docs(maturity): consolidate remaining backlog into one canonical tracker

[BigSimmo]

Summary

Make docs/maturity-backlog-workorders.md the single, git-findable list of remaining maturity
work, by folding in the two items that previously lived only in the audit report:

• X7 · Complete the src/lib domain-directory reorg — the follow-on to the X2 rag pilot (refactor(rag): extract the rag cluster into src/lib/rag/ (maturity X2) #994);
  one cluster per PR via git mv + import codemod. Flagged that the answer/retrieval clusters touch
  RAG-ranking surfaces and need the RAG impact: line.
• M1 · Repo-host hardening — a new "Maintainer host actions (GitHub UI — not repo files)" section
  mirroring audit §8 (branch-protection rulesets, required checks, secret scanning, auto-delete
  merged branches, etc.). Notes the sharp <0.35.0 advisory item is now resolved on main.

Plus the two matching progress-summary rows and an intro note pointing at §8. This closes the "split
across two docs" gap so a future reader (or a fresh session) finds everything from one file.

Verification

• npm run docs:check-links — 1278 repo path references resolve
• npm run docs:check-scripts — 369 npm-run references resolve
• npm run docs:check-index — codebase-index coverage OK
• npm run format:check — clean (Prettier realigned the summary table)
• Not run: lint/typecheck/test — docs-only change, no source touched.

Risk and rollout

• Risk: none — a single documentation file; no code, config, or behaviour change.
• Rollback: revert the single commit.
• Provider or production effects: None.

Clinical Governance Preflight

Not applicable — documentation only. No ingestion, answer generation, retrieval/ranking, source
governance, document access, privacy, schema, or production behaviour changed.

🤖 Generated with Claude Code

---

Generated by Claude Code

Summary by CodeRabbit

• Documentation
  • Expanded the maturity backlog with additional planning context and scope.
  • Added the X7 work order for completing the src/lib domain-directory reorganization, including affected areas and verification guidance.
  • Added maintainer host actions for repository hardening, with links to the relevant checklist.
  • Updated the progress summary to include the new maintainer action while preserving existing statuses.

[supabase]

This pull request has been ignored for the connected project sjrfecxgysukkwxsowpy because there are no changes detected in supabase directory. You can change this behaviour in Project Integrations Settings ↗︎.

---

Preview Branches by Supabase.
Learn more about Supabase Branching ↗︎.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 8cc652dc-b719-4a74-80fa-5ba6855d9a2e

📥 Commits

Reviewing files that changed from the base of the PR and between 3e65844 and e89136d.

📒 Files selected for processing (1)

• docs/maturity-backlog-workorders.md

---

📝 Walkthrough

Walkthrough

The maturity backlog document now references its mirrored repository-host checklist, adds the open X7 src/lib reorganization work order, defines maintainer-only M1 host hardening actions, and includes M1 in the progress summary.

Changes

Maturity backlog documentation

Layer / File(s)	Summary
Backlog scope and X7 work order docs/maturity-backlog-workorders.md	Adds the checklist cross-reference and documents the open X7 reorganization scope, affected areas, risk guidance, and verification commands.
Maintainer actions and progress tracking docs/maturity-backlog-workorders.md	Defines the GitHub UI-only M1 hardening action and adds its open status to the progress summary.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Possibly related PRs

• BigSimmo/Database#985: Updates the same maturity backlog work-order document and its status tracking.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately summarizes the docs-only consolidation into a single canonical maturity backlog tracker.
Description check	✅ Passed	The description covers Summary, Verification, Risk and rollout, and Clinical Governance sections, with clear docs-only context.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, add credits to your account and enable them for code reviews in your settings.