pqdc governance toolkit — install and manage all pq* developer tools

Piqued Reproducible Build — Reproducible-build verifier: rebuild a signed firmware/image manifest from source in a sandbox and emit a diff report (nix-build --check + diffoscope; SBOM emission). Used by users, auditors, and transparency-conscious third pa

ForgeKey — Hardware security / credential-presentation authority (BIP-85 derivation, secure element + trusted display + USB-HID approval). Product ROOT scope and brand. Sub-crates: pqfk-spec, pqfk-proto, pqfk-host, pqfk-mcu, pqfk-ui.

Piqued Tool Config — Cross-project tool/config sync: deploy, sync, validate, and template shared workspace config (rustfmt.toml, clippy.toml, deny.toml, .editorconfig, CI workflows, LICENSE/NOTICE, .gitignore) across the pq__ workspace.

pq-mcp — Shared rmcp MCP-server harness for the pq__ suite: server-builder over a tool-router, get_info identity builder, run_stdio (current-thread tokio + stdio), PQ*_TRANSPORT switch, JSON-RPC<->sysexits mapping, optional FS-root jail. Consumers supply

Piqued Flow — Conditional automation for governance responses. If-then rules over pqdx state.

SymbiOS — Memory storage infrastructure for governed AI.

piqued.cc — Hosted governance dashboard. Portfolio intelligence, team workspaces, shared URLs.

Piqued Plugin — Extension and plugin system for the pq__ toolchain. Custom validators, report templates, org rules.

pqctx — The fully-governed ctxrepo profile and tooling: ctxrepo + pqdx + StateVer/SemVer composed. The canonical governed binding of the ctxrepo standard; adoptable by anyone.

Piqued Me — Personal practitioner profile across projects and tools.

Piqued OK — Approval workflows and governance sign-off tracking.

Piqued Knowledge Base — Multi-tenant company knowledge plane. Per-tenant central KB capturing the inner workings and interplay of a company. Other systems and tools query pqkb for tenant-scoped data. Long-form context: ocs-pqx.codex.yaml.

Piqued macOS — macOS-specific ops: Dock, launchd, Keychain, Spotlight metadata, codesign.

Piqued Release — Suite release engineering: version bump, changelog, tag, dependency-ordered multi-registry publish, dual-spec path->version flip at pair-ship, pair-ship coordination, and the manifest reserved->live status flip. The producer-side release

Piqued AA — Automated audit. Scheduled governance checks on autopilot.

Piqued Namespace — Namespace authority for the pqdx ecosystem. Reservation hygiene, manifest validation, and local-tooling integration.

Piqued Windows — Windows-specific ops: PowerToys, Terminal profiles, Quick Access, Task Scheduler, Authenticode.

Piqued Linux — Linux-specific ops: systemd, desktop files, XDG compliance, package repos.

Piqued Update — Self-updater for the entire pq__ toolchain. Check, pull, verify, apply.