Ops: CODEOWNERS for core ops areas

.githooks/commit-msg.ps1

@@ -3,3 +3,4 @@ $c = Get-Content $MsgFile -Raw
 if($c -notmatch "(?m)^BPOE-Dots:"){
   Add-Content $MsgFile "`nBPOE-Dots: encouraged (Run-WithDotsEx)"
 }
+

.githooks/pre-commit.ps1

@@ -7,3 +7,4 @@ if(-not $optin -and ($staged | Where-Object { $_ -like "status/*" -or $_ -eq "RE
   exit 1
 }
 exit 0
+

.githooks/pre-push.ps1

@@ -6,3 +6,4 @@ if(-not $recent){
   Write-Host "[BPOE] No recent dots durations found (last 2h). Consider using Run-WithDotsEx." -ForegroundColor Yellow
 }
 exit 0
+

.github/CODEOWNERS

@@ -1 +1,6 @@
-* @rickballard
+# Require review on core ops areas
+advice/inbox/*                                @rickballard
+tools/*                                       @rickballard
+.github/workflows/*                           @rickballard
+docs/systemization/*                          @rickballard
+docs/bpoe/*                                   @rickballard

.github/ISSUE_TEMPLATE/config.yml

@@ -3,3 +3,4 @@ contact_links:
   - name: Start here (parallel-session prompt)
     url: ../PROMPT_Package_For_Sessions.md
     about: Use this to coordinate 1-hour sprints.
+

.github/ISSUE_TEMPLATE/idea.yml

@@ -19,3 +19,4 @@ body:
       label: Safety
       options:
         - label: I'm not in a cool-down state (or this is just notes).
+

.github/ISSUE_TEMPLATE/launch.md

@@ -5,4 +5,4 @@ about: Steps to flip RickGuard and verify protections
 
 - [ ] Run `rg-off` (keep CoCivium™ Critical).
 - [ ] After launch, if returning to seeding, run `rg-seed`.
-- [ ] Verify CoCivium™ protections (`rg-status`) show **ci/smoke** + **ci/test**, reviews: **1**.
+- [ ] Verify CoCivium™ protections (`rg-status`) show **ci/smoke** + **ci/test**, reviews: **1**.

.github/PULL_REQUEST_TEMPLATE.md

@@ -19,3 +19,4 @@
 
 ## Notes
 <!-- links, references -->
+

.github/workflows/actionlint.yml

@@ -9,3 +9,4 @@ jobs:
       - uses: actions/checkout@v4
       - name: Run actionlint
         uses: rhysd/actionlint@v1
+

.github/workflows/advice-inbox-guard.yml

@@ -4,7 +4,7 @@ on:
     branches: [ "main" ]
     paths:
       - "advice/inbox/**"
-      - ".github/workflows/advice-inbox-guard.yml"
+      - "tools/cosuite/1\\.0/ci/advice-inbox-guard\\.yml"
       - "advice/INBOX_LOG.md"
 
 jobs:
@@ -86,3 +86,4 @@ jobs:
               fi
             fi
           done
+

.github/workflows/auto-add-to-project.yml

@@ -23,3 +23,4 @@ jobs:
           if [ "$EVENT" = "issues" ]; then CONTENT="$ISSUE_NODE"; else CONTENT="$PR_NODE"; fi
           gh api graphql -f query='mutation($project:ID!,$content:ID!){ addProjectV2ItemById(input:{projectId:$project, contentId:$content}){ item { id } } }' -F project="$PROJECT_ID" -F content="$CONTENT"
 
+

.github/workflows/bpoe-append-only.yml

@@ -0,0 +1,20 @@
+name: BPOE Log Append-Only
+on: [pull_request]
+jobs:
+  guard:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with: { fetch-depth: 0 }
+      - name: Enforce append-only for docs/bpoe/BPOE_LOG.md
+        shell: bash
+        run: |
+          set -e
+          file="docs/bpoe/BPOE_LOG.md"
+          if git diff --name-only origin/${{ github.base_ref }}... | grep -qx "$file"; then
+            # Fail if any deletion/modification appears (allow only added lines)
+            if git diff --unified=0 origin/${{ github.base_ref }}... -- "$file" | grep -E '^\-|^@@' | grep -v '^---' ; then
+              echo "::error file=$file::BPOE_LOG.md must be append-only (only added lines allowed)."
+              exit 1
+            fi
+          fi

.github/workflows/bpoe-safety-gate.yml

@@ -1,4 +1,4 @@
-name: bpoe-safety-gate
+name: bpoe-safety-gate
 on:
   workflow_call: {}
 jobs:
@@ -19,3 +19,4 @@ jobs:
           path: .
           base: ${{ github.event.pull_request.base.sha }}
           head: ${{ github.sha }}
+

.github/workflows/bpoe-sanity.yml

@@ -12,3 +12,4 @@ jobs:
         shell: pwsh
         run: ./scripts/ci/BpoeSanity.ps1
 
+

.github/workflows/bpoe-self-evolve.yml

@@ -1,4 +1,4 @@
-name: bpoe-self-evolve
+name: bpoe-self-evolve
 on:
   workflow_call: {}
   schedule:
@@ -40,3 +40,4 @@ jobs:
           else
             echo "Auto-commits disabled; set repo variable ENABLE_AUTOCOMMITS=true to enable."
           fi
+

.github/workflows/bpoe-smoke.yml

@@ -1,4 +1,4 @@
-name: bpoe-smoke
+name: bpoe-smoke
 on:
   workflow_call:
     inputs:
@@ -20,3 +20,4 @@ jobs:
           Import-Module "$PWD/module/BPOE.Autopilot/BPOE.Autopilot.psd1"
           Test-BPOERepoSmoke -Repo $PWD @(if ("${{ inputs.fail_external }}" -eq "true") { "-FailOnExternalLinks" })
 
+

.github/workflows/civium-safety.yml

@@ -19,3 +19,4 @@ jobs:
               echo "BN guard: exact 'Being Noname' not found."; exit 1
             fi
           fi
+

.github/workflows/coindex.yml

@@ -31,3 +31,4 @@ jobs:
         with:
           branch: ${{ github.ref_name }}
           github_token: ${{ secrets.GITHUB_TOKEN }}
+

.github/workflows/congruence.yml

@@ -18,3 +18,4 @@ jobs:
         patterns/**/congruence.json
       write: false
       strict: false
+

.github/workflows/cosync-feed.yml

@@ -20,3 +20,4 @@ jobs:
           if (git diff --cached --quiet) { exit 0 }
           git commit -m "cosync: refresh feed"
           git push
+

.github/workflows/cosync-validate.yml

@@ -18,3 +18,4 @@ jobs:
           path: |
             docs/dashboards/cosync_validation.csv
             docs/intent/COSYNC_GAPS.md
+

.github/workflows/guard-handoff.yml

@@ -20,3 +20,4 @@ jobs:
         run: |
           HL=docs/HANDOFFS/HANDOFF_LATEST.md
           if grep -q '```' "$HL"; then echo "Code fence found in handoff"; exit 1; fi
+

.github/workflows/hygiene.yml

@@ -21,3 +21,4 @@ jobs:
             git commit -m "chore(hygiene): deprecations/purge/size guard"
             git push
           fi
+

.github/workflows/indexer.yml

@@ -25,3 +25,4 @@ jobs:
           git add docs/index_manifest.json docs/METRICS_INDEX.md
           git diff --cached --quiet || git commit -m "indexer: refresh manifest/metrics"
           git push
+

.github/workflows/initiatives-scan.yml

@@ -21,3 +21,4 @@ jobs:
           git add docs/dashboards/initiatives_scan.*
           git commit -m "metrics: refresh initiatives scan" || echo "no changes"
           git push origin HEAD
+

.github/workflows/intake-validate.yml

@@ -28,3 +28,4 @@ jobs:
             }
           }
           if ($errs -gt 0) { throw "Validation failed with $errs error(s)." }
+

.github/workflows/intent-consult.yml

@@ -5,4 +5,4 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Ensure upstream intent is referenced
-        run: echo 'Check for reflexivity...'
+        run: echo 'Check for reflexivity...'

.github/workflows/legacy-guard.yml

@@ -0,0 +1,16 @@
+name: Legacy Paths Guard
+on: [pull_request]
+jobs:
+  guard:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Block legacy tool paths
+        shell: bash
+        run: |
+          set -e
+          CHANGED=$(git diff --name-only origin/main...HEAD || true)
+          if echo "$CHANGED" | grep -E '^tools/(Unpack|Scan|Backfill|New-InboxManifest)\.ps1$|^\.github/workflows/advice-inbox-guard\.yml$' ; then
+            echo "::error ::Legacy tool path changed; use tools/cosuite/1.0/* instead."
+            exit 1
+          fi

.github/workflows/lint-content.yml

@@ -19,3 +19,4 @@ jobs:
             exit 1
           fi
           echo "No emdashes found."
+

.github/workflows/metrics-daily.yml

@@ -24,3 +24,4 @@ jobs:
       - name: Render sparklines (sanity)
         shell: pwsh
         run: ./scripts/render_sparklines.ps1 -HistoryDir "$PWD/metrics/history" -OutDir "$PWD/docs/assets/metrics"
+

.github/workflows/metrics-harvest.yml

@@ -19,3 +19,4 @@ jobs:
       - name: Run harvester (PowerShell)
         shell: pwsh
         run: ./scripts/metrics_harvest.ps1 -Root "$PWD"
+

.github/workflows/metrics-index.yml

@@ -34,4 +34,4 @@ jobs:
             git add docs/METRICS_INDEX.md
             git commit -m "docs(auto): refresh Giant Metrics Index"
             git push
-          fi
+          fi

.github/workflows/oe-status.yml

@@ -34,3 +34,4 @@ jobs:
             git commit -m "CI: update OE/TRUST status (2025-09-04T14:16:36.7416440-04:00)"
             git push
           fi
+

.github/workflows/ops-heartbeat-smoke.yml

@@ -24,3 +24,4 @@ jobs:
         run: |
           ./tools/update-CoSteward.ps1 -CoStewardPath "$PWD/CoSteward" -CoCachePath "$PWD" -Accel 3.0
 
+

.github/workflows/pages.yml

@@ -25,3 +25,4 @@ jobs:
         with: { path: 'sites' }
       - id: deployment
         uses: actions/deploy-pages@v4
+

.github/workflows/readme-lock.yml

@@ -19,3 +19,4 @@ jobs:
           fi
           echo "README not modified."; exit 0
 
+

.github/workflows/readme-smoke.yml

@@ -18,3 +18,4 @@ jobs:
           if [ "$bytes" -lt 500 ] || [ "$lines" -lt 10 ]; then
             echo "README too small (bytes=$bytes, lines=$lines)"; exit 1
           fi
+

.github/workflows/systematization-scan.yml

@@ -20,3 +20,4 @@ jobs:
           if (git diff --cached --quiet) { exit 0 }
           git commit -m "systematization: weekly refresh"
           git push
+

.github/workflows/triage-guard.yml

@@ -24,3 +24,4 @@ jobs:
             if ([string]::IsNullOrWhiteSpace($strm) -or $strm -match '^(?i)TBD$')  { Write-Error "Stream TBD: $($f.FullName)"; $errs++ }
           }
           if ($errs -gt 0) { throw "Triage guard failed: $errs issue(s)." }
+

.github/workflows/va-index.yml

@@ -16,3 +16,4 @@ jobs:
         run: |
           $bad = git ls-files | Where-Object { $_ -match '\.(zip|pdf|md)$' -and $_ -notmatch '_(\d{4}-\d{2}-\d{2}_\d{6})' }
           if($bad){ "Unstamped assets:"; $bad; exit 1 }
+

.github/workflows/zz-smoke-simple.yml

@@ -5,4 +5,4 @@ jobs:
   ping:
     runs-on: ubuntu-latest
     steps:
-      - run: echo "hello from zz-smoke-simple"
+      - run: echo "hello from zz-smoke-simple"

.sops.yaml

@@ -3,3 +3,4 @@ creation_rules:
     age:
       - age1ff2f8ap6enzf3vwmnjdzhqhvq8yvjtctf7xnwh4efdwqqxpvlslqa78hrh
 
+

AdviceBombs/AB-KA-01/AB-KA-01/README_START_HERE.md

@@ -1,3 +1,4 @@
 # CoPayload AB-KA-01 — Insights Scaffold & Harvest Pack
 
 This payload provides an Insights scaffold (paired Thesis⇄OpsBrief) + tools for non-destructive consolidation.
+

AdviceBombs/AB-KA-01/AB-KA-01/run.ps1

@@ -15,4 +15,4 @@ Next steps:
 2) Run Harvest, then Chunk on large sources.
 3) Fill priority pairs: LL, KA, CC, FF, RT.
 "@ | Set-Content -Path $report -Encoding UTF8
-"OK KA $(Get-Date -AsUTC)" | Set-Content -Path $status -Encoding UTF8
+"OK KA $(Get-Date -AsUTC)" | Set-Content -Path $status -Encoding UTF8

AdviceBombs/AB-KA-01/README.md

@@ -2,3 +2,4 @@
 - Zip: ./CoPayload_AB-KA-01_Insights-Scaffold.v1.0.zip
 - Expanded: ./AB-KA-01/
 Run: ./AB-KA-01/run.ps1 (writes only to ./AB-KA-01/out/)
+

AdviceBombs/AB-KA-01/drafts/FF-FinFlow/FF_FinFlow__Concepts-and-Theory.md

@@ -3,3 +3,4 @@ Purpose: transparent resource flows; antifragile budget & treasury mechanics.
 Scope: earmarks vs. commons, incentive-compatible grants, slush bounds.
 Interfaces: CoCache ledger views, AB provisioning, audit trails.
 Open Questions: [fill]
+

AdviceBombs/AB-KA-01/drafts/FF-FinFlow/FF_FinFlow__Implications-and-Advisory.md

@@ -3,3 +3,4 @@ Implementation: envelopes, release conditions, clawback triggers.
 Runbook: request → review → release → telemetry → rebalance.
 KPIs: funding latency, leakage rate, ROI half-life.
 Risks & Mitigations: [fill]
+

AdviceBombs/AB-KA-01/drafts/LL-Lex-Liminalis/LL_Lex-Liminalis__Concepts-and-Theory.md

@@ -3,3 +3,4 @@ Purpose: governance in liminal contexts; norms arbitration in CoCivium™.
 Scope: subsidiarity, reciprocity, proportionality, reversible commitments.
 Interfaces: CoCache indexes, CoCivium™ adjudication, AB lifecycle.
 Open Questions: [fill]
+

AdviceBombs/AB-KA-01/drafts/LL-Lex-Liminalis/LL_Lex-Liminalis__Implications-and-Advisory.md

@@ -3,3 +3,4 @@ Implementation: decision codecs, escalation lattice, traceable exceptions.
 Runbook: incident → deliberation → reversible decision → review.
 KPIs: mean time to resolution, dissent capture rate, rollback half-life.
 Risks & Mitigations: [fill]
+

AdviceBombs/index.yml

@@ -5,3 +5,4 @@
   file: AdviceBombs/AB-KA-01/CoPayload_AB-KA-01_Insights-Scaffold.v1.0.zip
   sha256: "b83866ccd75dea950221ad32971db9c50a5d491ab032884c2db04b7ecbe6938b"
   added_utc: "2025-10-05T09:42:45Z"
+

BN_Canonical_Pull.ps1

@@ -64,3 +64,4 @@ if([string]::IsNullOrWhiteSpace($changed)){
 }
 
 Write-Host "Done: $destRel" -ForegroundColor Green
+

BPOE_RULES.md

@@ -13,3 +13,4 @@
   - `git config core.hooksPath .githooks`
 
 **Rule #5: Prefer HTTPS remotes** for CI/automation unless SSH keys are guaranteed.
+

CC/..CC_Megascroll_SEED.md

@@ -46,3 +46,4 @@ Civility, Clarity, Curiosity, Consent, Credit. Disagree without demeaning; expla
 
 
 - [Genexis](sections/Genexis.md)
+

CC/sections/Genexis.md

@@ -49,3 +49,4 @@ _Last updated: PLACEHOLDER_
 
 
 
+

CoWraps/STACK/Spanky_examples_20251008_004552/README_PLACEMENT.md

@@ -1,3 +1,4 @@
 # CoWrap placement
 Drop-in: CoCache/CoWraps/STACK/Spanky_examples_20251008_004552/
 Source: Spanky_examples_20251008_004552.zip
+

CoWraps/STACK/Spanky_examples_20251008_004552/notes/ASSUMPTIONS.md

@@ -1 +1,2 @@
 - English first (NA/EU/AUS); readers prefer snack-size clarity.
+

CoWraps/STACK/Spanky_examples_20251008_004552/notes/BPOE.md

@@ -2,3 +2,4 @@
 - Idempotent asset generation via scripts; avoid manual edits.
 - SVG sanitized; color variants via hex-swap; PNG fallbacks via ImageMagick.
 - CI/CD to Substack gated by ethics thresholds.
+

CoWraps/STACK/Spanky_examples_20251008_004552/notes/DECISIONS.md

@@ -1,3 +1,4 @@
 - Reframe format: Original → Reframe → Bullets
 - Praise exemplars even if we disagree
 - Hex-swap for SVG recolor (GitHub-safe)
+

CoWraps/STACK/Spanky_examples_20251008_004552/notes/DEPENDENCIES.md

@@ -2,3 +2,4 @@
 - git, gh
 - ImageMagick
 - Substack keys/secrets
+

CoWraps/STACK/Spanky_examples_20251008_004552/notes/DEPRECATED.md

@@ -1 +1,2 @@
 - None recorded.
+

CoWraps/STACK/Spanky_examples_20251008_004552/notes/GLOSSARY.md

@@ -1,2 +1,3 @@
 - WisdomOps: optimizing for wisdom over outrage.
 - CoCivium™ halo: R/A/G/grey congruence cue.
+

CoWraps/STACK/Spanky_examples_20251008_004552/notes/INTENTIONS.md

@@ -1 +1,2 @@
 - (Unfinished) Clarify product scope, cadence, locales, and exemplar rules.
+

CoWraps/STACK/Spanky_examples_20251008_004552/notes/RISKS.md

@@ -1,3 +1,4 @@
 - Automation drift; ethics guardrails.
 - Link rot; Wayback.
 - Overlength; enforce 5–10 min read.
+

CoWraps/STACK/Spanky_examples_20251008_004552/notes/WEBSITE_MANIFEST.md

@@ -1 +1,2 @@
 - RickPublic.com anchors Substack; header uses RP transparent logo and halo strip.
+

CoWraps/STACK/Spanky_examples_20251008_004552/payload/01_INSTRUCTION_BLOCK.md

@@ -73,3 +73,4 @@ Before packaging, re-read from the start and include:
   "status": "_spanky/out.txt",
   "checksums": "_spanky/checksums.json"
 }
+

CoWraps/STACK/Spanky_examples_20251008_004552/payload/forms/notes/DEPRECATED.md

@@ -3,3 +3,4 @@
 - Why dropped: 
 - When dropped: 
 - What it evolved into (if anything):
+

CoWraps/STACK/Spanky_examples_20251008_004552/summaries/ROADMAP_NOTES.md

@@ -1 +1,2 @@
 - Phase 1 Weekly → Phase 2 3×/week → Phase 3 Localize & exemplar network.
+

CoWraps/STACK/Spanky_examples_20251008_004552/summaries/SOURCES.md

@@ -1 +1,2 @@
 - Source: Spanky_Request_Pack_v2_2_2025-10-08.zip
+

CoWraps/STACK/Spanky_examples_20251008_004552/summaries/TLDR.md

@@ -1 +1,2 @@
 - Reframe top stories; expose intent/bias; snack-sized bullets; ethics engine; feedback micro-form.
+