data.md

Contributing to Infrastructure (infra/, .github/workflows/, docs/)

This guide complements CONTRIBUTING.md and covers infra-specific contribution guidelines.

Scope

The infra folder includes:

• infra/ — deployment configs, Docker Compose, terraform/pulumi
• .github/workflows/ — CI/CD pipelines
• docs/ — architecture, deployment, runbooks, standards

Branch Protection

The main branch is protected with enforced rules:

• Required status checks: Docker CI and E2E Status Gate must pass
• PR reviews: At least 1 approval required
• Force pushes: Disallowed

See docs/branch-protection.md for detailed configuration and setup instructions.

Principles

1. All infra changes must be reviewed — no direct pushes to main
2. Docs must stay in sync with code — update docs in the same PR
3. Secrets never committed — use Docker secrets, env files, or GH secrets
4. Test changes on testnet first — never test directly on mainnet

CI Workflow Changes

When editing .github/workflows/*.yml:

• Test workflow syntax: act locally or push to a branch
• Verify no hardcoded secrets or credentials
• Use gha cache mode for Docker layer caching

Adding a New Doc

1. Create file under docs/ following existing naming: kebab-case.md
2. Add a cross-reference in infra/README.md
3. Keep markdown linted: npx markdownlint docs/<file>

Reviewing Infra PRs

Check for:

• ✅ No plaintext secrets
• ✅ Docker layer caching enabled
• ✅ Multi-arch build support
• ✅ Documentation updated
• ✅ Rollback procedure documented