.github

Account-wide community-health defaults for cplieger repos. GitHub applies these to any repo in the account that does not provide its own copy, so they live here once (this repo itself must stay public for the inheritance to work). Precedence: a repo's own file wins, otherwise GitHub falls back to the matching file here.

Inherited defaults (apply to every repo without its own copy):

• CODE_OF_CONDUCT.md: Contributor Covenant v3.0
• CONTRIBUTING.md: contribution + commit conventions
• GOVERNANCE.md: governance model (single maintainer)
• SECURITY.md: private vulnerability reporting
• SUPPORT.md: where to get help
• .github/FUNDING.yml: Sponsor button (placeholder, disabled)
• .github/PULL_REQUEST_TEMPLATE.md
• .github/ISSUE_TEMPLATE/: bug + feature + question forms and chooser config.yml

Repo-local only (GitHub does not inherit these from .github):

• LICENSE: must live in each repo so it ships in clones/tarballs; the copy here covers this repo only.
• CODEOWNERS: only governs this repo; each repo needs its own.
• README.md: per-repo.

Also here, but outside GitHub's inheritance: the account-wide default docs that each repo's OpenSSF Best Practices entry links to. A repo with specific content overrides them with its own copy (ROADMAP.md in the repo root, docs/assurance-case.md).

• ROADMAP.md: default roadmap for the mature, maintenance-mode projects
• CONTINUITY.md: continuity and access-recovery plan (single-maintainer risk, stated honestly)
• assurance-case.md: default security assurance case

The Renovate preset (default.json) lives in this repo, which is why repos extend github>cplieger/.github; org-inherited-config.json makes Renovate apply the same preset account-wide through its inherited-config mechanism. The reusable workflows and lint/format configs live separately in cplieger/ci.

This project was built with AI-assisted tooling using Claude, GPT, and Kiro. The human maintainer defines architecture, supervises implementation, and makes all final decisions.