chore(governance): install repo baseline

[ArchonVII]

Summary

• Installs the ArchonVII governance baseline for this repository: AGENTS/Claude/Gemini pointers, lifecycle scripts, doc-sweep files, hooks, CODEOWNERS, Dependabot, PR template, check-map, and update log.
• Documents that github-workflows owns reusable workflow bodies and examples while generated-repo lifecycle baselines remain sourced from repo-template and installed through archon-setup.
• Fixes examples/minimal-ci.yml command quoting so the examples pass actionlint YAML parsing.

Verification

• npm test

  command: npm test
  location: local
  result: passed 122/122
  timestamp: 2026-06-11T17:41:17.5075008-05:00
  

• node C:\GitHub\archon-setup\bin\onboard.mjs C:\GitHub\github-workflows-38-governance-baseline --audit --json

  command: node C:\GitHub\archon-setup\bin\onboard.mjs C:\GitHub\github-workflows-38-governance-baseline --audit --json
  location: local
  result: passed; 31 present / 0 missing / 5 drifted; startup complete, remaining drift adjudicated in docs/repo-update-log.md
  timestamp: 2026-06-11T17:41:17.5075008-05:00
  

• hook self-tests and shell syntax checks

  command: C:\Program Files\Git\bin\bash.exe .githooks/scripts/install-githooks.sh; C:\Program Files\Git\bin\bash.exe .githooks/scripts/test-owner-maintenance.sh; C:\Program Files\Git\bin\bash.exe .githooks/scripts/test-checkout-role.sh; C:\Program Files\Git\bin\bash.exe -lc "bash -n .githooks/commit-msg .githooks/pre-commit .githooks/scripts/*.sh"
  location: local
  result: passed
  timestamp: 2026-06-11T17:41:17.5075008-05:00
  

• actionlint across workflows and examples

  command: C:\Users\josep\go\bin\actionlint.exe .github/workflows/*.yml examples/*.yml
  location: local
  result: passed
  timestamp: 2026-06-11T17:41:17.5075008-05:00
  

• git diff --check

  command: git diff --check
  location: local
  result: passed
  timestamp: 2026-06-11T17:41:17.5075008-05:00
  

Verification Notes

The onboarding audit now reports zero missing baseline files and complete startup readiness. The remaining drift is intentional: README.md is the workflow catalog, AGENTS.md contains this repo's source-boundary contract, docs/repo-update-log.md is this repo's operational ledger, CHANGELOG.md uses fragment-mode release notes, and .github/workflows/actionlint.yml is the reusable workflow body rather than the consumer caller.

Docs / Changelog

Added .changelog/unreleased/38-governance-baseline.md and docs/repo-update-log.md; README and AGENTS now point maintainers to the governance baseline and source-of-truth boundaries.

Plan/status artifacts: not applicable because no repo-facing plan/status artifact was created or used by this lane.

Linked Issue

Closes #38

Risks

• Risk level: Medium because this installs broad governance files into a workflow provider repo.
• Rollback: Revert commit 10eeafc.
• Follow-ups: Refresh the archon-setup github-workflows snapshot after this merges.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 10eeafcfe0

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Make installed hooks executable

In this commit the hook entrypoints under .githooks/ are stored with mode 100644, so after core.hooksPath is set Git still ignores them instead of enforcing the new checkout-role and commit-message policies. I checked this repo with git hook run pre-commit, and Git reported: hint: The '.githooks/pre-commit' hook was ignored because it's not set as executable. Mark the hook entrypoints executable in the tree so the installed baseline actually runs on Unix clients.

Useful? React with 👍 / 👎.