Remove retired PR Governance gate

[Copilot]

Canonical issue

Issue linking is handled by the PR metadata.

Outcome

Retires the unwanted PR Governance gate so PRs and Dependabot auto-merge no longer wait on checks that will never report.

Scope

• Included:
  • Deleted pr-governance.yml and its workflow unit test.
  • Removed PR Governance / Canonical issue and evidence from Dependabot required checks.
  • Updated merge policy and workflow docs to treat binding as policy-level only.
• Explicitly excluded:
  • PR template changes.
  • Historical runbook edits.

Risk

• Risk level: low
• Failure mode: a stale reference could keep another gate waiting on removed checks.
• Rollback: restore the deleted workflow/test and re-add both check names to the Dependabot gate and policy docs.

Verification

• Focused tests: pytest tests/unit/test_dependabot_automation_workflow.py -q --no-cov
• Required CI
• Review threads resolved

Additional checks:

• Reference grep leaves only the allowed historical runbook hit.
• All remaining .github/workflows/*.yml parse with PyYAML.

Production evidence

Not applicable. This removes a GitHub Actions governance workflow and stale references; no runtime deployment path changes.

Agent handoff

• One canonical issue is linked
• No competing PR implements the same issue
• Acceptance criteria are satisfied
• Required checks pass on the current head
• Human decision is requested only for product, security, irreversible infrastructure, or production approval

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
v0-uvai	Ready	Preview, v0	Sep 8, 2026 4:50am UTC

[vercel]

Duplicated ## Agent completion enforcement and ## Repository governance workflows headings garbled the markdown in AUDIT.md

[github-actions]

🔍 PR Validation

⚠️ PR title should follow conventional commits format
⚠️ Large PR detected (545 lines changed)

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 41fe393.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

Scanned Files

• .github/workflows/pr-governance.yml

[Copilot]

🟡 Changes recommended

The audit document introduces two pairs of duplicate section headings.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Retires the PR Governance workflow and synchronizes Dependabot automation, tests, and policy documentation.

Changes:

• Deletes the governance workflow and its tests.
• Removes retired checks from Dependabot’s merge gate.
• Documents issue binding as policy-only.

File summaries

File	Description
.github/workflows/pr-governance.yml	Removes the retired workflow.
tests/unit/test_pr_governance_workflow.py	Removes obsolete tests.
.github/workflows/dependabot-auto-merge.yml	Drops retired required checks.
tests/unit/test_dependabot_automation_workflow.py	Updates merge-gate expectations.
MERGE_POLICY.md	Makes binding policy-only.
.jules/agent_orchestration_sop.md	Removes obsolete gate guidance.
.github/workflows/README.md	Updates workflow documentation.
.github/workflows/AUDIT.md	Updates governance audit history.

Review details

Suppressed comments (1)

.github/workflows/AUDIT.md:70

• This duplicates the existing Repository governance workflows heading on the next line, creating another empty section in the rendered audit. Keep only one heading.

## Repository governance workflows

• Files reviewed: 8/8 changed files
• Comments generated: 1
• Review effort level: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.