[openboa]

Existing ownership prose incorrectly treated multiple account handles as independent review. Correct only that wording, preserve every CODEOWNERS route, and add a proposed solo-agent successor document linked from README. The draft separates fresh-context review evidence from merge authority, requires exact-base/head evidence, keeps candidate configuration/hooks out of a credential-bearing reviewer, prohibits moving subscription authentication into public Actions, and identifies the authoritative-producer and GitHub Free enforcement decisions still pending.

The document cites official OpenAI, Anthropic, and GitHub guidance, including the scoped November 2, 2026 pull_request_target default-policy deadline and migration intent without a broad opt-out or unsafe checkout. Zero ordinary human approvals is a proposed outcome only after authoritative gating exists; protected high-impact changes still need one explicit owner confirmation for the concrete proposal. This PR changes no live policy, workflow/code, settings, permissions, ownership route, AGENTS.md, or SECURITY.md.

Base: 700dacb. Head: 5041cdd. Local validation: npm test 31 passed, 1 existing platform skip (non-UTF8 path fixture); all workflow Actionlint, shell/Node syntax, unchanged-route/instruction assertions, new-document Markdown lint, and git diff checks passed. The existing README 96-character Markdown line remains unchanged. The added deadline paragraph received focused Markdown/diff validation; tests were not repeated because executable code and test assertions were unchanged.

Hosted run36714662387 is terminal failure at the exact head above. Trusted policy/secret scanning/isolated verification and JavaScript/TypeScript CodeQL passed. Actions CodeQL analysis succeeded, then the unchanged raw SARIF gate failed with one finding; the required aggregate consequently failed. This preserves the existing central blocker without suppressing a result or weakening a gate. This remains a draft for review, not authorization to migrate or merge.