ci: validate main pushes automatically

2026-07-12 11:03:52 +09:00
parent e7d1069222
commit 42d45e85fb
4 changed files with 92 additions and 1 deletions
@@ -22,6 +22,7 @@ meta:
  authority: "governance/authority_matrix.yaml"
  validator: tools/validate_quant_engine_wbs_v1.py
  task_verifier: tools/verify_wbs_task_v1.py
+  remote_evidence_collector: tools/collect_remote_wbs_evidence_v1.py
  evidence_root: Temp/evidence
  status_values: [PENDING, IN_PROGRESS, DONE]   # DONE = 해당 verdict.json gate=PASS 필수
  db_connection:
@@ -31,6 +32,10 @@ meta:
    # 3) src/dotnet/QuantEngine.Web/appsettings.Development.json 의 ConnectionStrings.DefaultConnection
    #    (로컬은 SSH 터널 127.0.0.1:5432 전제 — CLAUDE.md "Local Development & Testing")
    dotnet_appsettings: src/dotnet/QuantEngine.Web/appsettings.Development.json
+  remote_evidence:
+    collector: "python tools/collect_remote_wbs_evidence_v1.py --target <ssh-target>"
+    policy: "Collect journal and JSON artifacts only; never copy env files or passwords."
+    postgres: "Use QE_WBS_PG_DSN through an approved SSH tunnel; do not embed credentials in evidence."

 # -----------------------------------------------------------------------------
 # 검증 체크 타입 사전 (verify_wbs_task_v1.py 가 해석하는 선언형 vocabulary)