core-v.2.2/.github/workflows/ci.yml at main · AxonOS-org/core-v.2.2 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
name: CI

on:
  push:
    branches: [main, master]
  pull_request:
    branches: [main, master]
  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: core-ci37-${{ github.ref }}
  cancel-in-progress: true

jobs:
  foundation-gate:
    name: "${{ matrix.id }} · ${{ matrix.title }}"
    runs-on: ubuntu-24.04
    timeout-minutes: 20

    strategy:
      fail-fast: false
      matrix:
        include:
          - id: "01"
            title: "Repository source surface"
          - id: "02"
            title: "README product identity"
          - id: "03"
            title: "Version/reference surface"
          - id: "04"
            title: "License surface"
          - id: "05"
            title: "Security surface"
          - id: "06"
            title: "Contribution surface"
          - id: "07"
            title: "Cargo workspace metadata advisory"
          - id: "08"
            title: "Rust format advisory"
          - id: "09"
            title: "Rust clippy advisory"
          - id: "10"
            title: "Rust tests advisory"
          - id: "11"
            title: "Python syntax surface"
          - id: "12"
            title: "Python tests advisory"
          - id: "13"
            title: "Kani proof surface"
          - id: "14"
            title: "Firmware surface"
          - id: "15"
            title: "Kernel crates surface"
          - id: "16"
            title: "Scheduler surface"
          - id: "17"
            title: "Capability surface"
          - id: "18"
            title: "Intent surface"
          - id: "19"
            title: "Time surface"
          - id: "20"
            title: "SPSC surface"
          - id: "21"
            title: "Docs surface"
          - id: "22"
            title: "Examples surface"
          - id: "23"
            title: "No obvious secrets"
          - id: "24"
            title: "No generated artifacts"
          - id: "25"
            title: "Markdown non-empty"
          - id: "26"
            title: "Workflow surface"
          - id: "27"
            title: "Docker surface advisory"
          - id: "28"
            title: "Requirements surface"
          - id: "29"
            title: "Rust toolchain surface"
          - id: "30"
            title: "Deny/clippy config surface"
          - id: "31"
            title: "Manifest/notice surface"
          - id: "32"
            title: "File size sanity"
          - id: "33"
            title: "No merge conflict markers"
          - id: "34"
            title: "No stale backup artifacts"
          - id: "35"
            title: "CI documentation surface"
          - id: "36"
            title: "Public claim hygiene"
          - id: "37"
            title: "Foundation readiness summary"

    steps:
      - uses: actions/checkout@v6

      - name: Prepare Rust if available
        run: |
          if command -v rustup >/dev/null 2>&1; then
            rustup toolchain install stable --profile minimal || true
            rustup default stable || true
          fi

      - name: Run Foundation Gate
        run: python3 tools/ci37_gate.py "${{ matrix.id }}"