Skip to content

feat(governance): add community control plane - #6

Merged
srpatcha merged 4 commits into
masterfrom
governance/community-control-plane
Sep 12, 2026
Merged

srpatcha merged 4 commits into
masterfrom
governance/community-control-plane

Conversation

@srpatcha

@srpatcha srpatcha commented Sep 10, 2026

Copy link
Copy Markdown
Member

Closing issue

Fixes #5

Summary

  • Add the authoritative 26-repository registry, schema, and exact dependabot[bot] allowlist.
  • Replace inherited issue and pull-request templates with actionable forms and a mandatory same-repository closing-issue contract.
  • Add a fail-closed GraphQL validator plus read-only reusable/local workflow templates that never check out pull-request code.
  • Add six standard Wiki templates and dry-run-first audit/generator tooling that refuses divergent overwrites.
  • Add focused registry, YAML, workflow-security, generator, and validator tests.

Validation

  • python -m unittest discover -s tests/community -v: 18 passed.
  • python -m py_compile scripts/validate_linked_issue.py scripts/community_governance.py: passed.
  • Parsed all repository workflow YAML with PyYAML: 9 files.
  • Task-owned Markdown passes markdownlint-cli.
  • git diff origin/master..HEAD --check: passed.
  • Mandatory change validation: no errors.
  • Independent review after one warning fix: no error- or warning-level findings.
  • GitHub Community governance tests, CI — .github / build-and-test, and CI — .github / security-scan passed on final head 92cb596c773496ec4df76717e8acf0e6b7700f73.

Safety and rollout

This is a draft control-plane PR only. It does not merge, enable required checks, write default branches, mutate product repositories, publish Wikis, or create Projects. Generated downstream callers require this policy's immutable commit SHA. ProjectV2 identities remain null until inventory is run with read:project scope; the tooling reports that blocker instead of guessing.

Existing repository-wide check-canon, markdownlint, and offline-link checks remain red on frozen audit-2026-05 content. The final logs contain no task-owned Markdown failures; the canonical-content issue is already isolated in draft PR #2.

srpatcha and others added 4 commits September 10, 2026 15:52
Add the authoritative 26-repository registry, inherited community templates, exact trusted-bot allowlist, secure same-repository issue validation, Wiki sources, dry-run-first rollout tooling, and focused tests.

Tests: python -m unittest discover -s tests/community -v (18 passed)

Tracking: #5
Wrap new governance documentation to the repository lint limit and make source Wiki links resolvable by offline link checking.

Tests: 18 community tests pass; markdownlint passes for task-owned Markdown.
@srpatcha
srpatcha marked this pull request as ready for review September 12, 2026 00:58
@srpatcha
srpatcha merged commit 186aef0 into master Sep 12, 2026
3 of 6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

chore: establish the community governance control plane

1 participant