docs: add GOVERNANCE and MAINTAINERS (from gist templates)

GOVERNANCE.adoc

@@ -0,0 +1,93 @@
+// SPDX-License-Identifier: MPL-2.0
+// Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
+= Governance
+
+[NOTE]
+====
+Personal / solo-project model (Benevolent Maintainer). Last reviewed: 2026-06-22.
+====
+
+== Project status
+
+This project is governed by a *Benevolent Maintainer* model.
+
+The project founder retains final authority over project direction,
+architecture, releases, licensing, and governance.
+
+== Founder
+
+Current founder and lead maintainer:
+
+* Jonathan D.A. Jewell (`@hyperpolymath`)
+
+== Decision making
+
+Normal decisions are made by the founder.
+
+Contributors are encouraged to:
+
+* open issues
+* submit pull requests
+* propose designs
+* discuss alternatives
+
+Feedback is considered in good faith but does not bind the project.
+
+== Contributions
+
+Contributions are welcome. See `CONTRIBUTING.md` for how to get started.
+
+Submitting a contribution does not guarantee acceptance. The founder may:
+
+* accept a contribution
+* request changes
+* reject a contribution
+* replace a contribution with an alternative implementation
+
+without further justification.
+
+== Architectural direction
+
+The founder is responsible for:
+
+* project vision
+* long-term roadmap
+* architecture
+* naming
+* release strategy
+
+== Maintainers
+
+Additional maintainers may be appointed by the founder (see `MAINTAINERS.adoc`).
+Maintainers may review changes, merge pull requests, and manage issues unless
+otherwise restricted. The founder may remove maintainers at any time.
+
+== Code of conduct
+
+All participants are expected to follow the project's `CODE_OF_CONDUCT.md`.
+The founder is the point of contact for enforcement.
+
+== Security
+
+Report suspected vulnerabilities *privately* as described in `SECURITY.md`.
+Please do not disclose vulnerabilities in public issues.
+
+== Forking
+
+Users are free to fork the project according to the license. Forks are
+independent projects and are not considered official unless explicitly
+designated.
+
+== Governance changes
+
+This document may be amended by the founder.
+
+== Project continuity
+
+If the founder permanently ceases maintenance:
+
+. a successor may be appointed;
+. ownership may be transferred;
+. the project may become community-maintained.
+
+Until such designation exists, no successor is implied.

MAINTAINERS.adoc

@@ -0,0 +1,48 @@
+// SPDX-License-Identifier: MPL-2.0
+// Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
+= Maintainers
+
+This project is maintained by:
+
+* `@hyperpolymath`
+
+== Ownership
+
+[cols="1,1",options="header"]
+|===
+| Area | Maintainer
+
+| All files | `@hyperpolymath`
+| `README*` | `@hyperpolymath`
+| `LICENSE` | `@hyperpolymath`
+| `SECURITY*` | `@hyperpolymath`
+| `CONTRIBUTING*` | `@hyperpolymath`
+| `docs/` | `@hyperpolymath`
+| `*.md` / `*.mdx` / `*.adoc` | `@hyperpolymath`
+|===
+
+Review routing is enforced via `CODEOWNERS` so GitHub requests reviews
+automatically.
+
+== Review expectations
+
+* Paired with `CODEOWNERS` so GitHub requests reviews automatically.
+* Target first-response time for issues and pull requests: *best effort*.
+
+== Becoming a maintainer
+
+Additional maintainers may be invited by the founder after a track record of
+helpful, high-quality contributions. There is no obligation to accept
+contributions or to add maintainers.
+
+== Security contact
+
+Report suspected vulnerabilities *privately* — see `SECURITY.md`, or contact
+`@hyperpolymath` directly. Please avoid opening public issues for suspected
+vulnerabilities unless explicitly requested.
+
+== Related files
+
+* `GOVERNANCE.adoc` — decision-making model.
+* `CODEOWNERS` — review routing for repositories.
+* `SECURITY.md` — vulnerability disclosure policy.