Skip to content

docs(ci): harness-ci is a signal, not a hard ruleset gate (align with homelab-ops)#23

Merged
cyber-ayi merged 1 commit into
mainfrom
ops/ci-signal-align
Jun 3, 2026
Merged

docs(ci): harness-ci is a signal, not a hard ruleset gate (align with homelab-ops)#23
cyber-ayi merged 1 commit into
mainfrom
ops/ci-signal-align

Conversation

@cyber-ayi

Copy link
Copy Markdown
Collaborator

Summary

Aligns commonplace's CI governance with homelab-ops (the upstream it mirrors, adr-0001): CI checks are signals, not hard ruleset gates.

Making harness-ci a required status check deadlocked the adr-assign numbering PR — GITHUB_TOKEN-authored PRs don't trigger workflows, so the required check never reports. homelab-ops's protect-main only enforces deletion/non_fast_forward/pull_request and merges bot PRs without a hard check gate.

  • ROADMAP CI table → checks are "signal"; cc waits for green before self-merge; rationale + Phase-D note added.
  • harness-ci.yml header → drop the obsolete "so it can be a required check" rationale.

Operator action still needed

Remove the required_status_checks rule from the protect-main ruleset (the agent is blocked by the safety classifier from loosening a protected-branch control). After that, protect-main = deletion/non_fast_forward/pull_request, matching homelab-ops, and the numbering-PR deadlock is gone.

Test plan

  • YAML parses
  • harness-ci green on this PR (still required until the ruleset rule is removed)

… homelab-ops)

Making harness-ci a required status check deadlocked the adr-assign numbering PR
(GITHUB_TOKEN-authored PRs don't trigger workflows → the required check never
reports). homelab-ops — the governance this project mirrors (adr-0001) — does NOT
hard-require any CI check; protect-main there is only deletion/non_fast_forward/
pull_request, and checks are signals merged manually/auto.

Aligns commonplace to that: CI checks are signals; cc waits for green before
self-merging; protect-main keeps PR-required + bypass_actors: []. A real hard gate
is deferred to Phase D (GitHub App lets bot PRs trigger checks, no deadlock).

- ROADMAP CI table: harness-ci / adr-pr-check -> "signal", with the rationale.
- harness-ci.yml header: drop the obsolete "so it can be a required check" note.

NOTE: the matching ruleset change (remove the required_status_checks rule from
protect-main) is an operator action — the safety classifier blocks the agent from
loosening a protected-branch control.

Session-Id: 019e8d56-605a-7b45-8ef0-21ee576aa7a9
Agent: cc-rc-bot

Co-authored-by: cyber-ayi <259769279+cyber-ayi@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@cyber-ayi cyber-ayi merged commit 3388d6a into main Jun 3, 2026
1 check passed
@cyber-ayi cyber-ayi deleted the ops/ci-signal-align branch June 3, 2026 23:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant