repo-governance-auditlisted

# Repository Governance Audit Audit live state first. Default to report-only mode. Apply remote and local remediation only when the invocation includes `--apply`; that flag authorizes every evidence-backed change in the reported batch without a second interaction gate. ## Usage ```text repo-governance-audit [--apply] ``` ## Scope Use PowerShell 7 and `gh`/`git`; never use `powershell.exe` or Python. Inspect: - every source repository owned by the active `gh` account; - every Git checkout under `<applications-root>`, `<public-root>`, and `<queue-root>`; - nested repositories and worktrees represented by either a `.git` directory or file. Read the applicable `AGENTS.md` before acting. Treat archived repositories, private repositories, forks, mirrors, empty repositories, and repositories owned by a different account as distinct classes rather than forcing one policy onto all of them. ## Established remote policy Apply these expectations to active repositories owned by the authenticated GitHub user: | Setting | Expected value | | ----------------------------------- | -------------- | | Default branch | `main` | | Repository Projects | disabled | | Wiki | disabled | | Delete branch on merge | enabled | | Merge methods | squash only | | Auto-merge | disabled | | Suggest updating PR