Description
The repository is public. The branch ruleset gates the single ci-success aggregator so the job list can change without a branch-protection edit.
Acceptance Criteria
- #1 Repository is public with a description, topics and the docs link set
- #2 A branch ruleset on main requires the ci-success check
- #3 Renovate is enabled and its justfile custom manager picks up the pinned tool versions
- #4 Scorecard runs and its badge resolves
- #5 Nothing transcript-shaped is in the history; the fixture guard is green on a fresh clone
Definition of Done
- #1 just check passes: fmt-check, lint, build, test-short, probe-ci, dashboard-check and docs-links all clean
Implementation Plan
Wave 1 lane 11: root creates additive OpenBao/GitHub release plumbing from live sibling shape, wires shared workflows and repository settings, then proves the release broker mint step and release PR.
Final Summary
Repository metadata, main ruleset, Renovate, Scorecard, and transcript-history guard are configured and green on hosted checks.