ci: import Quantum-L9 org governance templates and v2 CI workflows

.github/CODEOWNERS

@@ -0,0 +1,18 @@
+# Quantum-L9/LLM-Router CODEOWNERS
+# Adapted from Quantum-L9/.github org defaults for this repo's actual layout.
+
+# Default — platform team owns everything
+*                              @Quantum-L9/platform
+
+# CI/CD workflows — highest blast-radius
+/.github/workflows/            @Quantum-L9/platform
+
+# Community health files — org governance surfaces
+/CONTRIBUTING.md               @Quantum-L9/platform
+/SECURITY.md                   @Quantum-L9/platform
+/CODE_OF_CONDUCT.md            @Quantum-L9/platform
+/SUPPORT.md                    @Quantum-L9/platform
+/.github/PULL_REQUEST_TEMPLATE.md  @Quantum-L9/platform
+
+# Package manifest and publish config
+/package.json                  @Quantum-L9/platform

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,99 @@
+name: Bug Report
+description: Report a reproducible bug in any Quantum-L9 repository
+title: "[Bug]: "
+labels: ["bug", "triage"]
+assignees: []
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thank you for taking the time to file a bug report. Please fill out all fields completely.
+        Incomplete reports may be closed without investigation.
+
+  - type: textarea
+    id: description
+    attributes:
+      label: Bug Description
+      description: A clear and concise description of what the bug is.
+      placeholder: "Describe the bug..."
+    validations:
+      required: true
+
+  - type: textarea
+    id: reproduction
+    attributes:
+      label: Steps to Reproduce
+      description: Exact steps to reproduce the behavior.
+      placeholder: |
+        1. Go to '...'
+        2. Run command '...'
+        3. See error
+    validations:
+      required: true
+
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected Behavior
+      description: What did you expect to happen?
+    validations:
+      required: true
+
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual Behavior
+      description: What actually happened?
+    validations:
+      required: true
+
+  - type: dropdown
+    id: repo
+    attributes:
+      label: Affected Repository
+      options:
+        - l9-ci-core
+        - Cursor-Governance
+        - l9-assurance
+        - .github (org backbone)
+        - Other (specify in description)
+    validations:
+      required: true
+
+  - type: input
+    id: workflow-name
+    attributes:
+      label: Workflow Name (if CI-related)
+      description: "e.g. pr-pipeline.yml, security.yml"
+      placeholder: "pr-pipeline.yml"
+
+  - type: input
+    id: python-version
+    attributes:
+      label: Python Version
+      placeholder: "3.12"
+
+  - type: input
+    id: node-version
+    attributes:
+      label: Node Version (if applicable)
+      placeholder: "20"
+
+  - type: input
+    id: os
+    attributes:
+      label: Operating System
+      placeholder: "ubuntu-latest / macOS 14 / Windows 11"
+
+  - type: textarea
+    id: logs
+    attributes:
+      label: Logs / Screenshots
+      description: Paste relevant log output or attach screenshots.
+      render: shell
+
+  - type: input
+    id: related-issues
+    attributes:
+      label: Related Issues / PRs
+      placeholder: "#123, #456"

.github/ISSUE_TEMPLATE/ci-failure.yml

@@ -0,0 +1,86 @@
+name: CI Pipeline Failure
+description: Report a CI pipeline failure for triage by the platform team
+title: "[CI Failure]: "
+labels: ["ci-failure", "triage"]
+assignees: []
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Use this template for CI pipeline failures that are not explained by a code bug.
+        For code bugs that cause test failures, use the Bug Report template instead.
+
+  - type: input
+    id: workflow-run-url
+    attributes:
+      label: Workflow Run URL
+      description: Paste the full URL of the failed GitHub Actions run.
+      placeholder: "https://github.com/Quantum-L9/l9-ci-core/actions/runs/XXXXXXXXX"
+    validations:
+      required: true
+
+  - type: input
+    id: failed-job
+    attributes:
+      label: Failed Job Name
+      placeholder: "pr-pipeline / security-scan / scorecard"
+    validations:
+      required: true
+
+  - type: dropdown
+    id: trigger
+    attributes:
+      label: Triggered By
+      options:
+        - Pull Request
+        - Push to main
+        - Scheduled (cron)
+        - Workflow Dispatch
+        - Tag push
+    validations:
+      required: true
+
+  - type: textarea
+    id: error-output
+    attributes:
+      label: Error Output
+      description: Paste the relevant error section from the failed step.
+      render: shell
+    validations:
+      required: true
+
+  - type: dropdown
+    id: bisect-attempted
+    attributes:
+      label: Bisect Attempted?
+      options:
+        - "No — first occurrence"
+        - "No — intermittent failure"
+        - "Yes — narrowed to specific commit (paste SHA below)"
+        - "Yes — cannot reproduce locally"
+    validations:
+      required: true
+
+  - type: input
+    id: bisect-sha
+    attributes:
+      label: Bisect SHA (if applicable)
+      placeholder: "2b330a5aab90cd7781bef08f14c5e7904b61bc56"
+
+  - type: dropdown
+    id: affected-kernel
+    attributes:
+      label: Affected Kernel
+      options:
+        - pr-pipeline.yml
+        - release-publish.yml
+        - nightly.yml
+        - pre-commit-ci.yml
+        - trio-governance.yml
+        - security.yml
+        - scorecard.yml
+        - sbom.yml
+        - l9-self-ci.yml (inline only)
+        - Not a kernel call (repo-local workflow)
+    validations:
+      required: true

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,69 @@
+name: Feature Request
+description: Propose a new feature or enhancement for Quantum-L9 infrastructure
+title: "[Feature]: "
+labels: ["enhancement", "triage"]
+assignees: []
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Before submitting, check existing issues and discussions to avoid duplicates.
+
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem Statement
+      description: What problem does this feature solve? What gap does it address?
+      placeholder: "Currently, when I do X, I have to manually Y because..."
+    validations:
+      required: true
+
+  - type: textarea
+    id: solution
+    attributes:
+      label: Proposed Solution
+      description: Describe the feature you'd like to see implemented.
+    validations:
+      required: true
+
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives Considered
+      description: What other approaches did you consider? Why did you reject them?
+
+  - type: textarea
+    id: acceptance-criteria
+    attributes:
+      label: Acceptance Criteria
+      description: Define what "done" looks like. Use checkboxes.
+      placeholder: |
+        - [ ] CI gate added to pr-pipeline kernel
+        - [ ] CONTRIBUTING.md updated
+        - [ ] TRACEABILITY_MAP.yaml entry added
+    validations:
+      required: true
+
+  - type: dropdown
+    id: affected-repos
+    attributes:
+      label: Primarily Affected Repository
+      multiple: true
+      options:
+        - l9-ci-core
+        - Cursor-Governance
+        - l9-assurance
+        - .github (org backbone)
+        - Multiple repos (org-wide change)
+    validations:
+      required: true
+
+  - type: dropdown
+    id: priority
+    attributes:
+      label: Suggested Priority
+      options:
+        - Critical (blocks current work)
+        - High (significant improvement)
+        - Medium (nice to have)
+        - Low (future consideration)

.github/ISSUE_TEMPLATE/gov-violation.yml

@@ -0,0 +1,84 @@
+name: Governance Violation
+description: Report a violation of CANONICAL_LAW.md policy
+title: "[Gov Violation]: "
+labels: ["governance", "violation", "triage"]
+assignees: []
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Use this template to report a detected violation of [CANONICAL_LAW.md](https://github.com/Quantum-L9/Cursor-Governance/blob/main/CANONICAL_LAW.md).
+        The platform team will triage and enforce. Do NOT use this for general bugs — use the Bug Report template.
+
+  - type: dropdown
+    id: violation-type
+    attributes:
+      label: Violation Type
+      options:
+        - Symlink drift (§2 — symlinks missing or broken)
+        - Anti-pattern detected (§7 — forbidden patterns present)
+        - Trio separation breach (§3 — model/service/interface cross-import)
+        - Policy gate failure (CI gate not enforcing policy)
+        - Workspace wiring failure (§8 — workspace config broken)
+        - Kernel ref violation (@main used instead of @v1)
+        - Other (describe below)
+    validations:
+      required: true
+
+  - type: dropdown
+    id: canonical-law-section
+    attributes:
+      label: CANONICAL_LAW.md Section Violated
+      options:
+        - "§1 — Unknown/General"
+        - "§2 — Symlink Contract"
+        - "§3 — Trio Separation"
+        - "§4 — Unknown"
+        - "§5 — Unknown"
+        - "§6 — Unknown"
+        - "§7 — Anti-Patterns"
+        - "§8 — Workspace Wiring"
+        - "§9 — Unknown"
+    validations:
+      required: true
+
+  - type: textarea
+    id: evidence
+    attributes:
+      label: Evidence
+      description: Paste command output, diff, or log that demonstrates the violation.
+      render: shell
+    validations:
+      required: true
+
+  - type: dropdown
+    id: affected-repos
+    attributes:
+      label: Affected Repository
+      multiple: true
+      options:
+        - l9-ci-core
+        - Cursor-Governance
+        - l9-assurance
+        - .github (org backbone)
+        - Multiple repos
+    validations:
+      required: true
+
+  - type: dropdown
+    id: severity
+    attributes:
+      label: Severity
+      options:
+        - Critical (active governance bypass / security impact)
+        - High (CI not enforcing policy)
+        - Medium (drift detected but not exploited)
+        - Low (documentation only)
+    validations:
+      required: true
+
+  - type: textarea
+    id: proposed-fix
+    attributes:
+      label: Proposed Fix (optional)
+      description: If you know how to fix this, describe the resolution.