The dev -> rc -> main flow left rc ungated: push/pull_request triggers only
listed main and dev, so a release candidate branch could drift without CI
ever running against it. Add rc to both branch lists.
The CI/release workflows still targeted the archived presentation
shells (nuncio-gui, nuncio-tui, nuncio-mcp) and their Tauri/npm
toolchain, so every run failed before the engine crates were even
built.
- ci.yml: run on dev in addition to main, drop the GTK/WebKit/Tauri
apt packages (the engine only needs zbus-based keyring and bundled
sqlite, both pure-Rust/cc), rely on rust-toolchain.toml instead of
dtolnay/rust-toolchain@stable to avoid drift from the pinned 1.97.1
toolchain, and make the coverage job continue-on-error so it stays
informational.
- release.yml / release-nightly.yml: package only nuncio-cli and
nunciod (the shells are gone), and drop the fabricated installer/
Homebrew release notes.
- release-desktop.yml: deleted; the Tauri desktop GUI is being
rebuilt as a separate client repo and no longer belongs here.
Set an explicit top-level permissions block (contents: read for CI;
contents: write for wiki-sync, which pushes to the wiki) so the workflows
follow least-privilege and clear the CodeQL 'workflow does not contain
permissions' findings.
The three release workflows triggered on push to dev/rc/main (+ nightly crons),
so every push spawned release/desktop/nightly builds that failed: they build the
presentation GUI now archived under _reference/, and the release policy forbids
public releases until V3. Restrict release.yml and release-desktop.yml to v*
tags + manual dispatch; make release-nightly.yml manual-only.
Refs #140
Clippy job now runs 'cargo check-all' (--all-targets), matching the local gate
so CI can no longer pass while the local gate fails. Coverage is now
informational (--summary-only): the former --fail-under-lines 100 excluded all
main.rs and rewarded stub+matching-test theater; a realistic threshold plus a
required mock-server E2E gate lands with Phase 1.C.6.
Refs #142#143
Remove fabricated PLAN-*/EXECUTIVE-*/TODO/TICKET/spec docs; add authoritative
ROADMAP, ADR-0001 (engine-first gRPC), and Phase 0/1 BACKLOG; rewrite README,
CLAUDE.md, ARCHITECTURE, and wiki Home to honest reality; add status banners to
the NSQL and self-healing specs; make wiki-sync mirror-with-delete.
James Maes
james.maes