The dev -> rc -> main flow left rc ungated: push/pull_request triggers only
listed main and dev, so a release candidate branch could drift without CI
ever running against it. Add rc to both branch lists.
The CI/release workflows still targeted the archived presentation
shells (nuncio-gui, nuncio-tui, nuncio-mcp) and their Tauri/npm
toolchain, so every run failed before the engine crates were even
built.
- ci.yml: run on dev in addition to main, drop the GTK/WebKit/Tauri
apt packages (the engine only needs zbus-based keyring and bundled
sqlite, both pure-Rust/cc), rely on rust-toolchain.toml instead of
dtolnay/rust-toolchain@stable to avoid drift from the pinned 1.97.1
toolchain, and make the coverage job continue-on-error so it stays
informational.
- release.yml / release-nightly.yml: package only nuncio-cli and
nunciod (the shells are gone), and drop the fabricated installer/
Homebrew release notes.
- release-desktop.yml: deleted; the Tauri desktop GUI is being
rebuilt as a separate client repo and no longer belongs here.
Set an explicit top-level permissions block (contents: read for CI;
contents: write for wiki-sync, which pushes to the wiki) so the workflows
follow least-privilege and clear the CodeQL 'workflow does not contain
permissions' findings.
Sweep every README/doc for accuracy and remove fabricated or stale content:
- README/CLAUDE: add the live roadmap-page link and a rule to keep the rendered
page in sync with docs/ROADMAP.md; fix the stale cov alias and the
already-moved-shells note.
- .github/CONTRIBUTING+SECURITY: drop the fabricated nuncio.mx site link and the
aspirational release/security claims; state honest pre-alpha status.
- docs/RUNNING, DEVELOPING, ARCHITECTURE, BACKLOG, Home, NSQL spec, corruption
notes, proto/README: correct crate count/list, service list, CLI flags, phase
status, and remove claims of unshipped/removed things (IPC-as-current,
hardcoded-keys, unwired engines); mark superseded api-surface-draft historical.
- Remove the fabricated benchmark baked into nsql_pipeline.svg and delete the
orphaned ipc_sequence.svg (depicted the removed IPC with a fake timing).
The three release workflows triggered on push to dev/rc/main (+ nightly crons),
so every push spawned release/desktop/nightly builds that failed: they build the
presentation GUI now archived under _reference/, and the release policy forbids
public releases until V3. Restrict release.yml and release-desktop.yml to v*
tags + manual dispatch; make release-nightly.yml manual-only.
Refs #140
Clippy job now runs 'cargo check-all' (--all-targets), matching the local gate
so CI can no longer pass while the local gate fails. Coverage is now
informational (--summary-only): the former --fail-under-lines 100 excluded all
main.rs and rewarded stub+matching-test theater; a realistic threshold plus a
required mock-server E2E gate lands with Phase 1.C.6.
Refs #142#143
Remove fabricated PLAN-*/EXECUTIVE-*/TODO/TICKET/spec docs; add authoritative
ROADMAP, ADR-0001 (engine-first gRPC), and Phase 0/1 BACKLOG; rewrite README,
CLAUDE.md, ARCHITECTURE, and wiki Home to honest reality; add status banners to
the NSQL and self-healing specs; make wiki-sync mirror-with-delete.
James Maes
james.maes