chore: estate sweep — governance, licenses, mise config (unpushed main commits → PR)

[hyperpolymath]

What

Estate housekeeping sweep — governance, licensing, and toolchain-config files that were sitting as unpushed commits directly on local main (committed 2026-07-18). Moved onto a branch and offered as a PR rather than pushed straight to main.

Three commits (cherry-picked clean onto origin/main, no merge-commit noise):

• sweep2 — mise.toml (toolchain config, +57)
• sweep3 — LICENSES/AGPL-3.0-or-later.txt (+661), LICENSES/CC-BY-SA-4.0.txt, LICENSES/MPL-2.0.txt — SPDX license texts
• sweep4 — ARCHITECTURE.md, GOVERNANCE.md, MAINTAINERS, .github/funding.yml (the "C-A-G-M" community-health files)

Net: 8 files, +1240 / −110.

Why a PR (not a push to main)

These were real, substantive commits that only existed on one local checkout — never on the remote. Rather than fast-forward main directly (against estate policy), this routes them through CI + review so the governance/licensing content lands the same way everything else does.

Verification

• Branch cherry-picked from origin/main; net diff is byte-identical to the pre-existing local main content (no content added or lost in the transfer).
• Commits are SSH-signed (%G? = G).
• Draft until CI is green and you've eyeballed the license texts.

🤖 Generated with Claude Code

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

🔍 Hypatia Security Scan

Findings: 68 issues detected

Severity	Count
🔴 Critical	1
🟠 High	37
🟡 Medium	30

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Issue in scorecard.yml",
    "type": "missing_workflow",
    "file": "scorecard.yml",
    "action": "create",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in boj-build.yml",
    "type": "missing_timeout_minutes",
    "file": "boj-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "missing_timeout_minutes",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence