README: Scorecard badge, the tier / standards / latest-release table,
"Verifying a release" (checksum, provenance and SBOM attestations), "Support",
and a main-only contribution flow. SECURITY.md: named contact, the full
response and fix-time table, support duration, published-vulnerabilities
link, and the EX-0002 citation. CONTRIBUTING.md: GitHub Flow on main,
Conventional Commits, signed and signed-off commits, pre-commit, squash
merge, the standard gate table, the Kingsrook style summary, and the
AI-assisted section. Pull request template with "How it was tested" and the
seven-item checklist; issue templates with no blank issues and a security
redirect; CODE_OF_CONDUCT.md (Contributor Covenant 3.0); CLAUDE.md.
docs/adr: six records for the decisions the standards ask to see written
down (Velopack, WinUI 3 unpackaged, repository as Scoop bucket, the NuGet
update workflow, the flat layout and incremental AppKit adoption, GitHub Flow
on main only). docs/security/threat-model.md: actors, interfaces, assets,
and a STRIDE table for 1.0.1. RELEASING.md starts from the release checklist
issue, documents the SBOM and notes steps, and replaces "delete the bad
release" with the immutable-release procedure. The label-based release-notes
config is removed; notes come from Conventional Commit subjects now.
Closes#64
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Signed-off-by: James Maes <james@kof22.com>
james.maesandClaude Fable 5.1