xj fbe7a7ed35 ci(release): add automated release safety gates ... - release_trigger_guard.py: block publish if CI Required Gate hasn't passed on the tag commit; warn if no prior dry-run exists - cut_release_tag.sh: check CI status via gh api before creating tag; run cargo check --locked to catch stale Cargo.lock locally - ci-post-release-validation.yml: new workflow triggered on release publish — validates asset count, SHA256 checksums, and binary version		2026-03-02 20:21:05 -08:00
..
codeql	Standardize security workflow and enhance CodeQL analysis (#479)	2026-02-17 00:10:46 -05:00
connectivity	feat(ci): complete security audit governance and resilient CI control lanes	2026-02-24 16:25:53 +08:00
ISSUE_TEMPLATE	docs(security): standardize private vuln workflow and SLA templates	2026-02-25 21:32:32 +08:00
release	ci: remove dev-to-main promotion gate and align main flow	2026-02-28 14:06:08 +08:00
security	ci(security): add governance metadata for RUSTSEC-2024-0436	2026-02-28 21:30:37 +08:00
workflows	ci(release): add automated release safety gates	2026-03-02 20:21:05 -08:00
actionlint.yaml	ci: prioritize release codeql with dedicated hetzner lane	2026-03-03 00:14:49 +08:00
CODEOWNERS	ci: require explicit @chumyin approval for CI/CD changes	2026-02-27 22:11:27 +00:00
dependabot.yml	ci: remove dev-to-main promotion gate and align main flow	2026-02-28 14:06:08 +08:00
label-policy.json	ci(workflows): consolidate policy and rust workflow setup (#564)	2026-02-17 11:35:20 -05:00
labeler.yml	docs: strengthen collaboration governance and AGENTS engineering protocol (#263)	2026-02-16 05:59:04 -05:00
pull_request_template.md	ci: remove dev-to-main promotion gate and align main flow	2026-02-28 14:06:08 +08:00