- CODE_OF_CONDUCT.md: add an external escalation fallback chain for
reports that concern the only active Maintainer or where every
listed Maintainer recuses. Routes to the Contributor Covenant
ombudsperson, a future hosting foundation's conduct committee, or
GitHub Trust & Safety — so no report dead-ends.
- SECURITY.md: drop the 'do not encrypt' advice. GHSA is the
preferred channel; email is now framed as an encrypted-only
fallback with explicit GPG / SSH key publication URLs for
reporters who need end-to-end confidentiality.
- SECURITY.md: grammar fix — 'after a new minor is released'.
- CONTRIBUTING.md: replace brittle '777+ tests' with 'the full test
suite'; keep the integration-test exception.
- GOVERNANCE.md: replace placeholder link label with a plain
'release process' label.
- MAINTAINERS.md: drop the contributor shortlist — premature to
name future Maintainer candidates before they've been through the
formal process. Keep the contributor-graph link for transparency.
Adds the governance / contribution / lifecycle documentation required
by aaif.io's Project Lifecycle Policy and their proposal template.
New files:
- GOVERNANCE.md — LF Minimum Viable Governance pattern scoped to the
project's current single-maintainer state, with explicit process for
adding Maintainers, lazy-consensus PR flow, and non-PR decision path
via 'governance'-labeled issues.
- CONTRIBUTING.md — fork/branch naming, Node requirements, local build
+ test expectations, DCO sign-off, PR flow, subsystem cheat-sheet,
step-by-step guidance for adding MCP tools and hooks, release
process summary.
- MAINTAINERS.md — current Maintainer roster (just me for now), an
Emeritus section, and named notable contributors in line for future
Maintainer review.
- ROADMAP.md — 12 months of planned work through Q1 2027, split into
quarterly themes (Depth / Breadth / Trust / v1.0) with shipped /
active / planned / candidate buckets per quarter.
- CODE_OF_CONDUCT.md — Contributor Covenant 2.1 with the enforcement
path pointing at the Maintainer email.
- SECURITY.md — vulnerability reporting flow via GitHub Security
Advisories, supported-version policy, scope, safe-harbor clause,
and a pointer to the .github/security-advisories/ drafts.
- .github/AAIF-PROPOSAL-DRAFT.md — paste-ready answers for every
required field on the aaif/project-proposals issue template,
targeted at Growth Stage entry.
No code changes.
Rohit Ghumare