docs: record E-Shop v1 kickoff approval

Merge PR #12: keep only Discord and LLM provider external; classify Lego-maintained home-lab services as internal containers.

docs/governance/decisions.md

@@ -8,6 +8,7 @@ sidebar_position: 2
 
 | Date | Decision | Scope | Owner | Record |
 |---|---|---|---|---|
+| 2026-08-26 | Authorize E-Shop v1 kickoff, toothbrush-commerce MVP, and bounded bootstrap autonomy | E-Shop v1 | RootAtSkic | [E-Shop v1 kickoff and bootstrap autonomy](/governance/decisions/eshopv1-kickoff-bootstrap-autonomy/) |
 | 2026-08-25 | Add Piotras to the Corp v1 Board and every active project | Corp v1 governance, AeroSim, Maze Next Gen | RootAtSkic | [Piotras Board and all-project membership](/governance/decisions/piotras-board-all-project-membership/) |
 | 2026-08-20 | Add Jenny to the Corp v1 Board and every active project | Corp v1 governance, AeroSim, Maze Next Gen | RootAtSkic | [Jenny Board and all-project membership](/governance/decisions/jenny-board-all-project-membership/) |
 | 2026-08-17 | Add Linas to the Corp v1 Board and AeroSim | Corp v1 governance and AeroSim | RootAtSkic | [Linas Board and AeroSim membership](/governance/decisions/linas-board-aerosim-membership/) |

docs/governance/decisions/eshopv1-kickoff-bootstrap-autonomy.md

@@ -0,0 +1,73 @@
+---
+title: "E-Shop v1 kickoff and bootstrap autonomy"
+description: "Record the approved E-Shop v1 kickoff, MVP scope, and bounded General-channel bootstrap authority."
+---
+
+# E-Shop v1 kickoff and bootstrap autonomy — 2026-08-26
+
+## Decision
+
+Begin provisioning **E-Shop v1**, code `eshopv1`, as a restricted Corp v1 project with RootAtSkic as sponsor and accountable lead and Hermes (`jarvis-at-skic`) as the initial technical member.
+
+Approval was explicit from Board member RootAtSkic (`discord:1518725627845283888`) in Discord message `1542278257833939087` on 2026-08-26 after review of the complete proposal.
+
+## MVP outcome
+
+Deliver a functional toothbrush e-commerce website with:
+
+- twelve sourced AliExpress toothbrush products;
+- locally stored product images with source attribution rather than hotlinking;
+- EUR retail prices calculated from captured AliExpress item prices using `source price × 1.50`, rounded to cents;
+- product listing and gallery;
+- shopping cart;
+- PayPal Sandbox checkout through a server-side credential boundary;
+- order confirmation;
+- responsive and accessibility checks;
+- private source and documentation repositories, CI/CD, home-lab deployment, and deployed readback.
+
+Live PayPal payments, purchases, spending, vendor-account changes, legal/commercial go-live, and any secret value remain separately gated.
+
+## Authorized resources
+
+- Exactly seven same-project Discord channels under `corp-v1`: General, Scope, Architecture, UI/UX, Kanban, Delivery, and Releases.
+- Private project organization `corp-v1-eshopv1`.
+- Private skills organization `corp-v1-eshopv1-skills-code-agent`.
+- Application repository `corp-v1-eshopv1` and documentation repository `corp-v1-eshopv1-documentation`.
+- Seven adopted engineering skills and seven adopted channel skills, all suffixed `--eshopv1`.
+- Project and skills organization teams for RootAtSkic and `jarvis-at-skic`.
+- One 30-minute bootstrap job delivered only to `corp-v1-eshopv1-general`.
+
+## Project-local authorization
+
+```yaml
+override_id: ESHOPV1-BOOTSTRAP-AUTONOMY-20260826
+authorization_evidence: discord-message-1542278257833939087
+project: eshopv1
+delegator: discord-user-1518725627845283888-root-at-skic
+delegate: hermes-agent-operating-eshopv1
+cadence: every-30-minutes
+channel_boundary:
+  - corp-v1-eshopv1-general
+  - corp-v1-eshopv1-scope
+  - corp-v1-eshopv1-architecture
+  - corp-v1-eshopv1-ui-ux
+  - corp-v1-eshopv1-kanban
+  - corp-v1-eshopv1-delivery
+  - corp-v1-eshopv1-releases
+scope:
+  - create and maintain project scope, architecture, UI/UX, Kanban, delivery, and release artifacts
+  - create branches, commits, pushes, pull requests, and review evidence
+  - merge eligible exact-head-green project changes
+  - build, publish, deploy, and verify the approved Sandbox MVP
+  - keep the seven-channel lifecycle moving through project-adopted skills
+stop_condition: first-human-authored-message-in-any-project-channel
+preserve_on_reference_adoption: true
+```
+
+Before every mutation, the job must scan only the seven project channels and distinguish human authors from Hermes, bots, and webhooks. The first human-authored project-channel message ends bootstrap autonomy. The run must make no further autonomous mutation, cite the stopping message, report in General, and pause or remove the job.
+
+The delegation does not authorize secret-value access or disclosure, spending, purchases, production-payment enablement, vendor-account changes, legal/commercial commitments, unrelated infrastructure changes, or destructive/irreversible operations.
+
+## Current state
+
+Approved. Provisioning and independently verified completion evidence will be appended as resources become available.