Skip to content

chore(sync): backmerge main into develop after v2.9.2 + release fixes #74

chore(sync): backmerge main into develop after v2.9.2 + release fixes

chore(sync): backmerge main into develop after v2.9.2 + release fixes #74

name: governance-baseline
on:
pull_request:
branches: [develop, main]
push:
branches: [develop, main]
workflow_dispatch:
jobs:
governance:
runs-on: ubuntu-latest
timeout-minutes: 20
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: "3.11"
- name: Syntax checks
run: |
python3 -m py_compile tm src/tm_production.py src/config_manager.py src/storage_paths.py
- name: Validate public release boundary
run: bash scripts/validate-public-boundary.sh
- name: Contract test - storage contract
run: |
set -euo pipefail
bash tests/test_storage_contract.sh 2>&1 | tee /tmp/governance-test-storage.log
- name: Contract test - collaboration event store
run: |
set -euo pipefail
bash tests/test_collaboration_event_store.sh 2>&1 | tee /tmp/governance-test-collaboration.log
- name: Contract test - error exit codes
run: |
set -euo pipefail
bash tests/test_error_exit_codes.sh 2>&1 | tee /tmp/governance-test-exit-codes.log
- name: Public manifest integration tests
run: |
set -euo pipefail
bash tests/test_public_manifest_pipeline.sh 2>&1 | tee /tmp/governance-test-manifest.log
- name: Upload governance diagnostics
if: failure()
uses: actions/upload-artifact@v4
with:
name: governance-diagnostics-${{ github.run_id }}
path: /tmp/governance-test-*.log
if-no-files-found: ignore