diff --git a/.github/workflows/main-estate-audit.yml b/.github/workflows/main-estate-audit.yml
new file mode 100755
index 0000000..1280471
--- /dev/null
+++ b/.github/workflows/main-estate-audit.yml
@@ -0,0 +1,95 @@
+name: Central Estate CI/CD Audit
+
+permissions:
+  contents: read
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+  estate-audit:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      
+      - name: Required Files Gate
+        uses: hyperpolymath/cicd-suite/actions/required-files-check@main
+        
+      - name: Code Hygiene Gate
+        uses: hyperpolymath/cicd-suite/actions/code-hygiene-check@main
+        
+      - name: Manifest Validation Gate
+        uses: hyperpolymath/cicd-suite/actions/manifest-check@main
+        
+      - name: Idris2 ABI Purity Gate
+        uses: hyperpolymath/cicd-suite/actions/idris2-abi-check@main
+        
+      - name: Zig Hexadeca API Gate
+        uses: hyperpolymath/cicd-suite/actions/zig-hexadeca-check@main
+        
+      - name: Contractile Validation Gate
+        uses: hyperpolymath/cicd-suite/actions/contractile-validation-check@main
+        
+      - name: Recipes Set Validation Gate
+        uses: hyperpolymath/cicd-suite/actions/recipes-set-check@main
+        
+      - name: Affirmation Document Gate
+        uses: hyperpolymath/cicd-suite/actions/affirmation-check@main
+        
+      - name: Academic Referencing Gate
+        uses: hyperpolymath/cicd-suite/actions/referencing-check@main
+        
+      - name: Semantic Audit Gate
+        uses: hyperpolymath/cicd-suite/actions/semantic-audit-check@main
+        
+      - name: SPDX License Gate
+        uses: hyperpolymath/cicd-suite/actions/spdx-license-check@main
+        
+      - name: Proof Runner Gate
+        uses: hyperpolymath/cicd-suite/actions/proof-runner-check@main
+        
+      - name: PRAT Testing Gate
+        uses: hyperpolymath/cicd-suite/actions/prat-check@main
+        
+      - name: Panic Attack & Pons Gate
+        uses: hyperpolymath/cicd-suite/actions/custom-tools-check@main
+        
+      - name: WWW & Well-Known Compliance Gate
+        uses: hyperpolymath/cicd-suite/actions/www-compliance-check@main
+        
+      - name: BoJ Cartridge Validation Gate
+        uses: hyperpolymath/cicd-suite/actions/boj-cartridge-check@main
+        
+      - name: Formatting Validation Gate
+        uses: hyperpolymath/cicd-suite/actions/formatting-check@main
+        
+      - name: Accreditations & Badges Gate
+        uses: hyperpolymath/cicd-suite/actions/badges-check@main
+        
+      - name: Metrics Extraction Gate
+        uses: hyperpolymath/cicd-suite/actions/metrics-check@main
+        
+      - name: Linguist & Banned Languages Gate
+        uses: hyperpolymath/cicd-suite/actions/linguist-check@main
+        
+      - name: Test & Benchmarks Dashboard Gate
+        uses: hyperpolymath/cicd-suite/actions/tests-benches-check@main
+        
+      - name: Hosting & Site Status Gate
+        uses: hyperpolymath/cicd-suite/actions/hosting-check@main
+        
+      - name: Git-Sea Analytics Gate
+        uses: hyperpolymath/cicd-suite/actions/gitsea-check@main
+        
+      - name: Trust & Humans Validation Gate
+        uses: hyperpolymath/cicd-suite/actions/trust-humans-check@main
+        
+      - name: Are We UnAPI Gate (Secret Scanning)
+        uses: hyperpolymath/cicd-suite/actions/secrets-check@main
+        
+      - name: Reasonably Good Token Validation Gate
+        uses: hyperpolymath/cicd-suite/actions/vaulted-tokens-check@main
diff --git a/.github/workflows/push-email-notify.yml b/.github/workflows/push-email-notify.yml
index 8d1f093..205c896 100644
--- a/.github/workflows/push-email-notify.yml
+++ b/.github/workflows/push-email-notify.yml
@@ -31,6 +31,7 @@ concurrency:
   group: push-email-${{ github.run_id }}
   cancel-in-progress: false
 permissions:
+  actions: read
   contents: read
 jobs:
   notify:
diff --git a/.mise.toml b/.mise.toml
new file mode 100644
index 0000000..c4592a6
--- /dev/null
+++ b/.mise.toml
@@ -0,0 +1,8 @@
+[tools]
+# = "SPDX-License-Identifier: MPL-2.0 OR AGPL-3.0-or-later"
+# = "asdf/mise tool versions for vext"
+# = "See: https://asdf-vm.com/"
+rust = "1.83.0"
+deno = "2.1.4"
+just = "1.36.0"
+nickel = "1.8.0"
diff --git a/.tool-versions b/.tool-versions
deleted file mode 100644
index fb59f48..0000000
--- a/.tool-versions
+++ /dev/null
@@ -1,8 +0,0 @@
-# SPDX-License-Identifier: MPL-2.0 OR AGPL-3.0-or-later
-# asdf/mise tool versions for vext
-# See: https://asdf-vm.com/
-
-rust 1.83.0
-deno 2.1.4
-just 1.36.0
-nickel 1.8.0