marchon/system-git-sync
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1
system-git-sync/cicd/GATE.md
George Lambert c71dce2187
Some checks are pending
review / inventory (push) Waiting to run
Details
S13: CI-CD review gate and run-review.sh (no ns1 auto-deploy)
2026-09-15 22:22:57 -04:00

666 B
Raw Blame History

CI-CD review gate

ns1 deploy is forbidden until all of these are true:

  1. Forgejo Actions (or cicd/run-review.sh) is green on the commit SHA.
  2. A human records the SHA in this file's "Promoted" table (or a PR comment).
  3. Config on the host is a signed wrapper (sig.alg=ed25519).
  4. Admin-history cube has prev + new + diff for that config.

There is no auto-deploy job. A future deploy.yml must if: false or require workflow_dispatch plus the promoted SHA.

Promoted (none yet)

SHA repo reviewer date ns1
— — — — not deployed

Local review

bash cicd/run-review.sh