📖 [Docs]: Organization-wide community defaults established by MariusStorhaug · Pull Request #2 · MSXOrg/.github

Marius Storhaug (MariusStorhaug) · 2026-08-28T20:03:35Z

MSX repositories without repository-local community health files gain consistent organization-wide fallback guidance while local files remain the authoritative enforcement surface.

New: Organization-wide community guidance

Repositories without their own conduct, contribution, security, or support policy receive a default from the public MSXOrg/.github repository. The code of conduct uses the complete Contributor Covenant 3.0 text and routes private conduct reports to support@msx.no. Contribution guidance links to the MSX agent plugin marketplace.

Changed: Security concerns use one private route

Vulnerabilities, accidentally exposed sensitive information, exposed credentials, exposed secrets, and weak or unsafe security controls are reported through the affected repository's private vulnerability reporting or, when unavailable, security@msx.no. Private support matters use support@msx.no.

Changed: Agent context is repository-addressable

The agent router leads with precedence and freshness, identifies MSXOrg/docs and private MSXOrg/memory, links documentation entry points, and names ~/.msxorg/ as the preferred local clone root without prescribing an access tool.

Changed: Repository governance

The special organization repository explains its fallback role and carries the applicable MSX ownership, dependency, pull-request, and agent-routing baseline. Its public prose is evergreen, declarative, and written in simple en-US.

Technical details

Implementation plan progress: the repository baseline, four community health defaults, and targeted validation are complete.
Validation: the required inventory is exact, excluded template/profile surfaces are absent, placeholder scans are clean, Markdown reports zero issues, YAML parses and lints, committed text is LF-normalized, links resolve, GitHub resolves every head-branch path, and CODEOWNERS reports no errors.
The code of conduct preserves the upstream Contributor Covenant 3.0 content after replacing its reporting placeholder with support@msx.no, removing its authoring note, and normalizing section spacing to one empty line.
The root LICENSE is intentionally absent by maintainer direction. This is an explicit exception to the generic Repository Standard baseline; the Contributor Covenant retains its file-specific CC BY-SA 4.0 attribution.
Align agent context paths with organization repositories docs#191 tracks the canonical Agentic Development and bootstrap migration from ~/.msx/ to repository-addressable organization roots.
GitHub's community-profile API reports only the default branch for this repository, so fallback recognition becomes externally observable after merge; the head-branch contents and documented supported paths are verified.
Standards alignment:

Changed surface	Standards checked	Framework docs checked	Result
Repository baseline	Repository Standard, Organization Standard, Natural Language, Markdown, YAML	Agentic Development client behavior	Exception — root license omitted by maintainer direction; clone-path migration tracked in MSXOrg/docs#191
Community health defaults	Organization Standard, Contribution Workflow, Issues, PR Format, Review Etiquette	GitHub default community health file behavior, Contributor Covenant 3.0, MSX plugin marketplace	Aligned

Issue convergence sweep: the branch is scoped only to Establish organization-wide community defaults #1; no additional issue is fully delivered.

Relevant issues (or links)

Resolves Establish organization-wide community defaults #1

Related work

Copilot

Pull request overview

Establishes MSXOrg/.github as the organization-wide fallback source for GitHub community health files (code of conduct, contributing, security, support) and documents how precedence/enforcement works when repositories also provide local copies.

Changes:

Updates the repository README to explain GitHub’s special .github fallback behavior, public-visibility requirement, and local-file precedence.
Adds organization-wide default community health files under .github/ (CODE_OF_CONDUCT, CONTRIBUTING, SECURITY, SUPPORT) plus a PR template.
Adds baseline repository governance/config surfaces (LICENSE, AGENTS.md, CODEOWNERS, dependabot, .gitattributes, .gitignore, and agent/client routing files).

Reviewed changes

Copilot reviewed 13 out of 14 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
README.md	Documents the repository’s role as the org-wide community-health fallback and precedence rules.
LICENSE	Adds MIT license for the repository baseline.
AGENTS.md	Defines agent instruction routing order for this repository.
.gitignore	Adds common OS/editor ignore patterns.
.gitattributes	Enforces LF normalization and marks common binary assets.
.claude/CLAUDE.md	Routes Claude instructions to AGENTS.md.
.github/SUPPORT.md	Defines default support guidance and private reporting routes.
.github/SECURITY.md	Defines default vulnerability reporting and supported versions guidance.
.github/CONTRIBUTING.md	Defines default contribution workflow guidance with links to MSX standards.
.github/CODE_OF_CONDUCT.md	Adds org-wide code of conduct default with attribution.
.github/pull_request_template.md	Adds a PR template aligned with the described PR format.
.github/dependabot.yml	Enables weekly Dependabot updates for GitHub Actions.
.github/copilot-instructions.md	Routes Copilot instructions to AGENTS.md.
.github/CODEOWNERS	Establishes code ownership for this repository.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Copilot

Pull request overview

Copilot reviewed 13 out of 14 changed files in this pull request and generated 5 comments.

Copilot

Pull request overview

Copilot reviewed 13 out of 14 changed files in this pull request and generated 1 comment.

Copilot

Pull request overview

Copilot reviewed 13 out of 14 changed files in this pull request and generated no new comments.

Copilot

Pull request overview

Copilot reviewed 13 out of 14 changed files in this pull request and generated 1 comment.

Copilot

Pull request overview

Copilot reviewed 13 out of 14 changed files in this pull request and generated no new comments.

Copilot

Pull request overview

Copilot reviewed 13 out of 14 changed files in this pull request and generated no new comments.

Copilot

Pull request overview

Copilot reviewed 13 out of 14 changed files in this pull request and generated no new comments.

Copilot

Pull request overview

Copilot reviewed 12 out of 13 changed files in this pull request and generated no new comments.

Copilot

Pull request overview

Copilot reviewed 12 out of 13 changed files in this pull request and generated no new comments.

Suppressed comments (2)

Previously missed (1) — in code that hasn't changed since the last review.

.github/CODE_OF_CONDUCT.md:31

Markdown formatting inconsistency: this list item puts the period outside the bolded term ("Violating confidentiality."), while other items include the period inside bold (e.g., "Harassment."). This reads unevenly and makes the list styling inconsistent.

This issue also appears on line 39 of the same file.

5. **Violating confidentiality**. Sharing or acting on someone's personal or private information without their permission.

.github/CODE_OF_CONDUCT.md:40

Markdown formatting inconsistency: these list items place the period outside the bolded term ("Promotional materials." / "Irresponsible communication."), while the other items include the period inside bold (e.g., "Misleading identity."). Aligning punctuation keeps list styling consistent.

3. **Promotional materials**. Sharing marketing or other commercial content in a way that is outside the norms of the community.
4. **Irresponsible communication.** Failing to responsibly present content which includes, links or describes any other restricted behaviors.

PSModule repositories receive consistent organization-wide community guidance while repository-local files remain the authoritative enforcement surface and the public PSModule profile stays intact. ## Changed: Organization-wide community guidance The code of conduct uses the complete Contributor Covenant 3.0 text and routes private conduct reports to `support@psmodule.io`. Private support matters use the same support mailbox. Contribution guidance links to the shared MSX agent plugin marketplace and the PSModule process plugin. ## Changed: Security concerns use a private route Vulnerabilities, accidentally exposed sensitive information, exposed credentials, exposed secrets, and weak or unsafe security controls are reported through the affected repository's private vulnerability reporting or, when unavailable, `security@psmodule.io`. ## Changed: Agent context is repository-addressable The agent router leads with precedence and freshness, identifies `PSModule/Process-PSModule`, private `PSModule/memory`, and inherited `MSXOrg/docs`, links documentation entry points, and names organization-specific local clone roots without prescribing an access tool. ## Changed: Repository governance The special public `.github` repository aligns its ownership, dependency, pull-request, text-normalization, ignore, and agent-routing baseline with MSXOrg/.github#2. Public prose is evergreen, declarative, and written in simple en-US. --- <details> <summary>Technical details</summary> - Implementation plan progress: all implementation and validation steps in #74 are complete. - Validation: Markdown reports zero issues; YAML parses and lints; required shared files are present; placeholders and obsolete contacts are absent; external links resolve; GitHub confirms public visibility, recognized community files, and zero CODEOWNERS errors. - The code of conduct preserves the upstream Contributor Covenant 3.0 content after replacing its reporting placeholder with `support@psmodule.io`, removing its authoring note, and normalizing section spacing to one empty line. - The root `LICENSE` is intentionally absent by maintainer direction. This is an explicit exception to the generic Repository Standard baseline; the Contributor Covenant retains its file-specific CC BY-SA 4.0 attribution. - Shared baseline files match MSXOrg/.github#2. Organization-specific differences are limited to the PSModule name, support/security domains, agent routes, public profile, and existing optional issue, funding, release, and media surfaces. - `@MariusStorhaug` replaces the previous CODEOWNERS team because GitHub reports `@PSModule/module-maintainers` as invalid: the team has pull permission rather than the required write access. - MSXOrg/docs#191 tracks the canonical Agentic Development and bootstrap migration to repository-addressable organization roots. - Standards alignment: | Changed surface | Standards checked | Framework docs checked | Result | | --- | --- | --- | --- | | Repository baseline | Repository Standard, Organization Standard, Natural Language, Markdown, YAML | Agentic Development client behavior | Exception — root license omitted by maintainer direction; clone-path migration tracked in MSXOrg/docs#191 | | Community health defaults | Contribution Workflow, Issues, PR Format, Review Etiquette | GitHub default community health file behavior, Contributor Covenant 3.0, MSX and PSModule plugin marketplaces | Aligned | - Issue convergence sweep: the branch is scoped only to #74; no additional issue is fully delivered. </details> <details> <summary>Relevant issues (or links)</summary> - Resolves #74 ### Related work - References MSXOrg/.github#2 - References MSXOrg/docs#191 </details>

Add repository governance baseline

bf48a0f

Marius Storhaug (MariusStorhaug) added the release:none No release required label Aug 28, 2026

Marius Storhaug (MariusStorhaug) self-assigned this Aug 28, 2026

Add organization-wide community defaults

b2a54cf

Marius Storhaug (MariusStorhaug) requested a lite review from Copilot August 28, 2026 20:06

Copilot started reviewing on behalf of Marius Storhaug (MariusStorhaug) August 28, 2026 20:07 View session

Copilot AI reviewed Aug 28, 2026

View reviewed changes

Use full Contributor Covenant 3.0 text

195a53f

Marius Storhaug (MariusStorhaug) requested a lite review from Copilot August 29, 2026 07:45

Copilot started reviewing on behalf of Marius Storhaug (MariusStorhaug) August 29, 2026 07:45 View session

Copilot AI reviewed Aug 29, 2026

View reviewed changes

Comment thread .github/SUPPORT.md

Comment thread README.md

Comment thread .github/CONTRIBUTING.md Outdated

Comment thread .github/CODE_OF_CONDUCT.md

Comment thread .github/SECURITY.md

Clarify private security concern reporting

1825ae6

Marius Storhaug (MariusStorhaug) requested a lite review from Copilot August 29, 2026 07:57

Marius Storhaug (MariusStorhaug) mentioned this pull request Aug 29, 2026

Align community defaults with the MSX baseline PSModule/.github#74

Closed

15 tasks

Copilot started reviewing on behalf of Marius Storhaug (MariusStorhaug) August 29, 2026 07:58 View session

Marius Storhaug (MariusStorhaug) mentioned this pull request Aug 29, 2026

📖 [Docs]: Community defaults aligned with MSX baseline PSModule/.github#75

Merged

Copilot AI reviewed Aug 29, 2026

View reviewed changes

Comment thread LICENSE Outdated

Clarify code of conduct licensing

d02af39

Marius Storhaug (MariusStorhaug) requested a lite review from Copilot August 29, 2026 08:01

Copilot started reviewing on behalf of Marius Storhaug (MariusStorhaug) August 29, 2026 08:01 View session

Copilot AI reviewed Aug 29, 2026

View reviewed changes

Marius Storhaug (MariusStorhaug) added 2 commits August 29, 2026 10:04

Route organization contacts by purpose

f06cc5d

Use evergreen support and security guidance

782f53d

Marius Storhaug (MariusStorhaug) requested a lite review from Copilot August 29, 2026 08:05

Copilot started reviewing on behalf of Marius Storhaug (MariusStorhaug) August 29, 2026 08:06 View session

Copilot AI reviewed Aug 29, 2026

View reviewed changes

Comment thread .github/SECURITY.md Outdated

Clarify reportable security concerns

bce4f5d

Marius Storhaug (MariusStorhaug) requested a lite review from Copilot August 29, 2026 08:08

Copilot started reviewing on behalf of Marius Storhaug (MariusStorhaug) August 29, 2026 08:08 View session

Copilot AI reviewed Aug 29, 2026

View reviewed changes

Marius Storhaug (MariusStorhaug) added 2 commits August 29, 2026 10:15

Match Contributor Covenant source formatting

bda2f84

Align shared community file formatting

9cea802

Marius Storhaug (MariusStorhaug) requested a lite review from Copilot August 29, 2026 08:20

Copilot started reviewing on behalf of Marius Storhaug (MariusStorhaug) August 29, 2026 08:20 View session

Copilot AI reviewed Aug 29, 2026

View reviewed changes

Marius Storhaug (MariusStorhaug) added 2 commits August 29, 2026 10:22

Normalize Contributor Covenant spacing

ec1413d

Document the MSX agent plugin

2f417d9

Marius Storhaug (MariusStorhaug) requested a lite review from Copilot August 29, 2026 08:24

Copilot started reviewing on behalf of Marius Storhaug (MariusStorhaug) August 29, 2026 08:25 View session

Copilot AI reviewed Aug 29, 2026

View reviewed changes

Remove repository-level license

d1d8ea4

Marius Storhaug (MariusStorhaug) requested a lite review from Copilot August 29, 2026 08:33

Copilot started reviewing on behalf of Marius Storhaug (MariusStorhaug) August 29, 2026 08:33 View session

Copilot AI reviewed Aug 29, 2026

View reviewed changes

Route agents to repository context

7a50d1b

Marius Storhaug (MariusStorhaug) mentioned this pull request Aug 29, 2026

Align agent context paths with organization repositories MSXOrg/docs#191

Open

5 tasks

Marius Storhaug (MariusStorhaug) requested a lite review from Copilot August 29, 2026 08:48

Copilot started reviewing on behalf of Marius Storhaug (MariusStorhaug) August 29, 2026 08:49 View session

Copilot AI reviewed Aug 29, 2026

View reviewed changes

Marius Storhaug (MariusStorhaug) marked this pull request as ready for review August 29, 2026 09:15

Marius Storhaug (MariusStorhaug) merged commit 2b50c2b into main Aug 29, 2026
1 check passed

Marius Storhaug (MariusStorhaug) deleted the docs/1-community-defaults branch August 29, 2026 09:16

Uh oh!

Conversation

Marius Storhaug (MariusStorhaug) commented Aug 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

New: Organization-wide community guidance

Changed: Security concerns use one private route

Changed: Agent context is repository-addressable

Changed: Repository governance

Related work

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Marius Storhaug (MariusStorhaug) commented Aug 28, 2026 •

edited

Loading