I found the following talk by Vicky Brasseur really useful and relevant to our situation:
The abstract of the talk (at the SeaGL conference) can be found here: Open Source Governance By Example :: SeaGL 2024 :: pretalx
She recommends the methodology of first documenting the current state of play and then making changes to it, as @Martin has been doing. Keep it up Martin!