Add qsl governance metadata for ops-control bridge (#7)

Co-authored-by: Codex <noreply@openai.com>

Author: Pigbibi

README.md

@@ -31,6 +31,15 @@ When a source issue contains a `codex-pr-feedback` marker from a failed CI run o
 
 This avoids hard-coding Codex CLI setup in every source repository and avoids depending on a repository outside the `QuantStrategyLab` organization.
 
+## Compatibility governance role
+
+QuantStrategyLab `AIAuditBridge` is an ops/control-plane consumer only:
+
+- It consumes compatibility governance metadata to align audit/review execution contracts.
+- It must **not** participate in trading runtime dependency graphs or strategy/runtime upgrade flows.
+- All governance references from this repo should be interpreted as control-plane/tooling compatibility, not runtime coupling.
+
+
 ## Supported source repositories
 
 | Source repository | Allowed task |

README.zh-CN.md

@@ -31,6 +31,14 @@ Codex 执行现在只走 service backend：workflow 从 GitHub-hosted runner 调
 
 这样可以避免每个 source repository 都硬编码 Codex CLI，也不会依赖 `QuantStrategyLab` 组织外的仓库。
 
+## 兼容性治理定位
+
+`QuantStrategyLab/AIAuditBridge` 只作为 ops/control-plane 的消费侧参与兼容治理：
+
+- 仅消费兼容矩阵和治理元数据，确保审计/评审边界行为一致；
+- 不参与策略/交易运行时的依赖图、升级决策或 runtime 级联；
+- 本仓库中的兼容关系只用于审计与 review 运营（control-plane），不应被源仓库当作交易策略运行时依赖。
+
 ## 支持的 source repository
 
 | Source repository | 允许的 task |

qsl.toml

@@ -0,0 +1,6 @@
+tier = "ops-tooling"
+ring = 4
+runtime_dependency = false
+
+[compat]
+bundle = "2026.07.0"

tests/test_qsl_metadata.py

@@ -0,0 +1,32 @@
+"""Validate qsl governance metadata for control-plane repos."""
+
+from __future__ import annotations
+
+from pathlib import Path
+import unittest
+
+try:
+    import tomllib
+except ModuleNotFoundError:  # pragma: no cover
+    import tomli as tomllib  # type: ignore[import-not-found]
+
+
+class TestQslMetadata(unittest.TestCase):
+    """AIAuditBridge is a control-plane bridge, not runtime dependency."""
+
+    def _load_qsl(self) -> dict:
+        with Path("qsl.toml").open("rb") as handle:
+            return tomllib.load(handle)
+
+    def test_qsl_file_exists(self) -> None:
+        self.assertTrue(Path("qsl.toml").exists())
+
+    def test_qsl_metadata_values(self) -> None:
+        qsl = self._load_qsl()
+        self.assertEqual(qsl.get("tier"), "ops-tooling")
+        self.assertEqual(qsl.get("ring"), 4)
+        self.assertIs(qsl.get("runtime_dependency"), False)
+
+        compat = qsl.get("compat")
+        self.assertIsInstance(compat, dict)
+        self.assertEqual(compat.get("bundle"), "2026.07.0")