.github

Account-wide community-health defaults for cplieger repos. GitHub applies these to any repo in the account that does not provide its own copy — so they live here once instead of being duplicated (this repo itself must stay public for the inheritance to work). Precedence: a repo's own file wins, otherwise GitHub falls back to the matching file here.

Inherited defaults (apply to every repo without its own copy):

• CODE_OF_CONDUCT.md — Contributor Covenant v3.0
• CONTRIBUTING.md — contribution + commit conventions
• GOVERNANCE.md — governance model (single maintainer)
• SECURITY.md — private vulnerability reporting
• SUPPORT.md — where to get help
• .github/FUNDING.yml — Sponsor button (placeholder, disabled)
• .github/PULL_REQUEST_TEMPLATE.md
• .github/ISSUE_TEMPLATE/ — bug + feature + question forms and chooser config.yml

Repo-local only (GitHub does not inherit these from .github):

• LICENSE — must live in each repo so it ships in clones/tarballs; the copy here covers this repo only.
• CODEOWNERS — only governs this repo; each repo needs its own.
• README.md — per-repo.

Also here, but outside GitHub's inheritance: the account-wide default docs that each repo's OpenSSF Best Practices entry links to. A repo with specific content overrides them with its own copy (ROADMAP.md in the repo root, docs/assurance-case.md).

• ROADMAP.md — default roadmap for the mature, maintenance-mode projects
• CONTINUITY.md — continuity and access-recovery plan (single-maintainer risk, stated honestly)
• assurance-case.md — default security assurance case

The Renovate preset (default.json) lives in this repo, which is why repos extend github>cplieger/.github. The reusable workflows and lint/format configs live separately in cplieger/ci.

This project was built with AI-assisted tooling using Claude Opus and Kiro. The human maintainer defines architecture, supervises implementation, and makes all final decisions.