| Path | Purpose |
|---|---|
workflows/governance.yml |
Validate per-commit change records and relative documentation links |
workflows/web.yml |
Web client: typecheck, tests, and build under Bun |
workflows/broker.yml |
Event broker: format, compile with warnings as errors, and tests on disposable PostgreSQL 18 |
ISSUE_TEMPLATE/ |
Bug, feature, and ADR-request forms |
PULL_REQUEST_TEMPLATE.md |
Review, contract, security, and verification checklist |
CODEOWNERS |
Ownership by service, app, contract, and governance path |
Governance gate (available now):
- Every pull request commit has a valid record under
docs/changelog/. - The
Changelog:trailer matches a record changed by that commit. - Filename and front-matter rules pass.
- Relative documentation links resolve.
Service CI gates (land with the first manifests):
- Contract validation and client-generation drift check.
- TypeScript: typecheck, lint, and unit tests for apps and Bun services.
- Elixir: format, compile with warnings as errors, and tests.
- Integration tests for cross-service flows touched by the change.
- Secret scanning and dependency review.
Rules:
- Workflows never print secrets or full evidence payloads.
- Database-backed jobs use disposable PostgreSQL instances, one per service.
- A failing contract or change-record check blocks merge; it is not overridden by a code label.
Status: governance automation and the web and broker service workflows are written. Remaining service workflows (Social, Moderation) land with their first manifests; contract validation and client-generation checks land with the contracts tooling.