Governed automation identity for xFactory — Opensoft's
family of agent-executed expert-work factories built on the
domain-neutral openxFactory contract layer.

This app grants xFactory workflows scoped, short-lived repository
access (per-run installation tokens, no long-lived credentials):

• Today — the nightly doc-health pipeline: deterministic
  governance-corpus checks across the factory repos, with dated
  reports and a ranked remediation plan.
• Next — governed engineering automation: feature decomposition,
  Spec Kit execution, gated PR admission, and merge readiness.

Boundaries by contract:

• The factory reports and stages — it never approves or merges
  another repository's content; approval authority stays with each
  repo's own gates and branch protection.
• Repository access is controlled per installation and can be
  narrowed or revoked at any time.
• Permission expansions require explicit re-approval on every
  installation.

Managed by Opensoft.