Skip to content

Commit eaecf56

Browse files
OneFineStarstuffOneFineStarstuff
authored
Merge branch 'main' into codex/develop-agi/asi-governance-roadmap-20262035
Signed-off-by: 𝐎𝐧𝐞 𝐅𝐢𝐧𝐞 𝐒𝐭𝐚𝐫𝐬𝐭𝐮𝐟𝐟 <onefinestarstuff@gmail.com>
2 parents aabc3d8 + 69db838 commit eaecf56

82 files changed

Lines changed: 7412 additions & 84 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.github/workflows/daily-gsifi-governance-validation.yml‎

Lines changed: 86 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,86 @@
1+
name: daily-gsifi-governance-validation
2+
3+
on:
4+
workflow_dispatch:
5+
6+
pull_request:
7+
paths:
8+
- 'DAILY_GSIFI_AGI_ASI_GOVERNANCE_2026_2030.md'
9+
- 'artifacts/daily_governance_report.example.json'
10+
- 'artifacts/daily_governance_report.schema.json'
11+
- 'policies/sentinel_governance.rego'
12+
- 'test_governance_snippets.py'
13+
- 'GOVERNANCE_ARTIFACTS_README.md'
14+
- 'Makefile'
15+
- 'tools/generate_gsifi_governance_report.py'
16+
- 'tools/run_gsifi_governance_checks.py'
17+
- 'test_run_gsifi_governance_checks.py'
18+
- 'test_daily_gsifi_governance_workflow.py'
19+
- 'test_generate_gsifi_governance_report.py'
20+
- 'test_validate_governance_artifacts.py'
21+
- 'tools/validate_governance_artifacts.py'
22+
- '.github/workflows/daily-gsifi-governance-validation.yml'
23+
- 'requirements-governance-checks.txt'
24+
push:
25+
branches: [main, master]
26+
paths:
27+
- 'DAILY_GSIFI_AGI_ASI_GOVERNANCE_2026_2030.md'
28+
- 'artifacts/daily_governance_report.example.json'
29+
- 'artifacts/daily_governance_report.schema.json'
30+
- 'policies/sentinel_governance.rego'
31+
- 'test_governance_snippets.py'
32+
- 'GOVERNANCE_ARTIFACTS_README.md'
33+
- 'Makefile'
34+
- 'tools/generate_gsifi_governance_report.py'
35+
- 'tools/run_gsifi_governance_checks.py'
36+
- 'test_run_gsifi_governance_checks.py'
37+
- 'test_daily_gsifi_governance_workflow.py'
38+
- 'test_generate_gsifi_governance_report.py'
39+
- 'test_validate_governance_artifacts.py'
40+
- 'tools/validate_governance_artifacts.py'
41+
- '.github/workflows/daily-gsifi-governance-validation.yml'
42+
- 'requirements-governance-checks.txt'
43+
44+
permissions:
45+
contents: read
46+
47+
jobs:
48+
validate:
49+
runs-on: ubuntu-latest
50+
timeout-minutes: 10
51+
steps:
52+
- name: Checkout
53+
uses: actions/checkout@v4
54+
55+
- name: Setup Python
56+
uses: actions/setup-python@v5
57+
with:
58+
python-version: '3.12'
59+
60+
- name: Install test dependencies
61+
run: |
62+
python -m pip install --upgrade pip
63+
pip install -r requirements-governance-checks.txt
64+
65+
- name: Run Python syntax checks
66+
run: make daily-gsifi-governance-pycompile
67+
68+
- name: Run governance checks with JUnit output
69+
run: make daily-gsifi-governance-ci
70+
71+
- name: Generate governance markdown summary
72+
run: make daily-gsifi-governance-report
73+
74+
- name: Append governance summary to job summary
75+
if: always()
76+
run: cat artifacts/test-results/gsifi-governance-run-summary.md >> "$GITHUB_STEP_SUMMARY"
77+
78+
- name: Upload governance test report
79+
if: always()
80+
uses: actions/upload-artifact@v4
81+
with:
82+
name: gsifi-governance-test-report
83+
path: |
84+
artifacts/test-results/gsifi-governance-tests.xml
85+
artifacts/test-results/gsifi-governance-run-summary.json
86+
artifacts/test-results/gsifi-governance-run-summary.md

‎.github/workflows/governance-artifacts-ci.yml‎

Lines changed: 50 additions & 56 deletions
Original file line numberDiff line numberDiff line change
@@ -1,44 +1,36 @@
1-
name: governance-artifacts-ci
1+
name: Governance Artifacts CI
22

33
on:
4-
push:
4+
pull_request:
55
paths:
66
- 'docs/schemas/**'
77
- 'docs/reports/ENTERPRISE_CIVILIZATIONAL_AGI_ASI_BLUEPRINT_2026_2030.md'
8+
- 'G_STACK_GOVERNANCE_BLUEPRINT_2026_2030.md'
9+
- 'docs/reports/G_STACK_GOVERNANCE_BLUEPRINT_2026_2030.md'
10+
- 'gstack_artifacts/**'
11+
- 'tests/test_validate_artifacts.py'
12+
- 'tests/__init__.py'
813
- '.github/workflows/governance-artifacts-ci.yml'
914
- 'Makefile'
1015
- '.yamllint'
11-
pull_request:
16+
push:
17+
branches: [ main, master ]
1218
paths:
1319
- 'docs/schemas/**'
1420
- 'docs/reports/ENTERPRISE_CIVILIZATIONAL_AGI_ASI_BLUEPRINT_2026_2030.md'
21+
- 'G_STACK_GOVERNANCE_BLUEPRINT_2026_2030.md'
22+
- 'docs/reports/G_STACK_GOVERNANCE_BLUEPRINT_2026_2030.md'
23+
- 'gstack_artifacts/**'
24+
- 'tests/test_validate_artifacts.py'
25+
- 'tests/__init__.py'
1526
- '.github/workflows/governance-artifacts-ci.yml'
1627
- 'Makefile'
1728
- '.yamllint'
18-
name: Governance Artifacts CI
19-
20-
on:
21-
pull_request:
22-
paths:
23-
- 'ENTERPRISE_AGI_ASI_GOVERNANCE_BLUEPRINT_2026_2030.md'
24-
- 'governance_blueprint/**'
25-
- '.github/workflows/governance-artifacts-ci.yml'
26-
push:
27-
branches: [ main, master ]
28-
paths:
29-
- 'ENTERPRISE_AGI_ASI_GOVERNANCE_BLUEPRINT_2026_2030.md'
30-
- 'governance_blueprint/**'
31-
- '.github/workflows/governance-artifacts-ci.yml'
3229

3330
jobs:
34-
validate-governance-artifacts:
31+
validate-existing-governance-stack:
3532
runs-on: ubuntu-latest
36-
permissions:
37-
contents: read
38-
env:
39-
PYTHONUNBUFFERED: '1'
40-
timeout-minutes: 10
41-
33+
timeout-minutes: 12
4234
steps:
4335
- name: Checkout
4436
uses: actions/checkout@v4
@@ -50,15 +42,15 @@ jobs:
5042
cache: 'pip'
5143
cache-dependency-path: docs/schemas/requirements-governance.txt
5244

53-
- name: Install Python deps (pinned)
45+
- name: Install governance schema dependencies
5446
run: |
5547
python -m pip install --upgrade pip
5648
pip install -r docs/schemas/requirements-governance.txt
5749
5850
- name: Validate governance YAML/JSON artifacts
5951
run: make governance-validate
6052

61-
- name: Setup OPA (pinned)
53+
- name: Setup OPA
6254
uses: open-policy-agent/setup-opa@v2
6355
with:
6456
version: v1.15.2
@@ -69,42 +61,44 @@ jobs:
6961
- name: Validator and evidence bundle unit tests
7062
run: make governance-validator-test
7163

72-
- name: Build evidence manifest
73-
run: make governance-evidence-manifest
74-
75-
- name: Verify evidence manifest integrity
76-
run: make governance-evidence-verify
77-
78-
- name: Validate evidence manifest schema
79-
run: make governance-evidence-schema
80-
81-
- name: Generate machine-readable validation report
82-
run: make governance-report
83-
84-
- name: Validate run report schema
85-
run: make governance-report-schema
64+
- name: Build and verify evidence artifacts
65+
run: |
66+
make governance-evidence-manifest
67+
make governance-evidence-verify
68+
make governance-evidence-schema
69+
make governance-report
70+
make governance-report-schema
71+
make governance-check-generated
72+
73+
validate-gstack-artifacts:
74+
runs-on: ubuntu-latest
75+
timeout-minutes: 8
76+
steps:
77+
- name: Checkout
78+
uses: actions/checkout@v4
8679

87-
- name: Check generated artifacts are up to date
88-
run: make governance-check-generated
8980
- name: Setup Python
9081
uses: actions/setup-python@v5
9182
with:
92-
python-version: '3.11'
83+
python-version: '3.12'
84+
cache: 'pip'
85+
cache-dependency-path: requirements-dev.txt
9386

94-
- name: Run governance validation suite
95-
run: python3 governance_blueprint/validation/run_validation_suite.py --quiet --json-report governance-artifact-validation-report.json --suite-report governance-validation-suite-report.json
87+
- name: Run G-Stack CI composite target
88+
run: make gstack-ci
9689

97-
- name: Show validation report
98-
run: |
99-
cat governance-artifact-validation-report.json
100-
cat governance-validation-suite-report.json
90+
- name: Upload G-Stack test artifacts
91+
if: always()
92+
uses: actions/upload-artifact@v4
93+
with:
94+
name: gstack-test-results
95+
path: artifacts/test-results
96+
if-no-files-found: ignore
10197

102-
- name: Upload validation report
98+
- name: Upload G-Stack validation report
99+
if: always()
103100
uses: actions/upload-artifact@v4
104101
with:
105-
name: governance-validation-report
106-
path: docs/schemas/validation_run_report.json
107-
name: governance-validation-reports
108-
path: |
109-
governance-artifact-validation-report.json
110-
governance-validation-suite-report.json
102+
name: gstack-validation-report
103+
path: artifacts/validation/gstack-validation.json
104+
if-no-files-found: warn

‎.github/workflows/governance-artifacts-validate.yml‎

Lines changed: 46 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,46 @@
1+
name: Governance Artifacts Validate
2+
3+
on:
4+
push:
5+
branches: [ main ]
6+
paths:
7+
- 'governance_artifacts/**'
8+
- '.github/workflows/governance-artifacts-validate.yml'
9+
pull_request:
10+
paths:
11+
- 'governance_artifacts/**'
12+
- '.github/workflows/governance-artifacts-validate.yml'
13+
14+
jobs:
15+
validate:
16+
runs-on: ubuntu-latest
17+
steps:
18+
- name: Checkout
19+
uses: actions/checkout@v4
20+
21+
- name: Setup Python
22+
uses: actions/setup-python@v5
23+
with:
24+
python-version: '3.11'
25+
26+
- name: Install dependencies
27+
run: |
28+
python -m pip install --upgrade pip
29+
pip install pyyaml
30+
31+
- name: Validate governance artifacts
32+
run: python3 governance_artifacts/validate_artifacts.py --quiet
33+
34+
- name: Validate governance artifacts JSON output file
35+
run: |
36+
mkdir -p artifacts
37+
python3 governance_artifacts/validate_artifacts.py --quiet --output artifacts/validator-output.json
38+
python3 -c "import json; p=json.load(open('artifacts/validator-output.json')); assert p.get('status')=='PASS', p; print('validator-output.json status=PASS')"
39+
40+
- name: Validate CLI metadata contracts
41+
run: |
42+
python3 -c "import json,subprocess; out=subprocess.check_output(['python3','governance_artifacts/validate_artifacts.py','--version','--json'], text=True); p=json.loads(out); assert 'version' in p and isinstance(p['version'], str), p; print('version contract OK')"
43+
python3 -c "import json,subprocess; out=subprocess.check_output(['python3','governance_artifacts/validate_artifacts.py','--list-checks','--json'], text=True); p=json.loads(out); assert isinstance(p.get('checks'), list) and p['checks'], p; print('list-checks contract OK')"
44+
45+
- name: Run validator unit tests
46+
run: python3 -m unittest discover -s tests -p "test_validate_artifacts.py"

‎.github/workflows/governance-artifacts.yml‎

Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
name: Governance Artifact Validation
2+
3+
on:
4+
pull_request:
5+
push:
6+
branches:
7+
- main
8+
- master
9+
10+
jobs:
11+
validate-governance-artifacts:
12+
runs-on: ubuntu-latest
13+
steps:
14+
- name: Checkout
15+
uses: actions/checkout@v4
16+
17+
- name: Setup Python
18+
uses: actions/setup-python@v5
19+
with:
20+
python-version: '3.12'
21+
22+
- name: Install dependencies
23+
run: python -m pip install -r requirements-governance.txt pytest
24+
25+
- name: Validate BBOM/ARRE artifacts
26+
run: python tools/validate_ai_governance_artifacts.py --report-file .reports/governance-validation.json
27+
28+
- name: Run validator tests
29+
run: pytest -q tests/test_governance_validator.py
30+
31+
- name: Upload governance validation report
32+
if: always()
33+
uses: actions/upload-artifact@v4
34+
with:
35+
name: governance-validation-report
36+
path: .reports/governance-validation.json
37+
if-no-files-found: ignore

‎.github/workflows/governance-docs-lint.yml‎

Lines changed: 59 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,59 @@
1+
name: Governance Docs Lint
2+
3+
on:
4+
pull_request:
5+
paths:
6+
- 'docs/**/*.md'
7+
- '.markdownlint.json'
8+
- '.markdownlintignore'
9+
- 'scripts/lint_governance_docs.sh'
10+
- 'tests/test_lint_governance_docs.sh'
11+
- 'Makefile'
12+
- 'tests/test_lint_governance_docs.sh'
13+
- 'Makefile'
14+
- '.github/workflows/governance-docs-lint.yml'
15+
push:
16+
branches: [ main ]
17+
paths:
18+
- 'docs/**/*.md'
19+
- '.markdownlint.json'
20+
- '.markdownlintignore'
21+
- 'scripts/lint_governance_docs.sh'
22+
- 'tests/test_lint_governance_docs.sh'
23+
- 'Makefile'
24+
- '.github/workflows/governance-docs-lint.yml'
25+
26+
permissions:
27+
contents: read
28+
29+
concurrency:
30+
group: governance-docs-lint-${{ github.workflow }}-${{ github.ref }}
31+
cancel-in-progress: true
32+
33+
jobs:
34+
lint-governance-docs:
35+
runs-on: ubuntu-latest
36+
timeout-minutes: 10
37+
steps:
38+
- name: Checkout
39+
uses: actions/checkout@v4
40+
41+
- name: Set up Node.js
42+
uses: actions/setup-node@v4
43+
with:
44+
node-version: '20'
45+
46+
- name: Validate lint script syntax
47+
run: bash -n scripts/lint_governance_docs.sh
48+
49+
- name: Validate test script syntax
50+
run: bash -n tests/test_lint_governance_docs.sh
51+
52+
- name: Shellcheck lint scripts
53+
uses: ludeeus/action-shellcheck@2.0.0
54+
with:
55+
scandir: "scripts tests"
56+
severity: warning
57+
58+
- name: Run governance docs check target
59+
run: make governance-docs-check

0 commit comments

Comments
 (0)