feat: add governance, registry hub stubs, and cli skeleton

Author: Jonathan D.A. Jewell

CHARTER.adoc

@@ -0,0 +1,26 @@
+= OPM Charter
+:revdate: 2026-01-18
+
+== Purpose
+
+OPM exists to deliver a federated, multi-language package manager with formal verification guarantees, a multi-dimensional trust pipeline, and automated ecosystem health monitoring.
+
+== Stewardship Council
+
+The stewardship council safeguards:
+
+- Verification integrity (proven/Idris2)
+- Trust pipeline correctness (checky-monkey, claim-forge, palimpsest-license)
+- Federation neutrality (git-private-farm + Radicle + IPFS)
+- Long-term sustainability (oikos-driven dependency health)
+
+== Principles
+
+- Formal verification by default
+- Local-first, offline-resilient operation
+- Transparent governance and audit trails
+- Federation without monopoly capture
+
+== Scope
+
+OPM orchestrates the existing ecosystem rather than replacing it. The opm CLI provides a unified user experience across trusted services.

crates/opm-cli/Cargo.toml

@@ -0,0 +1,12 @@
+[package]
+name = "opm"
+version = "0.0.1"
+edition = "2021"
+license = "PMPL-1.0"
+description = "Odds-and-sods package manager CLI"
+
+[dependencies]
+clap = { version = "4", features = ["derive"] }
+anyhow = "1"
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"

crates/opm-cli/README.adoc

@@ -0,0 +1,10 @@
+= opm CLI
+:revdate: 2026-01-18
+
+Rust CLI placeholder for the OPM federation.
+
+Subcommands (stub):
+
+- `opm publish <path>`
+- `opm audit <package>`
+- `opm status`

crates/opm-cli/src/main.rs

@@ -0,0 +1,34 @@
+use clap::{Parser, Subcommand};
+
+#[derive(Parser)]
+#[command(name = "opm")]
+#[command(about = "Odds-and-sods package manager", long_about = None)]
+struct Cli {
+    #[command(subcommand)]
+    command: Commands,
+}
+
+#[derive(Subcommand)]
+enum Commands {
+    Publish { path: String },
+    Audit { package: String },
+    Status,
+}
+
+fn main() -> anyhow::Result<()> {
+    let cli = Cli::parse();
+
+    match cli.command {
+        Commands::Publish { path } => {
+            println!("publish pipeline (stub) for {path}");
+        }
+        Commands::Audit { package } => {
+            println!("audit pipeline (stub) for {package}");
+        }
+        Commands::Status => {
+            println!("opm status (stub)");
+        }
+    }
+
+    Ok(())
+}

governance/STEWARDship.adoc

@@ -0,0 +1,14 @@
+= Stewardship
+:revdate: 2026-01-18
+
+== Council
+
+- Establish policy and arbitration for federation disputes
+- Maintain trust pipeline standards
+- Approve changes to verification guarantees
+
+== Voting
+
+- Quorum: 3 maintainers
+- Majority required for policy changes
+- Unanimous required for trust pipeline downgrades

opm-registry-hub/event-handlers/README.adoc

@@ -0,0 +1,10 @@
+= Event Handlers
+:revdate: 2026-01-18
+
+Stub for opm registry event handlers. Expected event types:
+
+- package-published
+- security-advisory
+- deprecation-notice
+- maintainer-change
+- compatibility-break

opm-registry-hub/registry-manifest.json

@@ -0,0 +1,20 @@
+{
+  "name": "opm-registry-hub",
+  "version": "0.0.1",
+  "description": "Primary registry hub for opm federation.",
+  "mirrors": [
+    "github",
+    "gitlab",
+    "codeberg",
+    "corp.io",
+    "uni.edu",
+    "radicle"
+  ],
+  "events": [
+    "package-published",
+    "security-advisory",
+    "deprecation-notice",
+    "maintainer-change",
+    "compatibility-break"
+  ]
+}

opm-registry-hub/trust-pipeline/README.adoc

@@ -0,0 +1,9 @@
+= Trust Pipeline
+:revdate: 2026-01-18
+
+Pipeline stages:
+
+- claim-forge: provenance (GPG + OpenTimestamps)
+- checky-monkey: 8-dimension analysis + CUBS
+- palimpsest-license: license sign/verify/audit
+- oikos: sustainability and health scoring