Add per-domain failure counters to validation reports

Author: OneFineStarstuff

.github/workflows/governance-artifacts.yml

@@ -0,0 +1,37 @@
+name: Governance Artifact Validation
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+      - master
+
+jobs:
+  validate-governance-artifacts:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+
+      - name: Install dependencies
+        run: python -m pip install -r requirements-governance.txt pytest
+
+      - name: Validate BBOM/ARRE artifacts
+        run: python tools/validate_ai_governance_artifacts.py --report-file .reports/governance-validation.json
+
+      - name: Run validator tests
+        run: pytest -q tests/test_governance_validator.py
+
+      - name: Upload governance validation report
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: governance-validation-report
+          path: .reports/governance-validation.json
+          if-no-files-found: ignore