protocol: add Phase 3A verification and CI checks

2026-07-21 23:43:55 +07:00
parent 6abbc26dc4
commit c93d4a797e
5 changed files with 193 additions and 0 deletions
@@ -0,0 +1,35 @@
+name: Verify Protocol
+
+on:
+  push:
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: protocol-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  verify:
+    # The Phase 3A full verifier includes Swift type-checking. The owner must
+    # provide a macOS runner with the pinned toolchain from the handoff.
+    runs-on: macos-26
+    timeout-minutes: 30
+    steps:
+      - uses: actions/checkout@v7
+      - name: Assert pinned toolchain
+        shell: bash
+        run: |
+          python3 --version
+          go version | grep -F 'go1.26.5 '
+          protoc --version | grep -F 'libprotoc 35.1'
+          buf --version | grep -F '1.72.0'
+          rustc --version | grep -F '1.97.1'
+          swift --version | grep -F 'Swift version 6.3.3'
+      - name: Verify generation, breaking policy, scope, and conformance
+        run: make verify
+      - name: Verify clean regeneration
+        run: git diff --exit-code