Merge remote-tracking branch 'origin/main' into chore/item9-rescript-to-affinescript-guidance

# Conflicts:
#	0-ai-gatekeeper-protocol/.github/workflows/rsr-antipattern.yml
#	0-ai-gatekeeper-protocol/.github/workflows/ts-blocker.yml
#	0-ai-gatekeeper-protocol/mcp-repo-guardian/.github/workflows/rsr-antipattern.yml
#	0-ai-gatekeeper-protocol/mcp-repo-guardian/.github/workflows/ts-blocker.yml
#	0-ai-gatekeeper-protocol/repo-guardian-fs/.github/workflows/rsr-antipattern.yml
#	0-ai-gatekeeper-protocol/repo-guardian-fs/.github/workflows/ts-blocker.yml
#	a2ml/.github/workflows/rsr-antipattern.yml
#	a2ml/.github/workflows/ts-blocker.yml
#	a2ml/bindings/deno/.github/workflows/rsr-antipattern.yml
#	a2ml/bindings/deno/.github/workflows/ts-blocker.yml
#	a2ml/bindings/haskell/.github/workflows/rsr-antipattern.yml
#	a2ml/bindings/haskell/.github/workflows/ts-blocker.yml
#	a2ml/bindings/rust/.github/workflows/rsr-antipattern.yml
#	a2ml/bindings/rust/.github/workflows/ts-blocker.yml
#	a2ml/editors/vscode/.github/workflows/rsr-antipattern.yml
#	a2ml/editors/vscode/.github/workflows/ts-blocker.yml
#	a2ml/pandoc/.github/workflows/rsr-antipattern.yml
#	a2ml/pandoc/.github/workflows/ts-blocker.yml
#	consent-aware-http/.github/workflows/rsr-antipattern.yml
#	k9-svc/actions/validate/.github/workflows/rsr-antipattern.yml
#	k9-svc/actions/validate/.github/workflows/ts-blocker.yml
#	k9-svc/bindings/deno/.github/workflows/rsr-antipattern.yml
#	k9-svc/bindings/deno/.github/workflows/ts-blocker.yml
#	k9-svc/bindings/haskell/.github/workflows/rsr-antipattern.yml
#	k9-svc/bindings/haskell/.github/workflows/ts-blocker.yml
#	k9-svc/bindings/rust/.github/workflows/rsr-antipattern.yml
#	k9-svc/bindings/rust/.github/workflows/ts-blocker.yml
#	k9-svc/editors/vscode/.github/workflows/rsr-antipattern.yml
#	k9-svc/editors/vscode/.github/workflows/ts-blocker.yml
#	k9-svc/pandoc/.github/workflows/rsr-antipattern.yml
#	k9-svc/pandoc/.github/workflows/ts-blocker.yml
#	lol/.github/workflows/rsr-antipattern.yml
#	lol/.github/workflows/ts-blocker.yml
#	meta-a2ml/.github/workflows/rsr-antipattern.yml
#	meta-a2ml/.github/workflows/ts-blocker.yml
#	rhodium-standard-repositories/.github/workflows/rsr-antipattern.yml
#	rhodium-standard-repositories/satellites/cccp/.github/workflows/rsr-antipattern.yml
#	rhodium-standard-repositories/satellites/cccp/.github/workflows/ts-blocker.yml
#	rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/rsr-antipattern.yml
#	rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/ts-blocker.yml
#	rhodium-standard-repositories/satellites/consent-aware-http/.github/workflows/rsr-antipattern.yml
#	rhodium-standard-repositories/satellites/consent-aware-http/.github/workflows/ts-blocker.yml
#	rhodium-standard-repositories/satellites/mustfile/.github/workflows/rsr-antipattern.yml
#	rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/rsr-antipattern.yml
#	rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/rsr-antipattern.yml
#	rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/rsr-antipattern.yml
#	rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/ts-blocker.yml
#	rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/rsr-antipattern.yml
#	rhodium-standard-repositories/satellites/state.scm/.github/workflows/rsr-antipattern.yml
#	rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/rsr-antipattern.yml

Author: hyperpolymath

.github/workflows/governance-reusable.yml

@@ -0,0 +1,26 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# governance.yml — single wrapper calling the shared estate governance bundle
+# in hyperpolymath/standards instead of carrying per-repo copies.
+#
+# Replaces the per-repo governance scaffolding removed in the same commit:
+#   quality.yml, guix-nix-policy.yml, npm-bun-blocker.yml, ts-blocker.yml,
+#   security-policy.yml, rsr-antipattern.yml, wellknown-enforcement.yml,
+#   workflow-linter.yml
+#
+# Load-bearing build/security workflows stay standalone in the repo
+# (rust-ci, codeql, dependabot, release, scan/mirror/pages plumbing).
+
+name: Governance
+
+on:
+  push:
+    branches: [main, master]
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  governance:
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@main