feat: add Shiora, ZeroID, NoblePay dApps and protocol-wide updates

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,11 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Security reports
+    url: mailto:security@aethelred.io
+    about: Report vulnerabilities privately. Do not use public issues.
+  - name: Documentation
+    url: https://docs.aethelred.io
+    about: Start with the docs, guides, and runbooks.
+  - name: Community support
+    url: https://discord.gg/aethelred
+    about: Ask questions and get routed to the right maintainer or repo.

.github/ISSUE_TEMPLATE/feature_request.md

@@ -36,4 +36,4 @@ assignees: ''
 
 ---
 
-> For major protocol changes, please open an [Aethelred Improvement Proposal](https://github.com/aethelred/AIPs) instead.
+> For major protocol changes, please open an [Aethelred Improvement Proposal](https://github.com/aethelred-foundation/AIPs) instead.

.github/README.md

@@ -0,0 +1,28 @@
+# GitHub Configuration
+
+This directory contains the repository-wide GitHub configuration for Aethelred.
+
+## What Lives Here
+
+- `workflows/`: CI, security, release, deployment, SDK, docs, and launch gates
+- `ISSUE_TEMPLATE/`: issue intake templates for bugs and feature requests
+- `PULL_REQUEST_TEMPLATE.md`: pull request checklist and contributor expectations
+- `branch-protection/`: required check definitions used to keep launch branches honest
+- `dependabot.yml`: dependency update policy
+
+## Operating Rules
+
+- Treat workflow changes as production-affecting changes.
+- Keep required gates aligned with `docs/operations/GATE_INVENTORY.md`.
+- Do not merge workflow or branch-protection changes without corresponding evidence.
+- Release and launch changes must follow `docs/operations/FREEZE_POLICY.md`.
+
+## Maintainers
+
+Primary owners for this directory are Release Engineering, Security, and Core Protocol.
+
+## Related Docs
+
+- `docs/operations/GATE_INVENTORY.md`
+- `docs/operations/FREEZE_POLICY.md`
+- `docs/VALIDATOR_RUNBOOK.md`

.github/branch-protection/required-checks.json

@@ -1,40 +1,44 @@
 {
   "default": [
-    "Core Required Gate",
     "Contracts Required Gate",
     "Rust Required Gate",
     "Security Required Gate",
     "Sandbox Required Gate",
-    "Docker Required Gate"
+    "Docker Required Gate",
+    "Load Test Required Gate",
+    "Fuzzing Required Gate",
+    "dApps Required Gate"
   ],
   "main": [
-    "Audit Signoff Required Gate",
-    "Core Required Gate",
     "Contracts Required Gate",
     "Rust Required Gate",
     "Security Required Gate",
     "Sandbox Required Gate",
-    "Load Test Required Gate",
     "Docker Required Gate",
-    "E2E Required Gate"
+    "Load Test Required Gate",
+    "Fuzzing Required Gate",
+    "E2E Required Gate",
+    "dApps Required Gate"
   ],
   "develop": [
-    "Core Required Gate",
     "Contracts Required Gate",
     "Rust Required Gate",
     "Security Required Gate",
     "Sandbox Required Gate",
-    "Docker Required Gate"
+    "Docker Required Gate",
+    "Load Test Required Gate",
+    "Fuzzing Required Gate",
+    "dApps Required Gate"
   ],
   "release/*": [
-    "Audit Signoff Required Gate",
-    "Core Required Gate",
     "Contracts Required Gate",
     "Rust Required Gate",
     "Security Required Gate",
     "Sandbox Required Gate",
-    "Load Test Required Gate",
     "Docker Required Gate",
-    "E2E Required Gate"
+    "Load Test Required Gate",
+    "Fuzzing Required Gate",
+    "E2E Required Gate",
+    "dApps Required Gate"
   ]
-}
+}

.github/dependabot.yml

@@ -10,7 +10,7 @@ updates:
       interval: "weekly"
       day: "monday"
     reviewers:
-      - "aethelred/core-team"
+      - "aethelred-foundation/core-team"
     labels:
       - "dependencies"
       - "go"
@@ -61,12 +61,12 @@ updates:
 
   # Solidity contracts (npm)
   - package-ecosystem: "npm"
-    directory: "/contracts/ethereum"
+    directory: "/contracts"
     schedule:
       interval: "weekly"
       day: "tuesday"
     reviewers:
-      - "aethelred/contracts-team"
+      - "aethelred-foundation/contracts-team"
     labels:
       - "dependencies"
       - "solidity"
@@ -77,7 +77,7 @@ updates:
 
   # VSCode extension
   - package-ecosystem: "npm"
-    directory: "/vscode-extension"
+    directory: "/tools/vscode-aethelred"
     schedule:
       interval: "weekly"
       day: "tuesday"

.github/workflows/contracts-ci.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     defaults:
       run:
-        working-directory: contracts/ethereum
+        working-directory: contracts
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
@@ -37,7 +37,7 @@ jobs:
     runs-on: ubuntu-latest
     defaults:
       run:
-        working-directory: contracts/ethereum
+        working-directory: contracts
     steps:
       - uses: actions/checkout@v4
       - uses: foundry-rs/foundry-toolchain@v1

.github/workflows/dapps-ci.yml

@@ -0,0 +1,209 @@
+name: dApps CI
+
+on:
+  push:
+    branches: [main, develop, release/**]
+    paths:
+      - 'dApps/**'
+      - '.github/workflows/dapps-ci.yml'
+  pull_request:
+    branches: [main, develop, release/**]
+    paths:
+      - 'dApps/**'
+      - '.github/workflows/dapps-ci.yml'
+  workflow_dispatch:
+
+jobs:
+  # ---------------------------------------------------------------------------
+  # ZeroID Backend
+  # ---------------------------------------------------------------------------
+  zeroid-backend:
+    name: ZeroID Backend
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: dApps/zeroid/backend
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: "npm"
+          cache-dependency-path: dApps/zeroid/backend/package-lock.json
+      - name: Install dependencies
+        run: npm ci --no-fund
+      - name: Security audit
+        run: npm audit --audit-level=high
+      - name: Lint
+        run: npm run lint
+      - name: Type-check
+        run: npx tsc --noEmit
+      - name: Run tests
+        run: npm test -- --forceExit --ci
+      - name: Build
+        run: npm run build
+
+  # ---------------------------------------------------------------------------
+  # ZeroID Frontend
+  # ---------------------------------------------------------------------------
+  zeroid-frontend:
+    name: ZeroID Frontend
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: dApps/zeroid
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: "npm"
+          cache-dependency-path: dApps/zeroid/package-lock.json
+      - name: Install dependencies
+        run: npm ci --no-fund
+      - name: Lint
+        run: npm run lint
+      - name: Type-check
+        run: npm run type-check
+      - name: Format check
+        run: npm run format:check
+      - name: Run tests with coverage
+        run: npm run test:ci
+      - name: Build
+        run: npm run build
+
+  # ---------------------------------------------------------------------------
+  # Cruzible
+  # ---------------------------------------------------------------------------
+  cruzible:
+    name: Cruzible
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: dApps/cruzible
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: "npm"
+          cache-dependency-path: dApps/cruzible/package-lock.json
+      - name: Install dependencies
+        run: npm ci --no-fund
+      - name: Validate (type-check + lint + format + test)
+        run: npm run validate
+      - name: Build
+        run: npm run build
+
+  # ---------------------------------------------------------------------------
+  # NoblePay
+  # ---------------------------------------------------------------------------
+  noblepay:
+    name: NoblePay
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: dApps/noblepay
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: "npm"
+          cache-dependency-path: dApps/noblepay/package-lock.json
+      - name: Install dependencies
+        run: npm ci --no-fund
+      - name: Validate all components
+        run: npm run validate
+      - name: Build
+        run: npm run build
+
+  # ---------------------------------------------------------------------------
+  # Shiora
+  # ---------------------------------------------------------------------------
+  shiora:
+    name: Shiora
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: dApps/shiora
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: "npm"
+          cache-dependency-path: dApps/shiora/package-lock.json
+      - name: Install dependencies
+        run: npm ci --no-fund
+      - name: Lint
+        run: npm run lint
+      - name: Type-check
+        run: npm run type-check
+      - name: Format check
+        run: npm run format:check
+      - name: Run tests with coverage
+        run: npm run test -- --coverage --ci
+      - name: Build
+        run: npm run build
+
+  # ---------------------------------------------------------------------------
+  # TerraQura
+  # ---------------------------------------------------------------------------
+  terraqura:
+    name: TerraQura
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: dApps/terraqura
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+      - name: Install pnpm
+        run: corepack enable && corepack prepare pnpm@9 --activate
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+      - name: Lint
+        run: pnpm lint
+      - name: Type-check
+        run: pnpm typecheck
+      - name: Run tests
+        run: pnpm test
+      - name: Build
+        run: pnpm build
+
+  # ---------------------------------------------------------------------------
+  # Required gate — all dApps must pass before merge
+  # ---------------------------------------------------------------------------
+  dapps-required-gate:
+    name: dApps Required Gate
+    runs-on: ubuntu-latest
+    needs:
+      - zeroid-backend
+      - zeroid-frontend
+      - cruzible
+      - noblepay
+      - shiora
+      - terraqura
+    if: always()
+    steps:
+      - name: Check all jobs passed
+        run: |
+          if [[ "${{ needs.zeroid-backend.result }}" != "success" ]] ||
+             [[ "${{ needs.zeroid-frontend.result }}" != "success" ]] ||
+             [[ "${{ needs.cruzible.result }}" != "success" ]] ||
+             [[ "${{ needs.noblepay.result }}" != "success" ]] ||
+             [[ "${{ needs.shiora.result }}" != "success" ]] ||
+             [[ "${{ needs.terraqura.result }}" != "success" ]]; then
+            echo "One or more dApps CI jobs failed:"
+            echo "  zeroid-backend: ${{ needs.zeroid-backend.result }}"
+            echo "  zeroid-frontend: ${{ needs.zeroid-frontend.result }}"
+            echo "  cruzible: ${{ needs.cruzible.result }}"
+            echo "  noblepay: ${{ needs.noblepay.result }}"
+            echo "  shiora: ${{ needs.shiora.result }}"
+            echo "  terraqura: ${{ needs.terraqura.result }}"
+            exit 1
+          fi
+          echo "All dApps CI gates passed."