DP-001: Restore executable package paths, CI, and public trust baseline

[altmanAI]

Finding

The repository documents and tests an engine.core.* package layout, but the implementation files currently live at the repository root. The CLI and tests therefore import modules that are not present in a clean checkout. The profile test and CLI also resolve engine/profiles paths even though the documented profile JSON files are at the root.

Repository-specific SECURITY.md, .github/CODEOWNERS, and CI workflow files are absent.

Objective

Make the DailyPilot reference engine reproducibly executable and testable while strengthening its public human-first AI engineering baseline.

Scope

• Standardize the current root-module layout across implementation, CLI, tests, and documentation.
• Correct CLI profile resolution and usage instructions.
• Add GitHub Actions CI using only official GitHub actions and the Python standard library plus pytest for tests.
• Add repository-specific security and ownership controls.
• Document capability boundaries and non-goals honestly.

Acceptance criteria

• Imports resolve in a clean repository checkout.
• Profile JSON validation targets the actual repository location.
• The documented CLI command matches the parser.
• CI runs the full test suite on supported Python versions.
• Security reporting and accountable ownership are explicit.
• No claim implies medical, mental-health, legal, financial, or autonomous decision authority.

Authorization

Blake Hunter Altman issued ALL CLEAR FOR IMPACT for the AltmanAI GitHub hardening initiative on July 13, 2026.