23 lines
666 B
Markdown
23 lines
666 B
Markdown
# CI-CD review gate
|
|
|
|
ns1 deploy is **forbidden** until all of these are true:
|
|
|
|
1. Forgejo Actions (or `cicd/run-review.sh`) is green on the commit SHA.
|
|
2. A human records the SHA in this file's "Promoted" table (or a PR comment).
|
|
3. Config on the host is a **signed** wrapper (`sig.alg=ed25519`).
|
|
4. Admin-history cube has prev + new + diff for that config.
|
|
|
|
There is **no** auto-deploy job. A future `deploy.yml` must `if: false` or
|
|
require `workflow_dispatch` plus the promoted SHA.
|
|
|
|
## Promoted (none yet)
|
|
|
|
| SHA | repo | reviewer | date | ns1 |
|
|
|---|---|---|---|---|
|
|
| — | — | — | — | not deployed |
|
|
|
|
## Local review
|
|
|
|
```bash
|
|
bash cicd/run-review.sh
|
|
```
|