Standardize community files under .github

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Author: MariusStorhaug

.github/plugin/psmodule/skills/psmodule-repository-audit/SKILL.md

@@ -77,11 +77,16 @@ overwrite an established repository.
 | Creation scaffold | Use for new repositories. Do not overwrite established module source, tests, examples, or content. |
 | Repository-owned addition | Preserve it unless it violates a governing standard or breaks the framework contract. |
 
-Treat governance files, caller workflows, linter settings, dependency
-configuration, agent entry points, and documentation-site defaults as
-template-owned or parameterized unless the template or PSModule standard says
-otherwise. Treat `src/`, established `tests/`, `examples/`, documentation
-content, and module-specific assets as repository-owned after creation.
+Treat `.github/CONTRIBUTING.md`, `.github/CODE_OF_CONDUCT.md`,
+`.github/SECURITY.md`, `.github/SUPPORT.md`, governance files, caller workflows,
+linter settings, dependency configuration, agent entry points, and
+documentation-site defaults as template-owned or parameterized unless the
+template or PSModule standard says otherwise. Treat `src/`, established
+`tests/`, `examples/`, documentation content, and module-specific assets as
+repository-owned after creation.
+
+Report a root-level duplicate of a community file as drift. GitHub recognizes
+these files under `.github/`, which is their canonical PSModule location.
 
 Configuration is not automatically consumer-owned. For example,
 `.github/PSModule.yml` may contain valid module-specific overrides while its

docs/content/guides/structuring-your-module.md

@@ -34,11 +34,15 @@ The goal is a stable repository anatomy so both humans and automation know exact
 │   │   └── .textlintrc                        # Text lint rules surfaced in Build Docs summaries
 │   ├── workflows/                             # Entry points for the reusable workflow
 │   │   └── Process-PSModule.yml               # Consumer hook into this workflow bundle
+│   ├── CODE_OF_CONDUCT.md                      # Community participation rules
 │   ├── CODEOWNERS                             # Default reviewers enforced by Process-PSModule checks
+│   ├── CONTRIBUTING.md                         # Repository-local contribution workflow
 │   ├── dependabot.yml                         # Dependency update cadence handled by GitHub
-│   ├── zensical.toml                          # Site config consumed during site builds
 │   ├── PSModule.yml                           # Settings parsed to drive matrices
-│   └── release.yml                            # Release automation template invoked on publish
+│   ├── release.yml                            # Release automation template invoked on publish
+│   ├── SECURITY.md                             # Private vulnerability reporting policy
+│   ├── SUPPORT.md                              # Support channels and issue routing
+│   └── zensical.toml                           # Site config consumed during site builds
 ├── examples/                                  # Samples referenced in generated documentation
 │   └── General.ps1                            # Example script ingested by Document-PSModule
 ├── icon/                                      # Icon assets linked from manifest and documentation

docs/content/reference/repository-standard.md

@@ -87,10 +87,10 @@ Module repositories use the PSModule framework layout:
 | ---- | --------------- |
 | `README.md` | Concise start page for the module. |
 | `LICENSE` | Repository license. PSModule module repositories default to MIT unless a different license is explicitly decided. |
-| `CONTRIBUTING.md` | Self-contained contribution workflow for this repository. Does not rely on an organization-level fallback. |
-| `SECURITY.md` | Security support policy and private vulnerability reporting instructions. |
-| `SUPPORT.md` | Support expectations and where users ask for help. |
-| `CODE_OF_CONDUCT.md` | Community conduct expectations. |
+| `.github/CONTRIBUTING.md` | Self-contained contribution workflow for this repository. Does not rely on an organization-level fallback. |
+| `.github/SECURITY.md` | Security support policy and private vulnerability reporting instructions. |
+| `.github/SUPPORT.md` | Support expectations and where users ask for help. |
+| `.github/CODE_OF_CONDUCT.md` | Community conduct expectations. |
 | `AGENTS.md` | Agent onboarding entry point. Points agents to the canonical guidance at `https://psmodule.io/docs/`. |
 | `CLAUDE.md` | Claude Code entry point. Imports `AGENTS.md` so Claude reads the same instructions. |
 | `.github/PSModule.yml` | Module workflow configuration overrides. |
@@ -155,10 +155,10 @@ Required baseline files for module repositories:
 | ---- | ------------------ |
 | `README.md` | Repository landing page and evergreen context for humans and agents. |
 | `LICENSE` | Clear legal terms for reuse, packaging, and redistribution. |
-| `CONTRIBUTING.md` | Self-contained contribution workflow and expectations for this repository. |
-| `SECURITY.md` | Private vulnerability reporting and latest-version support policy. |
-| `SUPPORT.md` | Support channel and issue-routing expectations. |
-| `CODE_OF_CONDUCT.md` | Community participation rules. |
+| `.github/CONTRIBUTING.md` | Self-contained contribution workflow and expectations for this repository. |
+| `.github/SECURITY.md` | Private vulnerability reporting and latest-version support policy. |
+| `.github/SUPPORT.md` | Support channel and issue-routing expectations. |
+| `.github/CODE_OF_CONDUCT.md` | Community participation rules. |
 | `AGENTS.md` | Cross-tool agent instructions pointing to the canonical guidance at `https://psmodule.io/docs/`. |
 | `CLAUDE.md` | Claude Code entry point that imports `AGENTS.md`. |
 | `.github/dependabot.yml` | Configures ecosystem-appropriate dependency-update pull requests. For PowerShell module repositories the `github-actions` ecosystem is expected; add any other ecosystems the module actually develops in. |
@@ -172,6 +172,13 @@ Repositories can add local files, but they should not remove these baseline file
 
 Each repository must stand on its own. It carries its own copy of every file above and does not depend on the organization `.github` fallback: that fallback is only surfaced in GitHub's web UI, and agents, linters, and local tooling do not read it.
 
+Keep repository-local community health files together under `.github/`.
+GitHub discovers `CONTRIBUTING.md`, `CODE_OF_CONDUCT.md`, `SECURITY.md`, and
+`SUPPORT.md` there, so root-level duplicates add no value and are not part of
+the PSModule layout. `README.md`, `LICENSE`, and `AGENTS.md` remain at the
+repository root because they are repository entry points rather than community
+health files.
+
 ## Agent onboarding files
 
 Every repository must be usable by an agent that has never seen it before, without special configuration. Each repository carries its own agent entry points that point to the authoritative documentation instead of restating it:
@@ -354,7 +361,12 @@ Retain upstream attribution and licensing context. Credit, acknowledgements, don
 
 README pages should not duplicate generated command documentation. Do not add full command inventories, parameter tables, or long reference sections when those details are already produced from comment-based help.
 
-Do not add a community-file or policy link section by default. Readers can find standard repository files such as `LICENSE`, `CONTRIBUTING.md`, `SECURITY.md`, and `CODE_OF_CONDUCT.md` through GitHub conventions and the repository file tree. Link them only when the module has an unusual rule the user must know before using it, or when it carries required upstream attribution.
+Do not add a community-file or policy link section by default. Readers can find
+standard files such as `LICENSE`, `.github/CONTRIBUTING.md`,
+`.github/SECURITY.md`, and `.github/CODE_OF_CONDUCT.md` through GitHub
+conventions and the repository file tree. Link them only when the module has an
+unusual rule the user must know before using it, or when it carries required
+upstream attribution.
 
 ## Placeholder and in-progress repositories