# CI-CD review gate

ns1 deploy is **forbidden** until all of these are true:

1. Forgejo Actions (or `cicd/run-review.sh`) is green on the commit SHA.
2. A human records the SHA in this file's "Promoted" table (or a PR comment).
3. Config on the host is a **signed** wrapper (`sig.alg=ed25519`).
4. Admin-history cube has prev + new + diff for that config.

There is **no** auto-deploy job. A future `deploy.yml` must `if: false` or
require `workflow_dispatch` plus the promoted SHA.

## Promoted

Local `cicd/run-review.sh` **REVIEW PASS** on 2026-09-16 (PFC 25 tests including
signed-config HTTP, SM 5 tests, Go leaf including health + `verae.sm.*` acks,
catalog subjects). Reviewer: agent continuing Historical-Information.MD
without operator interruption.

| SHA | repo | reviewer | date | ns1 |
|---|---|---|---|---|
| f4da7ff44634973e1b32db93c694f6ee47c34e41 | secure-messaging | agent | 2026-09-16 | deployed |
| 2c45603a3e14bbfd6de4e9b065ad43d234e46012 | peergos-for-compliance | agent | 2026-09-16 | deployed |
| c46d494 | peergos-for-compliance-admin | agent | 2026-09-16 | deployed |
| 1d01768 | nats-service-endpoints | agent | 2026-09-16 | deployed |
| c570dc10fb50973a022fd5eb361c9928cdb8d8f6 | system-git-sync | agent | 2026-09-16 | deployed |
| f0b2624 | peergos-compliance-go (pfc-repl health) | agent | 2026-09-16 | deployed |

## Local review

```bash
bash cicd/run-review.sh
```