Chore/add GitHub config

.env.example

@@ -1,4 +1,4 @@
-# ZeroClaw Environment Variables
+# Zerobuild Environment Variables
 # Copy this file to `.env` and fill in your local values.
 # Never commit `.env` or any real secrets.
 

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -1,5 +1,5 @@
 name: Bug Report
-description: Report a reproducible defect in ZeroClaw
+description: Report a reproducible defect in ZeroBuild
 title: "[Bug]: "
 labels:
   - bug
@@ -16,7 +16,7 @@ body:
     attributes:
       label: Summary
       description: One-line description of the problem.
-      placeholder: zeroclaw daemon exits immediately when ...
+      placeholder: zerobuild daemon exits immediately when ...
     validations:
       required: true
 
@@ -72,8 +72,8 @@ body:
       label: Steps to reproduce
       description: Please provide exact commands/config.
       placeholder: |
-        1. zeroclaw onboard --interactive
-        2. zeroclaw daemon
+        1. zerobuild onboard --interactive
+        2. zerobuild daemon
         3. Observe crash in logs
       render: bash
     validations:
@@ -103,7 +103,7 @@ body:
   - type: input
     id: version
     attributes:
-      label: ZeroClaw version
+      label: ZeroBuild version
       placeholder: v0.1.0 / commit SHA
     validations:
       required: true

.github/ISSUE_TEMPLATE/config.yml

@@ -1,17 +1,14 @@
 blank_issues_enabled: false
 contact_links:
   - name: Security vulnerability report
-    url: https://github.com/zeroclaw-labs/zeroclaw/security/policy
+    url: https://github.com/potlock/zerobuild/security/policy
     about: Please report security vulnerabilities privately via SECURITY.md policy.
   - name: Private vulnerability report template
-    url: https://github.com/zeroclaw-labs/zeroclaw/blob/main/docs/security/private-vulnerability-report-template.md
+    url: https://github.com/potlock/zerobuild/blob/main/docs/security/private-vulnerability-report-template.md
     about: Use this template when filing a private vulnerability report in Security Advisories.
-  - name: 私密漏洞报告模板（中文）
-    url: https://github.com/zeroclaw-labs/zeroclaw/blob/main/docs/security/private-vulnerability-report-template.zh-CN.md
-    about: 使用该中文模板通过 Security Advisories 进行私密漏洞提交。
   - name: Contribution guide
-    url: https://github.com/zeroclaw-labs/zeroclaw/blob/main/CONTRIBUTING.md
+    url: https://github.com/potlock/zerobuild/blob/main/CONTRIBUTING.md
     about: Please read contribution and PR requirements before opening an issue.
   - name: PR workflow & reviewer expectations
-    url: https://github.com/zeroclaw-labs/zeroclaw/blob/main/docs/pr-workflow.md
+    url: https://github.com/potlock/zerobuild/blob/main/docs/pr-workflow.md
     about: Read risk-based PR tracks, CI gates, and merge criteria before filing feature requests.

.github/codeql/codeql-config.yml

@@ -1,4 +1,4 @@
-# CodeQL configuration for ZeroClaw
+# CodeQL configuration for ZeroBuild
 #
 # We intentionally ignore integration tests under `tests/` because they often
 # contain security-focused fixtures (example secrets, malformed payloads, etc.)

.github/pull_request_template.md

@@ -65,7 +65,7 @@ cargo test
 
 - Data-hygiene status (`pass|needs-follow-up`):
 - Redaction/anonymization notes:
-- Neutral wording confirmation (use ZeroClaw/project-native labels if identity-like wording is needed):
+- Neutral wording confirmation (use ZeroBuild/project-native labels if identity-like wording is needed):
 
 ## Compatibility / Migration
 

.github/security/deny-ignore-governance.json

@@ -1,5 +1,5 @@
 {
-  "schema_version": "zeroclaw.deny-governance.v1",
+  "schema_version": "zerobuild.deny-governance.v1",
   "advisories": [
     {
       "id": "RUSTSEC-2025-0141",

.github/security/gitleaks-allowlist-governance.json

@@ -1,5 +1,5 @@
 {
-  "schema_version": "zeroclaw.secrets-governance.v1",
+  "schema_version": "zerobuild.secrets-governance.v1",
   "paths": [
     {
       "pattern": "src/security/leak_detector\\.rs",

.github/security/unsafe-audit-governance.json

@@ -1,5 +1,5 @@
 {
-  "schema_version": "zeroclaw.unsafe-audit-governance.v1",
+  "schema_version": "zerobuild.unsafe-audit-governance.v1",
   "ignore_paths": [],
   "ignore_pattern_ids": []
 }

.github/workflows/ci-run.yml

@@ -105,7 +105,7 @@ jobs:
             - name: Build binary (smoke check)
               run: cargo build --profile release-fast --locked --verbose
             - name: Check binary size
-              run: bash scripts/ci/check_binary_size.sh target/release-fast/zeroclaw
+              run: bash scripts/ci/check_binary_size.sh target/release-fast/zerobuild
 
     flake-probe:
         name: Test Flake Retry Probe

.github/workflows/ci-supply-chain-provenance.yml

@@ -49,17 +49,17 @@ jobs:
                   mkdir -p artifacts
                   host_target="$(rustc -vV | sed -n 's/^host: //p')"
                   cargo build --profile release-fast --locked --target "$host_target"
-                  cp "target/${host_target}/release-fast/zeroclaw" "artifacts/zeroclaw-${host_target}"
-                  sha256sum "artifacts/zeroclaw-${host_target}" > "artifacts/zeroclaw-${host_target}.sha256"
+                  cp "target/${host_target}/release-fast/zerobuild" "artifacts/zerobuild-${host_target}"
+                  sha256sum "artifacts/zerobuild-${host_target}" > "artifacts/zerobuild-${host_target}.sha256"
 
             - name: Generate provenance statement
               shell: bash
               run: |
                   set -euo pipefail
                   host_target="$(rustc -vV | sed -n 's/^host: //p')"
                   python3 scripts/ci/generate_provenance.py \
-                    --artifact "artifacts/zeroclaw-${host_target}" \
-                    --subject-name "zeroclaw-${host_target}" \
+                    --artifact "artifacts/zerobuild-${host_target}" \
+                    --subject-name "zerobuild-${host_target}" \
                     --output "artifacts/provenance-${host_target}.intoto.json"
 
             - name: Install cosign
@@ -104,7 +104,7 @@ jobs:
                   {
                     echo "### Supply Chain Provenance"
                     echo "- Target: \`${host_target}\`"
-                    echo "- Artifact: \`artifacts/zeroclaw-${host_target}\`"
+                    echo "- Artifact: \`artifacts/zerobuild-${host_target}\`"
                     echo "- Statement: \`artifacts/provenance-${host_target}.intoto.json\`"
                     echo "- Signature: \`artifacts/provenance-${host_target}.intoto.json.sig\`"
                   } >> "$GITHUB_STEP_SUMMARY"

.github/workflows/docs-deploy.yml

@@ -217,7 +217,7 @@ jobs:
                   cp -R docs/. site/docs/
                   cp README.md site/README.md
                   cat > site/index.md <<'EOF'
-                  # ZeroClaw Docs Preview
+                  # ZeroBuild Docs Preview
 
                   This preview bundle is produced by `.github/workflows/docs-deploy.yml`.
 
@@ -260,7 +260,7 @@ jobs:
                   cp -R docs/. site/docs/
                   cp README.md site/README.md
                   cat > site/index.md <<'EOF'
-                  # ZeroClaw Documentation
+                  # ZeroBuild Documentation
 
                   This site is deployed automatically from `main` by `.github/workflows/docs-deploy.yml`.
 

.github/workflows/main-branch-flow.md

@@ -77,15 +77,15 @@ Notes:
    - `flake-probe` (single-retry telemetry; optional block via `CI_BLOCK_ON_FLAKE_SUSPECTED`)
    - `docs-quality`
 7. If `.github/workflows/**` changed, `workflow-owner-approval` must pass.
-8. If root license files (`LICENSE-APACHE`, `LICENSE-MIT`) changed, `license-file-owner-guard` allows only PR author `willsarg`.
+8. If root license files (`LICENSE-APACHE`, `LICENSE-MIT`) changed, `license-file-owner-guard` allows only PR author `louisdevzz`.
 9. `lint-feedback` posts actionable comment if lint/docs gates fail.
 10. `CI Required Gate` aggregates results to final pass/fail.
 11. Maintainer merges PR once checks and review policy are satisfied.
 12. Merge emits a `push` event on `dev` (see scenario 4).
 
 ### 2) PR from fork -> `dev`
 
-1. External contributor opens PR from `fork/<branch>` into `zeroclaw:dev`.
+1. External contributor opens PR from `fork/<branch>` into `zerobuild:dev`.
 2. Immediately on `opened`:
    - `pull_request_target` workflows start with base-repo context and base-repo token:
      - `pr-intake-checks.yml`
@@ -182,7 +182,7 @@ Workflow: `.github/workflows/pub-release.yml`
    - trigger provenance is emitted as `release-trigger-guard` artifacts.
 3. `build-release` builds matrix artifacts across Linux/macOS/Windows targets.
 4. `verify-artifacts` runs `scripts/ci/release_artifact_guard.py` against `.github/release/release-artifact-contract.json` in verify-stage mode (archive contract required; manifest/SBOM/notice checks intentionally skipped) and uploads `release-artifact-guard-verify` evidence.
-5. In publish mode, workflow generates SBOM (`CycloneDX` + `SPDX`), `SHA256SUMS`, and a checksum provenance statement (`zeroclaw.sha256sums.intoto.json`) plus audit-event envelope.
+5. In publish mode, workflow generates SBOM (`CycloneDX` + `SPDX`), `SHA256SUMS`, and a checksum provenance statement (`zerobuild.sha256sums.intoto.json`) plus audit-event envelope.
 6. In publish mode, after manifest generation, workflow reruns `release_artifact_guard.py` in full-contract mode and emits `release-artifact-guard.publish.json` plus `audit-event-release-artifact-guard-publish.json`.
 7. In publish mode, workflow keyless-signs release artifacts and composes a supply-chain release-notes preface via `release_notes_with_supply_chain_refs.py`.
 8. In publish mode, workflow verifies GHCR release-tag availability.

.github/workflows/pr-auto-response.yml

@@ -55,12 +55,12 @@ jobs:
 
             Before maintainers triage it, please confirm:
             - Repro steps are complete and run on latest `main`
-            - Environment details are included (OS, Rust version, ZeroClaw version)
+            - Environment details are included (OS, Rust version, ZeroBuild version)
             - Sensitive values are redacted
 
             This helps us keep issue throughput high and response latency low.
           pr_message: |
-            Thanks for contributing to ZeroClaw.
+            Thanks for contributing to ZeroBuild.
 
             For faster review, please ensure:
             - PR template sections are fully completed

.github/workflows/pub-docker-img.yml

@@ -61,18 +61,18 @@ jobs:
                   load: true
                   provenance: false
                   sbom: false
-                  tags: zeroclaw-pr-smoke:latest
+                  tags: zerobuild-pr-smoke:latest
                   labels: ${{ steps.meta.outputs.labels || '' }}
                   platforms: linux/amd64
                   cache-from: type=gha
                   cache-to: type=gha,mode=max
 
             - name: Verify image
-              run: docker run --rm zeroclaw-pr-smoke:latest --version
+              run: docker run --rm zerobuild-pr-smoke:latest --version
 
     publish:
         name: Build and Push Docker Image
-        if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') && github.repository == 'zeroclaw-labs/zeroclaw'
+        if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') && github.repository == 'zerobuild-labs/zerobuild'
         runs-on: [self-hosted, Linux, X64, aws-india, blacksmith-2vcpu-ubuntu-2404, hetzner]
         timeout-minutes: 45
         permissions:

.github/workflows/pub-prerelease.yml

@@ -203,9 +203,9 @@ jobs:
               run: |
                   set -euo pipefail
                   mkdir -p artifacts
-                  cp target/x86_64-unknown-linux-gnu/release-fast/zeroclaw artifacts/zeroclaw
-                  tar czf artifacts/zeroclaw-x86_64-unknown-linux-gnu.tar.gz -C artifacts zeroclaw
-                  rm artifacts/zeroclaw
+                  cp target/x86_64-unknown-linux-gnu/release-fast/zerobuild artifacts/zerobuild
+                  tar czf artifacts/zerobuild-x86_64-unknown-linux-gnu.tar.gz -C artifacts zerobuild
+                  rm artifacts/zerobuild
 
             - name: Generate manifest + checksums
               shell: bash