diff --git a/PR_GOVERNANCE_AUDIT.md b/PR_GOVERNANCE_AUDIT.md index c6522ddd6a..98b3d0cf6c 100644 --- a/PR_GOVERNANCE_AUDIT.md +++ b/PR_GOVERNANCE_AUDIT.md @@ -185,7 +185,7 @@ fallback. ## Live Repository Inventory -Live generated: 2026-06-26 KST via GitHub REST/GraphQL APIs. PR #28 post-merge refresh: 2026-06-23 16:05 KST. PR #37 post-merge refresh: 2026-06-23 21:50 KST. clearfolio PR #13 post-merge refresh: 2026-06-24 04:48 KST. Non-actionable Findings refresh: 2026-06-25 KST. PR #58, #65, #66, #68, #71, #79, and #80 post-merge refreshes: 2026-06-25 to 2026-06-26 KST. The 2026-07-02 18:15 KST refresh found 17 public non-fork repositories, adding `kaefa` and `waf-ids-ai-soc` to the prior public non-fork inventory. The public fork inventory still contains 6 repositories. `VibeSec` was not in that target set, and `appguardrail` was. +Live generated: 2026-06-26 KST via GitHub REST/GraphQL APIs. PR #28 post-merge refresh: 2026-06-23 16:05 KST. PR #37 post-merge refresh: 2026-06-23 21:50 KST. clearfolio PR #13 post-merge refresh: 2026-06-24 04:48 KST. Non-actionable Findings refresh: 2026-06-25 KST. PR #58, #65, #66, #68, #71, #79, and #80 post-merge refreshes: 2026-06-25 to 2026-06-26 KST. The 2026-07-02 18:15 KST refresh found 17 public non-fork repositories, adding `kaefa` and `waf-ids-ai-soc` to the prior public non-fork inventory. The public fork inventory contained 6 repositories at that refresh; `vooster-v2-mvp` has since been removed from the organization (see `docs/CWL-MASTER-CONTEXT.md`), leaving 5 in the table below. `VibeSec` was not in that target set, and `appguardrail` was. Continuation snapshot: 2026-06-26 17:53 KST (`2026-06-26T08:53:00Z`). Every public non-fork target repository inherits org ruleset `18156473`, which requires @@ -210,7 +210,7 @@ onboarding exception before relying on autonomous PR queue draining. | Public target repos with repo-local Strix/OpenCode/scheduler copies | `.github` only; this is the central source repository | Retire thick local copies outside `.github`; repository-owned product, release, and security workflows remain separate. | | Public target repos with partial or no local governance workflow footprint | all public non-fork targets outside `.github` | They are still centrally governed by ruleset `18156473`; local absence is not a required-workflow gap. | | Private target repos missing central required workflow onboarding | `xtrmLLMBatchPython` | Treat missing central Strix/OpenCode/scheduler checks as an organization ruleset onboarding gap. Do not bypass review or weaken repository approval rules to drain the queue. | -| Public forks | `argos`, `html4tree`, `nonnest2`, `seedream_evasepic`, `vooster`, `vooster-v2-mvp` | Fork status is not a categorical exclusion; onboarding is an explicit repository decision, and PR mutation remains capability-gated per head. | +| Public forks | `argos`, `html4tree`, `nonnest2`, `seedream_evasepic`, `vooster` | Fork status is not a categorical exclusion; onboarding is an explicit repository decision, and PR mutation remains capability-gated per head. `vooster-v2-mvp` no longer exists in the org (removed) and was dropped from this list; see `docs/CWL-MASTER-CONTEXT.md`. | | Repo | Flow | Default | Auto | Central required workflows | Repo rules/protection | Repo required checks | Stale dismissal | Open PRs | Local workflow footprint | Recent merged actor | |---|---:|---:|---:|---|---|---|---:|---:|---|---| diff --git a/docs/CWL-MASTER-CONTEXT.md b/docs/CWL-MASTER-CONTEXT.md index 2ce09ee89e..a047e4855b 100644 --- a/docs/CWL-MASTER-CONTEXT.md +++ b/docs/CWL-MASTER-CONTEXT.md @@ -37,7 +37,7 @@ Product renames (repo slug → product name; domains purchased): `cwl-idp`→**k - **newsdom-api** — PDF → DOM recognition sidecar (generalized beyond JP newspapers). naruon parses non-PDF formats (html/md/plaintext) into its content_graph. - **scopeweave** — issue/WBS **management** + ITSM Service Request (two-layer: requester ticket ↔ team issues). Consumes issues naruon extracts from email/conversation/ITSR. (Dev-CODE issues stay in GitHub/GitLab — integrate, don't rebuild GitHub.) - **appguardrail** — app security guardrails; collects org security/CI failures + Strix findings as issues. -- Forks (fix UPSTREAM via a very detailed PR in the upstream's language): argos, vooster (+v2), and R pkgs. `xtrmLLMBatchPython` PRIVATE. +- Forks (fix UPSTREAM via a very detailed PR in the upstream's language): argos, vooster, and R pkgs. `vooster-v2-mvp` no longer exists in the org (removed; do not re-add). `xtrmLLMBatchPython` PRIVATE. ## 4. Personas + killer demo - **P1** = the org lead (the user): data architect + data Product Manager + data expert + **AI System Architect**, in an AI business team → needs legal/regulatory (법령) review; uses cloud-erd.app. Expects rigor on data modeling/ERD/schema.