baseline: IoMT risk v0.1 skeleton + CSV→XLSX tool + CI + README

Author: mak3r-cyber

.github/workflows/csv2xlsx.yml

@@ -6,15 +6,13 @@ on:
       - 'tools/csv2xlsx.py'
       - '.github/workflows/csv2xlsx.yml'
   workflow_dispatch:
-
 jobs:
   build:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v5
-        with:
-          python-version: '3.11'
+        with: { python-version: '3.11' }
       - run: python -m pip install --upgrade pip
       - run: pip install pandas openpyxl
       - run: python tools/csv2xlsx.py

README.md

@@ -2,15 +2,22 @@
 
 Open-source toolkit for risk assessment in healthcare environments and medical IoT (IoMT).
 
-**Focus:** auditable risk matrices, clear methodology, and automation for basic reporting.
+**Focus:** auditable risk matrices, clear methodology, and basic automation for reporting.
 
 ## What's included (v0.1)
-- Manual risk matrix template (CSV → XLSX through GitHub Actions)
+- Manual risk matrix template (CSV → XLSX via GitHub Actions)
 - EBIOS RM Light adaptation notes
 - Remediation planning skeleton (Mermaid)
 
 ## Repository layout
-- `02-Matrices/` → risk matrix CSV (source of truth) → XLSX artifact  
-- `03-Methodology/` → method notes (EBIOS RM Light, scales, decisions)  
-- `04-Planning/` → remediation roadm
+- `02-Matrices/` → risk matrix CSV (source of truth) → XLSX artifact
+- `03-Methodology/` → method notes (EBIOS RM Light, scales, decisions)
+- `04-Planning/` → remediation roadmap
+- `docs/reports/` → build artifacts
 
+## Usage
+Edit `02-Matrices/risk_matrix.csv`, then push.
+GitHub Actions builds `docs/reports/risk_matrix.xlsx` as an artifact.
+
+## Scope and ethics
+Educational scope only. No patient data. Synthetic samples.