13255d60f0
Some checks failed
CI / build (push) Failing after 3s
Phase 1 of AUDIT-2026-Q3.md item P1.6.
The GitHub Actions ci.yml was 6/8 decorative -- every job had either
continue-on-error: true or || true, meaning failure was reported as success.
Restructured into 2 classes:
GATING (must pass for merge):
- build: editable install + verify app/main.py loads + OpenAPI export
- test: pytest tests/unit/ -- failures GATE merge
INFORMATIONAL (fire-and-forget):
- lint-info, typecheck-info, security-info, openapi-info,
qdrant-cleanup-info, heartbeat-info
- All have if: always() and continue-on-error: true
- Their failure is logged in PR checks but does not block merge
This restores CI as an authoritative gate, fixing the "6 jobs are decorative"
issue called out in the audit. Phase 5 will tighten the informational jobs
into hard gates once the underlying errors are fixed (lint debt, mypy gaps,
semgrep config, pip-audit noise).
|
||
|---|---|---|
| .. | ||
| ci.yml | ||
| deploy.yml | ||
| publish.yml | ||