ci: release train + coverage ratchet (release slice; split from the omnibus)#1317

Closed

SharedQA wants to merge 29 commits into

constructorfabric:mainfrom

SharedQA:claude/modest-blackburn-4cc697

Commits on Jun 15, 2026

ci: add enforceable quality gates, release train, and docs map

SharedQA
and
claude
committed
ci: address CodeRabbit review — harden gates, fix injection & masking

SharedQA
and
claude
committed
ci: address CodeRabbit re-review — fork-guard AI job, verify kind, scope rc-report write, helmfile glob, restore Chart.yaml

SharedQA
and
claude
committed
ci(release-train): scope OIDC/attestation permissions to validate-artifact

SharedQA
and
claude
committed
ci(security-gates): fix fetch-depth ternary so nightly sweep is full-history

SharedQA
and
claude
committed
ci(reviews): document 2-random-reviewer assignment via team code-review-assignment
SharedQA
committed
ci: fix newly-introduced quality-gate failures
SharedQA
committed
ci(security-gates): waive 3 unfixable/transitive RUSTSEC advisories in deps-audit
SharedQA
committed
ci(security-gates): add .trivyignore for pre-existing HIGH misconfigs
SharedQA
committed

Commits on Jun 16, 2026

Commits on Jun 23, 2026