fix(installer): resolve F-08 implicit enrollment

Author: Aitomates

.github/workflows/autopilot-org-installer.yml

@@ -64,7 +64,7 @@ jobs:
               if [ -n "${existing}" ]; then
                 gh issue comment -R ${ORG}/${repo} "${existing}" -b "${body}"
               else
-                gh issue create -R ${ORG}/${repo} -t "Autopilot intake not installed" -b "${body}" -l "autofix,queued,docs"
+                gh issue create -R ${ORG}/${repo} -t "Autopilot opt-in available" -b "${body}"
               fi
               continue
             fi

memory/examples/20260610_f08_opt-in-notice.md

@@ -0,0 +1,8 @@
+# F-08 non-actionable opt-in notice
+
+Issue Description: The installer queued an autofix issue in repositories that had not opted in.
+State: A notification issue itself satisfied the operator execution gate.
+Action: Changed the pre-opt-in notice to an unlabeled informational issue.
+Result: Non-opted-in repositories cannot be enrolled through an automated issue side effect.
+Diff Patch: Removed actionable labels and clarified the notice title.
+Rationale: Enrollment must be an explicit repository-owner decision.

tests/contract-tests.ps1

@@ -12,6 +12,7 @@ function Assert-NotContains {
 
 $operator = Get-Content -Raw "scripts/autopilot-operator.ps1"
 $workflow = Get-Content -Raw ".github/workflows/autopilot-operator.yml"
+$installer = Get-Content -Raw ".github/workflows/autopilot-org-installer.yml"
 
 Assert-Contains $operator 'label:autofix label:queued' "Operator must require autofix and queued labels."
 Assert-NotContains $operator 'no:label' "Operator must not execute unlabeled issues."
@@ -22,4 +23,6 @@ Assert-Contains $operator 'ALLOW_UNVERIFIED' "Operator must enforce verification
 Assert-Contains $workflow 'secrets\.ORG_AUTOPILOT_TOKEN' "Workflow must use an explicit org mutation token."
 Assert-NotContains $workflow 'GH_TOKEN: \$\{\{ secrets\.GITHUB_TOKEN \}\}' "Workflow must not use repository token for org mutations."
 
+Assert-NotContains $installer 'autofix,queued,docs' "Installer must not queue automation before repository opt-in."
+
 Write-Host "Control-plane contract tests passed."