📖 [Docs]: Community defaults aligned with MSX baseline - #75
Conversation
There was a problem hiding this comment.
Pull request overview
Aligns the PSModule public .github repository’s governance and community-health defaults with the current MSX baseline, while preserving repository-local enforcement as the authoritative surface for downstream repos.
Changes:
- Added/updated repository governance baseline files (license, agents routing, text normalization, ignore rules, Dependabot baseline).
- Updated community guidance documents (contributing, security, support, code of conduct) and streamlined the PR template.
- Clarified README positioning of defaults vs. repository-local enforcement and documented licensing split.
Reviewed changes
Copilot reviewed 13 out of 14 changed files in this pull request and generated 3 comments.
Show a summary per file
| File | Description |
|---|---|
| README.md | Clarifies fallback behavior and adds explicit licensing notes. |
| LICENSE | Introduces MIT licensing for the repository. |
| AGENTS.md | Adds agent routing/read-order instructions for contributors/agents. |
| .gitignore | Updates ignore defaults for OS/editor artifacts and outputs/build folders. |
| .github/SUPPORT.md | Aligns support guidance and sensitive-report routing. |
| .github/SECURITY.md | Aligns security reporting guidance and contact channel. |
| .github/pull_request_template.md | Reworks PR template into a minimal, MSX-aligned structure. |
| .github/dependabot.yml | Normalizes Dependabot config formatting and labels. |
| .github/copilot-instructions.md | Points Copilot to the agent instruction entrypoint. |
| .github/CONTRIBUTING.md | Replaces prior guide with MSX-aligned contribution workflow guidance. |
| .github/CODEOWNERS | Updates ownership routing for PR reviews. |
| .github/CODE_OF_CONDUCT.md | Reformats/aligns Code of Conduct and reporting contact. |
| .gitattributes | Standardizes text normalization and binary handling for common assets. |
| .claude/CLAUDE.md | Routes Claude configuration to the shared agent instructions. |
Suppressed comments (1)
.github/CODE_OF_CONDUCT.md:41
- Punctuation is inconsistent with the surrounding list items (period is outside the bold span here, but inside it elsewhere). Consider keeping the period inside the bold text for consistent formatting.
3. **Promotional materials**. Sharing marketing or other commercial content in a way that is outside the norms of the community.
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 12 out of 13 changed files in this pull request and generated no new comments.
Suppressed comments (2)
Previously missed (1) — in code that hasn't changed since the last review.
.github/CODE_OF_CONDUCT.md:29
- This line uses a curly apostrophe (’), while nearby text in the same document uses straight ASCII apostrophes (e.g., "someone's" on line 31). Mixing quote styles can cause noisy diffs and copy/paste/search inconsistencies; prefer a straight apostrophe for consistency.
This issue also appears on line 83 of the same file.
3. **Stereotyping or discrimination.** Characterizing anyone’s personality or behavior on the basis of immutable identities or traits.
.github/CODE_OF_CONDUCT.md:83
- This sentence uses a curly apostrophe (’), but the rest of the file primarily uses straight ASCII apostrophes. Standardizing to a straight apostrophe avoids inconsistent typography and makes the text easier to search and copy.
For answers to common questions about Contributor Covenant, see the FAQ at [https://www.contributor-covenant.org/faq](https://www.contributor-covenant.org/faq). Translations are provided at [https://www.contributor-covenant.org/translations](https://www.contributor-covenant.org/translations). Additional enforcement and community guideline resources can be found at [https://www.contributor-covenant.org/resources](https://www.contributor-covenant.org/resources). The enforcement ladder was inspired by the work of [Mozilla’s code of conduct team](https://github.com/mozilla/inclusion).
MSX repositories without repository-local community health files gain consistent organization-wide fallback guidance while local files remain the authoritative enforcement surface. ## New: Organization-wide community guidance Repositories without their own conduct, contribution, security, or support policy receive a default from the public `MSXOrg/.github` repository. The code of conduct uses the complete Contributor Covenant 3.0 text and routes private conduct reports to `support@msx.no`. Contribution guidance links to the MSX agent plugin marketplace. ## Changed: Security concerns use one private route Vulnerabilities, accidentally exposed sensitive information, exposed credentials, exposed secrets, and weak or unsafe security controls are reported through the affected repository's private vulnerability reporting or, when unavailable, `security@msx.no`. Private support matters use `support@msx.no`. ## Changed: Agent context is repository-addressable The agent router leads with precedence and freshness, identifies `MSXOrg/docs` and private `MSXOrg/memory`, links documentation entry points, and names `~/.msxorg/` as the preferred local clone root without prescribing an access tool. ## Changed: Repository governance The special organization repository explains its fallback role and carries the applicable MSX ownership, dependency, pull-request, and agent-routing baseline. Its public prose is evergreen, declarative, and written in simple en-US. --- <details> <summary>Technical details</summary> - Implementation plan progress: the repository baseline, four community health defaults, and targeted validation are complete. - Validation: the required inventory is exact, excluded template/profile surfaces are absent, placeholder scans are clean, Markdown reports zero issues, YAML parses and lints, committed text is LF-normalized, links resolve, GitHub resolves every head-branch path, and CODEOWNERS reports no errors. - The code of conduct preserves the upstream Contributor Covenant 3.0 content after replacing its reporting placeholder with `support@msx.no`, removing its authoring note, and normalizing section spacing to one empty line. - The root `LICENSE` is intentionally absent by maintainer direction. This is an explicit exception to the generic Repository Standard baseline; the Contributor Covenant retains its file-specific CC BY-SA 4.0 attribution. - MSXOrg/docs#191 tracks the canonical Agentic Development and bootstrap migration from `~/.msx/` to repository-addressable organization roots. - GitHub's community-profile API reports only the default branch for this repository, so fallback recognition becomes externally observable after merge; the head-branch contents and documented supported paths are verified. - Standards alignment: | Changed surface | Standards checked | Framework docs checked | Result | | --- | --- | --- | --- | | Repository baseline | Repository Standard, Organization Standard, Natural Language, Markdown, YAML | Agentic Development client behavior | Exception — root license omitted by maintainer direction; clone-path migration tracked in MSXOrg/docs#191 | | Community health defaults | Organization Standard, Contribution Workflow, Issues, PR Format, Review Etiquette | GitHub default community health file behavior, Contributor Covenant 3.0, MSX plugin marketplace | Aligned | - Issue convergence sweep: the branch is scoped only to #1; no additional issue is fully delivered. </details> <details> <summary>Relevant issues (or links)</summary> - Resolves #1 ### Related work - References PSModule/.github#75 - References MSXOrg/docs#191 </details>
PSModule repositories receive consistent organization-wide community guidance while repository-local files remain the authoritative enforcement surface and the public PSModule profile stays intact.
Changed: Organization-wide community guidance
The code of conduct uses the complete Contributor Covenant 3.0 text and routes private conduct reports to
support@psmodule.io. Private support matters use the same support mailbox. Contribution guidance links to the shared MSX agent plugin marketplace and the PSModule process plugin.Changed: Security concerns use a private route
Vulnerabilities, accidentally exposed sensitive information, exposed credentials, exposed secrets, and weak or unsafe security controls are reported through the affected repository's private vulnerability reporting or, when unavailable,
security@psmodule.io.Changed: Agent context is repository-addressable
The agent router leads with precedence and freshness, identifies
PSModule/Process-PSModule, privatePSModule/memory, and inheritedMSXOrg/docs, links documentation entry points, and names organization-specific local clone roots without prescribing an access tool.Changed: Repository governance
The special public
.githubrepository aligns its ownership, dependency, pull-request, text-normalization, ignore, and agent-routing baseline with MSXOrg/.github#2. Public prose is evergreen, declarative, and written in simple en-US.Technical details
support@psmodule.io, removing its authoring note, and normalizing section spacing to one empty line.LICENSEis intentionally absent by maintainer direction. This is an explicit exception to the generic Repository Standard baseline; the Contributor Covenant retains its file-specific CC BY-SA 4.0 attribution.@MariusStorhaugreplaces the previous CODEOWNERS team because GitHub reports@PSModule/module-maintainersas invalid: the team has pull permission rather than the required write access.Relevant issues (or links)
Related work