CI Quality Gates

GitHub Actions runs Quality Gates for every pull request and every push to master. It validates repository quality only; it does not deploy, promote default gateway routes, run live browser flows, or use production secrets.

Jobs

Job	Gate
Service readiness	make test-service-readiness, including service-agent registries, task packs, and service Go tests
Runtime foundation	make test-runtime-foundation, using non-destructive Compose, migration, route, Helm, and K8s manifest coverage
Frontend and docs	install, lint, typecheck, test, frontend build, VitePress build, and git diff --check

The Go jobs pin GOTOOLCHAIN=go1.25.11 through the root Makefile. This avoids using an unsupported shell or IDE Go launcher for service verification.

Local Reproduction

Run the same jobs before opening a pull request:

make test-service-readiness
make test-runtime-foundation
pnpm frontend:lint
pnpm frontend:typecheck
pnpm frontend:test
pnpm frontend:build
pnpm docs:build
git diff --check

Live route/browser smoke, production-like data migrations, and local-K8s runs remain explicitly opt-in. Their task packs require dedicated evidence and rollback review; CI does not convert an incomplete migration or route rehearsal into completion evidence.