feat(ci): add structural workflow-policy YAML authority (S4) - #505

Merged

qnbs merged 13 commits into

mainfrom

s4-workflow-policy-check

Aug 26, 2026

Commits on Aug 26, 2026

feat(ci): add structural workflow-policy YAML authority (S4)
qnbs
committed
d357b87
test(tooling): cover workflow-policy-check structural rules
qnbs
committed
3c8408b
docs: sync README test-metrics badge
qnbs
committed
d67cd02
fix: close review-wave findings in workflow-policy-check (S4)
qnbs
committed
2934bc1
fix: verify ci-success actually checks each gating job's result
qnbs
committed
cff962a
fix: close review-wave-3 findings in workflow-policy-check (S4)
qnbs
committed
a792127
fix: resolve aliases at every container boundary in workflow-policy-check
qnbs
committed
8913e92
docs: sync README test-metrics badge to 7064 tests
qnbs
committed
8c5ad4f
fix: gate CI on workflow-policy before governed actions run (S4)
qnbs
committed
3e0c110
fix: update stale ci-success.needs expectation for the new workflow-policy job
qnbs
committed
e9f4bf2
fix: close 6 review-wave-6 gaps in workflow-policy-check and its CI gate
qnbs
committed
05d7e84
fix: run workflow-policy-check via node directly, not pnpm run
qnbs
committed
c8bd941
fix: close 2 more review-wave-7 gaps, defer the gate's own trust boundary
qnbs
committed
a05e1c3