(docs): purge stale post-extraction identity references — `SECURITY.md` carried two dead project names (`SustainaBot` ×3 and a `scarcity-bot` GitLab vuln-reporting URL, plus `SCARCITY_API_KEY`), a Ruby example path, and leaked `Memory #N` artifacts; and the `crates/oikosbot-fleet` bridge-identity note in `.claude/CLAUDE.md` + `META.a2ml` ADR-002 still said `BotId::Sustainabot` after the bridge moved to its own `BotId::Oikosbot` identity. (Deeper `SECURITY.md` security-substance — reporting channel, PGP placeholder — flagged for a separate review.)
 - fix(lexer): opt in to logos 0.16 `allow_greedy` for line-comment skip (#37) — `#[logos(skip("--[^\n]*", allow_greedy = true))]` replaces the unbounded greedy attribute that logos 0.16's new lint rejects.
 - fix(codeql): switch language matrix to 'actions' (no JS/TS in repo) (#23)
 - fix(codeql): switch language matrix to 'actions' (no JS/TS in repo) (#22)
diff --git a/SECURITY.md b/SECURITY.md
index 03f3bac..e3c69ce 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -3,7 +3,7 @@ SPDX-License-Identifier: MPL-2.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 # Security Policy
-*SustainaBot* adheres to **Rhodium Standard Repo (RSR)** principles, emphasizing **reversibility, attestation, and minimal attack surfaces**.
+*OikosBot* adheres to **Rhodium Standard Repo (RSR)** principles, emphasizing **reversibility, attestation, and minimal attack surfaces**.
 
 ---
 
@@ -12,7 +12,7 @@ Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 |---------|--------------------|----------------------------------------|
 | 0.x.x   | :white_check_mark: | Only the **latest minor version** receives security updates. |
 
-> **Note**: SustainaBot is in **early development**. Security updates are prioritized for the latest release.
+> **Note**: OikosBot is in **early development**. Security updates are prioritized for the latest release.
 
 ---
 
@@ -20,8 +20,8 @@ Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 **Do not report vulnerabilities publicly** (e.g., GitHub/GitLab Issues).
 Instead, use one of these **private channels**:
 
-1. **GitLab Security Advisories**:
-   [Report a vulnerability](https://gitlab.com/hyperpolymath/scarcity-bot/-/security/advisories/new)
+1. **GitHub Security Advisories**:
+   [Report a vulnerability](https://github.com/hyperpolymath/oikosbot/security/advisories/new)
    *(Preferred for traceability and RSR compliance.)*
 
 2. **Email**:
@@ -35,7 +35,7 @@ Provide **detailed, actionable information**:
 - **Type of issue**:
   - Example: Buffer overflow, XSS, supply chain tampering, or **waste metric spoofing**.
 - **Affected components**:
-  - Source file paths (e.g., `lib/audit/exec.rb`).
+  - Source file paths (e.g., `crates/oikosbot-analysis/src/security.rs`).
   - **Commit hash/tag/branch** or direct URL.
 - **Reproduction steps**:
   - Command-line invocations, config snippets, or **Justfile recipes** used.
@@ -59,7 +59,7 @@ Provide **detailed, actionable information**:
 ## Security Considerations
 
 ### Data Handling
-SustainaBot processes:
+OikosBot processes:
 - **Source code** (for waste analysis).
 - **Dependency graphs** (economic/ecological impact).
 - **CI/CD configurations** (e.g., GitLab pipelines).
@@ -71,12 +71,12 @@ SustainaBot processes:
 - **BOINC Distributed Audits**:
   - Nodes **never store raw repo data**; only **hashed waste metrics** are shared.
 - **Cloud Backups**:
-  - Metadata backed up to **Dropbox/OneDrive/Syncthing/iDrive** (per Memory #3).
-  - Full backups stored on **RAID 10 + Acronis** (per Memory #4).
+  - Metadata backed up to **Dropbox/OneDrive/Syncthing/iDrive**.
+  - Full backups stored on **RAID 10 + Acronis**.
 
 ### Integration Security
 - **Environment Variables**:
   ```bash
   # Example: .env
-  SCARCITY_API_KEY="x"  # Never commit this!
+  OIKOSBOT_API_KEY="x"  # Never commit this!
   GITHUB_TOKEN="y"      # Use GitLab CI variables or encrypted secrets.
