Bump commit-check-action and expand README

.github/workflows/human-commit-ownership.yml

@@ -16,12 +16,12 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v7.0.1
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
 
       - name: Check commit attribution
-        uses: commit-check/commit-check-action@bbb6580f01838e475563514f115ec7ef41c9ddc7 # v2.11.1
+        uses: commit-check/commit-check-action@d109324148a73dc758891d1d85924c912dbfd38b # v2.12.0
         env:
           CCHK_AI_ATTRIBUTION: "forbid"
           CCHK_CONVENTIONAL_COMMITS: "false"
@@ -40,9 +40,9 @@ jobs:
           job-summary: true
           pr-comments: false
 
-      # commit-check v2.11.1 misses space-separated model names such as
-      # "Claude Opus 5 (1M context)"; anchor on AI noreply emails and
-      # tool-name-plus-version trailers until fixed upstream.
+      # commit-check 2.12.2 now detects space-separated model names such as
+      # "Claude Fable 5 (1M context)", but only for claude/gpt/gemini in
+      # Co-authored-by. Keep covering Assisted-by and the other tool names.
       - name: Check AI attribution in trailers (supplemental)
         shell: bash
         run: |

README.md

@@ -1,2 +1,28 @@
 # .github
-Shared organization workflows and policies
+
+Organization-level defaults for [evolution-gaming](https://github.com/evolution-gaming). Files here
+apply to every repository in the organization that does not define its own.
+
+## Contents
+
+| File | Purpose |
+| --- | --- |
+| [AI_POLICY.md](AI_POLICY.md) | AI Contribution Policy — AI may assist, a human owns every commit. |
+| [CONTRIBUTING.md](CONTRIBUTING.md) | Default contributing guide, shown when opening issues and pull requests. |
+| [.github/workflows/human-commit-ownership.yml](.github/workflows/human-commit-ownership.yml) | "AI Policy Check" — fails a pull request whose commits list an AI tool as author or co-author. |
+
+GitHub picks up `CONTRIBUTING.md` automatically for repositories without their own copy. Workflows are
+not inherited: copy `human-commit-ownership.yml` into a repository to enable the check there.
+
+## Enabling the AI Policy Check
+
+1. Copy `.github/workflows/human-commit-ownership.yml` into the target repository.
+2. Mark **AI Policy Check** as a required status check in branch protection or a ruleset.
+
+Contributors who hit the check should drop the offending trailer (`git rebase -i` or
+`git commit --amend`) and force-push.
+
+## Changes
+
+Open a pull request. Policy changes affect every repository in the organization, so keep them small and
+explain the reasoning.