fix

Author: guillaumejparis

.github/workflows/core-ci.yml

@@ -1,8 +1,12 @@
 name: "[Core] CI"
 
+# Continuous Integration pipeline for the platform.
+# Runs on push to tracked branches and release tags. On success, artifacts
+# are picked up by the downstream promotion and deployment automation.
+
 on:
   push:
-    branches: [main]
+    branches: [main, testing-xtm-one]
     tags:
       - "[0-9]*.[0-9]*.[0-9]*"
   pull_request:

.github/workflows/deploy-feature-branch-build.yml

@@ -3,6 +3,10 @@ name: "[Core] Deploy Feature Branch Build"
 # Unprivileged build workflow dispatched by deploy-feature-branch.yml.
 # SECURITY: This workflow has contents:read ONLY — no secrets, no write token.
 # It checks out and builds untrusted PR code in a safe sandbox.
+#
+# The Docker image is built from source via a multi-stage Dockerfile — no
+# pre-compiled artifacts are needed.  On success, the OCI archive is uploaded
+# as an artifact for downstream promotion and deployment.
 
 on:
   workflow_dispatch:
@@ -28,42 +32,10 @@ permissions:
   contents: read # strictly read-only — no secrets, no write token
 
 jobs:
-  backend-compile:
-    name: "🔨 Backend Compile"
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-    steps:
-      - uses: actions/checkout@v7
-        with:
-          ref: ${{ inputs.head_sha }}
-      - uses: ./.github/actions/backend-compile
-
-  frontend-build:
-    name: "🎨 Frontend Build"
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-    steps:
-      - uses: actions/checkout@v7
-        with:
-          ref: ${{ inputs.head_sha }}
-      - uses: ./.github/actions/frontend-build
-
-  backend-package:
-    name: "📦 Backend Package"
-    needs: [frontend-build, backend-compile]
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-    steps:
-      - uses: actions/checkout@v7
-        with:
-          ref: ${{ inputs.head_sha }}
-      - uses: ./.github/actions/backend-package
-
   docker-build:
     name: "🐳 Docker Build"
-    needs: backend-package
     runs-on: ubuntu-latest
-    timeout-minutes: 20
+    timeout-minutes: 30
     steps:
       - uses: actions/checkout@v7
         with:

.github/workflows/deploy-feature-branch-done.yml

@@ -1,8 +1,11 @@
 name: "[Core] Deploy Feature Branch Done"
 
-# Privileged follow-up: triggered when the unprivileged build completes.
+# Triggered when the unprivileged build workflow completes.
+# Updates the PR comment with the build result. On success, downstream
+# automation picks up the artifact and handles promotion + deployment.
+#
 # SECURITY: This workflow NEVER checks out PR code. It only downloads
-# the metadata artifact and updates the PR comment with the result.
+# the metadata artifact and updates the PR comment.
 
 on:
   workflow_run:

.github/workflows/deploy-feature-branch.yml

@@ -1,7 +1,9 @@
 name: "[Core] Deploy Feature Branch"
 
-# Privileged workflow: handles /deploy comment, posts PR comment,
-# then dispatches the unprivileged build workflow.
+# Handles the /deploy command on PRs. Posts an in-progress comment, then
+# dispatches the unprivileged build workflow (deploy-feature-branch-build.yml).
+# Once that build succeeds, downstream automation promotes and deploys the image.
+#
 # SECURITY: This workflow NEVER checks out PR code. It only does API calls.
 
 on: