Post-merge follow-ups from #27 (governance reconciliation)

[bryanfawcett]

Tracking the three follow-ups left open after #27 merged. None block anything; each is an action for the Founder / org owner.

1. Legal review of CLA.md

CLA.md was added in #27 as a working template (copyright + patent licence grant, not an assignment; Zimbabwe governing law). It is not a substitute for counsel.

• Have legal counsel review CLA.md before any contributor is asked to sign it.
• Fold any required changes back via PR.

2. Confirm the Bundu Foundation rename rode under NA-01 Article 17 (not 17.1(a))

#27 renamed the sovereign-asset steward "Mukoko Foundation" → Bundu Foundation (NA-01 v1.1). The Foundation is one of the three named voting shareholders (Art. 1.3), so this brushes against Art. 17.1(a) (amendments affecting decisions reserved to shareholders require Board approval).

Working read: it rode as a Founder written decision under Art. 17 — identity-only, no decision right or share allocation changed. This item is just to record that determination.

• Founder confirms the rename was an Art. 17 written decision (no Art. 17.1(a) Board approval required), or routes it for Board approval if disagreed.

3. Single-member code-owner teams (merge deadlock risk)

#27 stalled because every code-owner team had only one member — the Founder — who was also the PR author and so could not satisfy the required Code Owners review. Resolved for that PR by adding nyuchisupport to @nyuchi/maintainers. The other teams remain single-member, so the same deadlock will recur on PRs touching their paths:

Team	Owns (per .github/CODEOWNERS)	Members
@nyuchi/security	SECURITY.md, AGENTS.md, ORG_SETTINGS.md	bryanfawcett only
@nyuchi/platform	.github/workflows/**, dependabot*.yml	bryanfawcett only
@nyuchi/marketing	/profile/**	bryanfawcett only

• Add a second member to @nyuchi/security, @nyuchi/platform, and @nyuchi/marketing (e.g. nyuchisupport), or
• Relax the branch-protection "Require review from Code Owners" rule for this repo, or
• Narrow .github/CODEOWNERS so these paths only require @nyuchi/maintainers.

---

Filed as the post-merge record for #27.