[New1Direction]

Clean integration from existing tested draft #17

Port the exact read-only GitHub discovery feature onto the current hardened main after prior stacked PR history became conflicted following squash merges. This is not a rewrite of the ontology compiler.

Included

• GitHub fixed-origin GET-only connector, strict owner/name validation, pinned commit/tree, bounded allowlisted manifest reads and Git blob digest verification.
• Existing local control-room source mode --github plus --repo, a one-click refresh button, separate read-only GitHub Actions CI evidence, server-side polling that is independent of browser sessions while the process runs.
• Stable repository-numeric scoped identifiers, missing-coverage contracts and all-uninstrumented runtime health UNKNOWN.
• Offline tests for tampered blobs, malformed paths, identity, cross-project graph collision, source-to-control-room mapping and CI-only not production health.
• Real repo.ing read-only GitHub Actions smoke test; no production infrastructure writes or automation.

Security boundaries

The control room remains local/loopback-only, validates Host and Origin, rejects symlinked observation inputs and limits parsing. GitHub token (if configured) is an environment variable for a single operator, not an authorized multi-tenant OAuth service. No hosted deployment, agent action, data export service, cloud workers, production monitoring or database access.

Merge gate

Fresh Python 3.11/3.13 CI and real repo.ing smoke must pass. If green, squash-merge clean branch; leave original PR #17 as superseded. PRs #18–#25 remain separate pending clean rebases/security review.