From c908672d09891f346da2fc5d13dae42e58b0bee6 Mon Sep 17 00:00:00 2001
From: 4444jPPP <etceter4@etceter4.com>
Date: Mon, 20 Apr 2026 11:51:24 -0400
Subject: [PATCH] feat: add CLA enforcement via contributor-assistant

Activates Contributor License Agreement checking on all external PRs.
Signatures stored in signatures/cla.json. CLA document hosted at
meta-organvm/.github/CLA.md. Owner and bots allowlisted.

Per SOP--open-source-licensing-and-ip.md Phase III mandate.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 .github/workflows/cla.yml | 36 ++++++++++++++++++++++++++++++++++++
 signatures/cla.json       |  1 +
 2 files changed, 37 insertions(+)
 create mode 100644 .github/workflows/cla.yml
 create mode 100644 signatures/cla.json

diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml
new file mode 100644
index 0000000..408f435
--- /dev/null
+++ b/.github/workflows/cla.yml
@@ -0,0 +1,36 @@
+name: CLA Assistant
+on:
+  issue_comment:
+    types: [created]
+  pull_request_target:
+    types: [opened, closed, synchronize]
+
+permissions:
+  actions: write
+  contents: write
+  pull-requests: write
+  statuses: write
+
+jobs:
+  CLAssistant:
+    runs-on: ubuntu-latest
+    steps:
+      - name: CLA Assistant
+        if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target'
+        uses: contributor-assistant/github-action@v2.6.1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          path-to-signatures: 'signatures/cla.json'
+          path-to-document: 'https://github.com/meta-organvm/.github/blob/main/CLA.md'
+          branch: 'main'
+          allowlist: 'bot*,dependabot[bot],github-actions[bot],4444J99'
+          custom-notsigned-prcomment: |
+            Thank you for your contribution to **recursive-engine--generative-entity**! Before we can merge this PR, we need you to sign our [Contributor License Agreement](https://github.com/meta-organvm/.github/blob/main/CLA.md).
+
+            To sign, please comment on this PR with:
+
+            > I have read the CLA Document and I hereby sign the CLA
+
+            This is a one-time requirement that covers all future contributions to the ORGANVM ecosystem.
+          custom-pr-sign-comment: 'I have read the CLA Document and I hereby sign the CLA'
diff --git a/signatures/cla.json b/signatures/cla.json
new file mode 100644
index 0000000..fe51488
--- /dev/null
+++ b/signatures/cla.json
@@ -0,0 +1 @@
+[]