Codify production-first engineering governance

[igor04091968]

Purpose

Codify the production-first engineering standard for AWatch-rus so future PRs optimize for reliability, operational maturity, security, maintainability, reproducibility, performance and simplicity before new functionality.

Operational Impact

Documentation/governance only. No runtime services, timers, APIs, collectors, DLP profile, Loki path, Velociraptor mode, deployment automation or production configuration are changed.

Risk Assessment

Low risk. The change updates governance documents, PR evidence requirements, review checklist, README/CONTRIBUTING links and CODEOWNERS coverage. Runtime/API/UI behavior remains unchanged and existing production deployments remain backward-compatible.

Rollback Strategy

Revert this PR. No production service restart, migration, binary rollout or config rollback is required.

Validation Steps

• git diff --check
• python3 scripts/public_secret_pattern_check.py
• node scripts/operational-maturity-check.mjs --json
• node scripts/pilot-validation-smoke.mjs
• node scripts/deployment-readiness-smoke.mjs
• bash -n scripts/registry_readiness_check.sh && bash scripts/registry_readiness_check.sh

Rust build/test/clippy/audit/deny were skipped because this PR is documentation/governance only and does not touch Rust sources, manifests or lockfiles.

Documentation Changes

• Add .github/GOVERNANCE.md as the GitHub governance entrypoint.
• Add docs/ENTERPRISE_QUALITY_STANDARD_RU.md as the canonical production-first engineering standard.
• Extend .github/pull_request_template.md with required PR evidence sections.
• Extend docs/REVIEW_CHECKLIST_RU.md with production compatibility, dependency and operational maturity checks.
• Link governance docs from README.md and CONTRIBUTING.md.
• Add CODEOWNERS coverage for governance and operational maturity docs.

Acceptance Criteria

• PR checks pass on GitHub public mirror.
• Required PR sections are present for future work.
• Governance docs explicitly preserve production stability and backward compatibility.
• No runtime/API/UI/deployment behavior changes are introduced.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: dea5b2f3-1d3f-4f5c-ab84-0148d62c175b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch detmir-enterprise-quality-standard-20260701

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}