2026-04-22 — SSOT consolidation: docs site as single source of truth

2026-04-25 edit: Follow-up bullet 5 scrubbed of the leaked PAT prefix per feedback_never_quote_secret_characters.md. Rotation and revocation completed 2026-04-25 (see #641 for the audit trail).

What changed

• Declared https://docs.fragjulia.de (sourced from apps/docs/content/docs/) the single authoritative description of how fragJulia works.
• Added apps/docs/content/docs/operations/ssot-discipline.mdx describing the principle, the changelog contract, and the issue-closure audit rule.
• Added apps/docs/content/docs/changelog/ (this directory) with this seed entry.
• Added .github/pull_request_template.md with required checkboxes for changelog entry and SSOT doc updates.
• Added .github/workflows/docs-guard.yml — a PR-blocking check that requires a new file under apps/docs/content/docs/changelog/. Bypassable only with the no-changelog label and a stated reason.
• Rewrote the repo-root CLAUDE.md from a ~200-line duplicate-of-global file into a ~60-line local-rules pointer.

Why

Working documents (handoffs, design deltas, plans) had accumulated across OneDrive, ~/.claude/files by dave/, and multiple parallel clones. Claude sessions were writing HANDOFF-*.md directly into C:\Users\dapar\OneDrive\Dokumente\Claude\Projects\fragJUlia\ — a path the user didn't intend to sync. Five parallel fragJulia clones existed on five different branches, each with its own divergent work. The project CLAUDE.md duplicated 100+ lines of ToolSearch rules that already live in the global ~/.claude/global-CLAUDE.md. A GitHub PAT had leaked into three allowedTools permission strings in ~/.claude/settings.local.json.

SSOT plus the CI-enforced changelog gives every change one place to land and one trail of record. The local-clone rule stops OneDrive sync from corrupting git state. Together they end the "works on session A, broken in session B" failure mode.

Scope of this entry

This is a governance change, not a feature change. No user-visible behavior is altered. closes: points to the SSOT epic (#640).

Follow-ups

• Migrate DesignGUIDE/fragjulia-design-brief-v3.md into apps/docs/content/docs/design/ and delete the legacy directory.
• Migrate the 9 HANDOFF-2026-04-22-*.md files currently in ~/OneDrive/Dokumente/Claude/Projects/fragJUlia/ into apps/docs/content/docs/operations/ or discard as session-scoped.
• Migrate PLAN.md and LAUNCH-AUDIT-*.md from the repo root into apps/docs/content/docs/operations/.
• Consolidate the 5 parallel clones (~/fragjulia/, ~/Documents/Claude/Projects/fragjulia/, ~/AppData/Local/Temp/fragjulia/, ~/~/fragjulia/, C:\code\fragjulia) into C:\code\fragjulia with git worktrees for each active branch, preserving uncommitted work.
• Rotate the leaked PAT and update ~/.claude.json with the new value. Done 2026-04-25 (see #641).
• Add the post-merge audit cron that tags issues closed without a matching changelog entry.