Repository navigation

ci: refuse patch-fragment source files; security policy timelines (#596) #1331

Job	Run time
governance / Allowlist Preflight	7s
governance / Check Workflow Staleness	7s
governance / Security policy checks	8s
governance / Live Actions policy (credentialed advisory)	6s
governance / Well-Known (RFC 9116 + RSR)	4s
governance / Trusted-base reduction policy	6s
governance / Guix packaging policy (Nix retired)	8s
governance / Language / package anti-pattern policy	12s
governance / Licence consistency	6s
governance / Workflow security linter	11s
governance / Actions lockfile verify	10s
governance / Code quality + docs	9s
governance / Exemption ratchet	-1s
governance / Debt ratchet	-1s
governance / Validate Hypatia Baseline	3m 35s
	5m 7s