@@ -76,6 +76,17 @@ Provide an opt-in way for independent maintainers to report how they use Knowled
 - Publish the library from reviewable repository data so additions, corrections, provenance, and removal history remain auditable.
 - Do not add telemetry, phone-home behavior, or automatic usage reporting to the generator.
 
+### Citation, supply-chain evidence, and signing
+
+This template is both a reusable MIT template and the canonical site for the Knowledge-as-Code pattern. Decisions recorded 2026-10-09 from the processed 2026-09-01 signing, Scorecard and citation handoff:
+
+- Citation must not collapse the template and the canonical pattern. Decide whether the preferred citation names the pattern, the template implementation, or both through a preferred-citation relationship before publishing metadata.
+- OpenSSF Scorecard runs with a zero-dependency annotation. Dependency-related checks are handled with justified N/A or maintainer annotations; no dependencies are added to improve a score. Publish a result only after material findings are resolved or documented. Defer a Best Practices application until the GuideCheck pilot sets a reusable pattern.
+- CITATION.cff: add and validate a root file (creator, title, version, date, license, repository) and confirm GitHub shows "Cite this repository".
+- OpenSSF Scorecard: run read-only, review action pinning, token permissions, branch protection, SAST applicability, dangerous workflows and signed releases.
+- Zenodo/DOI decision: choose whether the archived object is the reusable template release or the canonical pattern/site record; do not archive generated demo output; add a DOI only after the immutable record resolves.
+- Signing: sign future commits and future annotated release tags; do not replace v1.1.2 solely to add a signature.
+
 ## Reserved direction: Canon Map public home
 
 Recorded 2026-06-09, migrated from a session disposition note on 2026-08-28.