372bf1f648
Merge pull request '[E01-S01-T01] ADR: Modular monolith' (#406) from feature/188 into main
aaa7489566
Merge pull request '[E00-S05-T01] Implement CI quality baseline (required PR stages)' (#405) from feature/187 into main
10ea1ef3db
test: lock in the action SHA pins and workflow-level permissions with the ci-stages suite (E00-S05-T01)
d0c3b6a83d
ci: pin third-party actions to full commit SHAs and declare minimal workflow permissions (E00-S05-T01)
13b1548df8
ci: build the config and database-postgres packages before the architecture suites (E00-S05-T01)
Human-maintainer approval (kpcto) on the final head 10ea1ef3: I approve the .gitea/workflows/ci.yml change (7-stage quality baseline, SHA-pinned actions, permissions: contents: read) — this refreshes my earlier approval so it is non-stale on the current head.
Human-maintainer approval (kpcto) of the .gitea/workflows/ci.yml change on PR #405 (pipeline tripwire, review-checklist §6.4): the 7-stage quality baseline (frozen-install → typecheck → formatting-lint → unit → architecture → postgres-integration → build-apps) is intended and in-scope, it alters no existing gating step in a weakening direction, and the additive env-example-style hardening (SHA pinning + permissions: contents: read) is required by the reworked acceptance criteria. I approve the workflow change subject to those F2/F3 hardenings landing.