Governance Ledger

ledger/entries/*.json is the source of truth for low-volume repository governance events. ledger/index.json is generated from those entries and must not be edited by hand.

Entries must stay public-safe. Do not include real secrets, internal hostnames, private repository names, raw scan findings, raw proof logs, SARIF, or code snippets from private targets.

Regenerate derived files with:

uv run python -m governance.rebuild_ledger_index --write
uv run python -m governance.render

Check freshness with:

uv run python -m governance.validate_ledger
uv run python -m governance.rebuild_ledger_index --check
uv run python -m governance.render --check