Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions ARCHITECTURE.md
Original file line number Diff line number Diff line change
Expand Up @@ -102,6 +102,8 @@ tests pin workflow structure and governance prose so drift fails closed.
ecosystem.
- [`docs/agent-github-project-protocol.md`](docs/agent-github-project-protocol.md)
— Project #1 operation.
- [`docs/pr-review-and-merge-procedure.md`](docs/pr-review-and-merge-procedure.md)
— bot/agent exact-head review and merge procedure.
- [`PR_GOVERNANCE_AUDIT.md`](PR_GOVERNANCE_AUDIT.md) — live review/merge
contract.
- [`docs/doctoring/hourly-nvidia-nim-autofix.md`](docs/doctoring/hourly-nvidia-nim-autofix.md)
Expand Down
1 change: 1 addition & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -55,6 +55,7 @@ Semantic Versioning where the repository publishes a release.

### Documentation

- Rewrote the root README for org operators and sibling-repo maintainers: org profile plus central required workflows, standalone run, and how siblings consume ruleset `18156473` without copying workflow files. Moved bot/agent PR-review procedure to `docs/pr-review-and-merge-procedure.md` and retargeted the Strix quality-gate prose contract to that file.
- Added an APA 7 doctoring record for conflict-control evidence isolation, including the Strix-reported trust-boundary failure, test-first remediation, canonical-path rule, operator contract, rollback, MITRE CWE-22, and current GitHub Actions secure-use guidance.
- Added operator and APA 7 doctoring records for the hourly cadence, immutable source identity, NVIDIA NIM provider and secret boundary, high-reasoning Mistral Small 4 writer, model-process credential isolation, modular MSA ownership, product-specific caller activation, verification contract, and rollback.
- Added DiskSage operational documentation for the hourly RCA loop, bounded retry cadence, permission model, standalone and MSA reuse, verification, rollback, and APA 7 references.
Expand Down
7 changes: 4 additions & 3 deletions CLAUDE.md
Original file line number Diff line number Diff line change
Expand Up @@ -25,8 +25,9 @@ This is the ContextualWisdomLab **organization-wide `.github` special repository
An organization required-workflow ruleset (`CWL Central required workflows`, id `18156473`) runs
Strix, OpenCode Review, and the PR Review Merge Scheduler from this repo in each target
repository's context. Repository-local copies of these workflows are drift sources, not
repo-specific contracts. See `README.md` (policy summary) and `PR_GOVERNANCE_AUDIT.md`
(live audit + per-repo DX/UX transfer decisions).
repo-specific contracts. See `README.md` (operator overview),
`docs/pr-review-and-merge-procedure.md` (bot/agent procedure), and
`PR_GOVERNANCE_AUDIT.md` (live audit + per-repo DX/UX transfer decisions).
3. **Infrastructure as code** — `infra/cloudflare/` manages the org's DNS zones and Cloudflare Pages
hosting declaratively (`zones.json` + `reconcile.sh`, curl + jq only; dry-run by default, writes
only on explicit manual `mode = apply`).
Expand All @@ -44,7 +45,7 @@ PRs repair guidance. A separate edit-capable autofix flow
approved same-repository-head PR, merge the base into the head and resolve the conflict markers; the
resulting head is fully re-reviewed and re-checked before it can merge, so a wrong resolution cannot
merge unreviewed. Old approvals and old checks are not merge evidence after the head SHA changes.
Details: `README.md` and `PR_GOVERNANCE_AUDIT.md`.
Details: `docs/pr-review-and-merge-procedure.md` and `PR_GOVERNANCE_AUDIT.md`.

## Structure

Expand Down
6 changes: 6 additions & 0 deletions PR_GOVERNANCE_AUDIT.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,12 @@ Live check: 2026-06-26 17:53 KST, GitHub API via `gh` as `seonghobae`.

OpenCode decides; GitHub Actions mutates.

Bot and agent operating procedure (PR stacking, successor heads, exact-head
CI, do-not-merge / `DIRTY`–`CONFLICTING` repair, writer boundaries, and the
approve-gate) lives in
[docs/pr-review-and-merge-procedure.md](docs/pr-review-and-merge-procedure.md).
The root [README.md](README.md) is the buyer/operator overview.

- The canonical implementation belongs in `ContextualWisdomLab/.github`.
Repository-local copies of the scheduler, OpenCode review workflow, Strix
gate, or helper scripts are drift sources, not repo-specific contracts.
Expand Down
Loading
Loading