docs(ci): document centralized native verification #1
@@ -0,0 +1,17 @@
|
||||
# Native CI verification
|
||||
|
||||
VisionPOC is a native Apple project (`VisionPOC.xcodeproj`, generated with XcodeGen). Its native verification is **centralized**:
|
||||
this repository carries no workflow that selects a host or a runner label.
|
||||
|
||||
- The owner-level `native.yaml` in the KofTwentyTwo CI policy repository dispatches the shared `swift` profile for
|
||||
`KofTwentyTwo/VisionPOC` with inputs declared centrally (`xcode-build` of the `VisionPOC` scheme, project generated by XcodeGen).
|
||||
- It runs on pushes to the protected branches, on manual dispatch, and on pull requests opened from a branch of this same
|
||||
repository. A pull request from a fork never runs on a host: a Linux `fork-deny` job fails it instead.
|
||||
- This is a **build-only** verification plus a secrets scan. The project declares no unit-test suite, so no test result is
|
||||
produced or claimed. Hardware, UI and signing checks are out of scope and are not waived by this document.
|
||||
- The `native-result` check aggregates the native jobs. It fails unless the native build and the secrets scan succeeded,
|
||||
so a skipped, failed or cancelled native run cannot pass.
|
||||
- The primary `ci-result` check (source/config lint and secrets scan) continues to run on every pull request.
|
||||
|
||||
Both `ci-result` and `native-result` are required checks for `main`. Changing what runs, where, or with which inputs is
|
||||
done in the CI policy repository, never in a pull request to this repository.
|
||||
Reference in new issue
Block a user