Policy and reference documentation for CI, releases, and contributor tooling. Workflow definitions live in .github/workflows/.
| Area | Location | Notes |
|---|---|---|
| CI / validation | .github/workflows/ | corpus-validation, lean-ci, portal-ci, release, pcs-bench-producer, contributor-dry-run-monthly, security-sarif, mcp-contract |
| Ownership / triage | .github/CODEOWNERS, maintainers.md | Default reviewers; labels and response targets |
| Dependency updates | .github/dependabot.yml | Weekly pip, npm, and GitHub Actions updates |
| Releases | release-policy.md, Release integrity | Changelog, checksums, Sigstore signing, GitHub Release assets |
| Caching | cache-policy.md | Lake, uv, pnpm cache keys |
| Dev containers | .devcontainer/ | Reproducible dev environment |
- Schema and corpus validation (
validate-all) viagate_engine; optionalvalidate-all --report-jsonfor CI artifacts - Lean build (
lake build) - Portal build and smoke test
- Benchmark regression when
benchmarks/baseline_thresholds.jsonis present - Schema migration notes when schemas change
- PCS release verification and producer gates when pcs-core is checked out (see pcs/README.md)
See workflow files under .github/workflows/ for job names and triggers.