ci.yml

name: ci

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  workflow_dispatch:
    inputs:
      verification:
        description: 'Run all checks or only Windows native metadata regressions'
        type: choice
        options: [all, windows-metadata]
        default: all

permissions:
  contents: read

concurrency:
  group: ci-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}${{ inputs.verification == 'windows-metadata' && '-windows-metadata' || '' }}
  cancel-in-progress: true

jobs:
  workflow-lint:
    runs-on: ubuntu-latest
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - name: Lint GitHub Actions workflows
        uses: rhysd/actionlint@914e7df21a07ef503a81201c76d2b11c789d3fca # v1.7.12
      - name: Test dependency monitor
        run: node --test .github/scripts/critical-dependencies.test.js .github/scripts/critical-dependency-assessment.test.js
      - name: Test Homebrew formula renderer
        run: python3 -m unittest discover -s .github/scripts -p test_homebrew_formula.py
      - name: Test frozen native-plan fixture contracts
        run: python3 -m unittest discover -s agent_docs/evidence -p 'test_old_native_*.py'

  dependency-review:
    name: ${{ inputs.verification == 'windows-metadata' && 'Diagnostics only - skipped dependency review' || 'dependency-review' }}
    if: github.event_name == 'pull_request'
    runs-on: ubuntu-latest
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - name: Reject newly vulnerable dependencies
        uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0

  site-check:
    name: ${{ inputs.verification == 'windows-metadata' && 'Diagnostics only - skipped site checks' || 'site-check' }}
    if: inputs.verification != 'windows-metadata'
    runs-on: ubuntu-latest
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - name: Build and validate local site links
        run: python3 site/build.py
      - name: Check JavaScript syntax
        run: node --check site/app.js

  test:
    name: ${{ inputs.verification == 'windows-metadata' && 'Diagnostics only - skipped tests' || 'test' }} (${{ matrix.os }})
    if: inputs.verification != 'windows-metadata'
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, macos-15, windows-latest]
    runs-on: ${{ matrix.os }}
    timeout-minutes: 30
    env:
      # macOS/Windows must exercise native link retain/restore successfully;
      # Linux proves the explicit unsupported-metadata refusal without mutation.
      SKILLVIEW_EXPOSURE_LINK_PROOF: '1'
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6
        with:
          global-json-file: global.json
          cache: true
          cache-dependency-path: '**/packages.lock.json'
      - name: Restore locked dependencies
        run: dotnet restore --locked-mode
      - name: Build
        run: dotnet build --configuration Release --no-restore
      - name: Verify code style — dotnet format
        if: matrix.os == 'ubuntu-latest'
        run: dotnet format SkillView.sln --no-restore --verify-no-changes
      - name: Test
        run: dotnet test --configuration Release --no-build --verbosity normal
      - name: Prove Linux live native link preservation and hidden attributes on ext4
        if: runner.os == 'Linux'
        shell: bash
        env:
          TMPDIR: ${{ runner.temp }}
          SKILLVIEW_LINUX_EXPOSURE_PRESERVATION_PROOF: '1'
        run: |
          set -euo pipefail
          mkdir -p dist/linux-live-link/input
          cp agent_docs/evidence/probe-linux-link-preservation-abi.c dist/linux-live-link/input/
          cp agent_docs/evidence/verify-linux-link-preservation-abi.py dist/linux-live-link/input/
          cp agent_docs/evidence/prove-linux-link-hidden-attributes.py dist/linux-live-link/input/
          cp tests/SkillView.MaintenanceProof/ExposureLinkProof.cs dist/linux-live-link/input/
          cp tests/SkillView.MaintenanceProof/ExposureLifetimeProof.cs dist/linux-live-link/input/
          cp src/SkillView.Core/Inventory/LinuxExposureOwnerContext.cs dist/linux-live-link/input/
          cp tests/SkillView.Tests/Inventory/LinuxExposureOwnerLifetimeTests.cs dist/linux-live-link/input/
          sha256sum dist/linux-live-link/input/* > dist/linux-live-link/input-sha256.txt
          cc --version > dist/linux-live-link/compiler.txt
          cc -std=c11 -O2 -Wall -Wextra -Werror -pedantic -Wconversion -Wsign-conversion \
            agent_docs/evidence/probe-linux-link-preservation-abi.c -o dist/linux-live-link/probe-linux-link-abi
          probe_dir=$(mktemp -d "$RUNNER_TEMP/skillview-link-abi.XXXXXX")
          trap 'rmdir "$probe_dir"' EXIT
          dist/linux-live-link/probe-linux-link-abi "$probe_dir" > dist/linux-live-link/abi.json
          python3 agent_docs/evidence/verify-linux-link-preservation-abi.py \
            --input dist/linux-live-link/abi.json --source agent_docs/evidence/probe-linux-link-preservation-abi.c \
            --architecture x64 --output dist/linux-live-link/abi-verified.json
          dotnet build tests/SkillView.MaintenanceProof/SkillView.MaintenanceProof.csproj \
            --configuration Release -p:RestoreLockedMode=true | tee dist/linux-live-link/proof-build.log
          dotnet test --project tests/SkillView.Tests/SkillView.Tests.csproj \
            --configuration Release --no-build \
            --filter-class SkillView.Tests.Inventory.NativeExposureLinkTests \
            --filter-class SkillView.Tests.Inventory.LinuxLinkProcAuthorityTests \
            --filter-class SkillView.Tests.Inventory.LinuxExposureOwnerLifetimeTests \
            | tee dist/linux-live-link/native-tests.log
          python3 agent_docs/evidence/prove-linux-link-hidden-attributes.py \
            --dotnet "$(command -v dotnet)" \
            --proof tests/SkillView.MaintenanceProof/bin/Release/net10.0/SkillView.MaintenanceProof.dll \
            --output dist/linux-live-link/hidden-attribute-proof.json
      - name: Retain Linux live link evidence
        if: always() && runner.os == 'Linux'
        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
        with:
          name: linux-live-link-evidence
          path: dist/linux-live-link/**
          if-no-files-found: error
          retention-days: 14

  windows-metadata:
    name: Windows metadata (${{ matrix.os }})
    strategy:
      fail-fast: false
      matrix:
        os: [windows-latest, windows-11-arm]
    runs-on: ${{ matrix.os }}
    timeout-minutes: 20
    env:
      # These native tests must publish and recapture metadata successfully;
      # an environmental refusal is not a passing Windows proof.
      SKILLVIEW_WINDOWS_METADATA_PROOF: '1'
      SKILLVIEW_EXPOSURE_LINK_PROOF: '1'
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6
        with:
          global-json-file: global.json
          cache: true
          cache-dependency-path: '**/packages.lock.json'
      - name: Prove native security descriptors and alternate streams
        shell: bash
        run: |
          set -euo pipefail
          mkdir -p dist
          dotnet test --project tests/SkillView.Tests/SkillView.Tests.csproj \
            --configuration Release -p:RestoreLockedMode=true \
            --filter-class SkillView.Tests.Maintenance.WindowsPayloadMetadataTests \
            --filter-class SkillView.Tests.Maintenance.WindowsBackupReadStreamTests \
            --filter-class SkillView.Tests.Maintenance.WindowsSecurityDescriptorQueryTests \
            --filter-class SkillView.Tests.Maintenance.RecordedTrackingWriterTests \
            --filter-class SkillView.Tests.Maintenance.PinTrackingWriterTests \
            --filter-class SkillView.Tests.Maintenance.StandaloneUnpinTests \
            --filter-class SkillView.Tests.Maintenance.SharedReplacementRevisionTests \
            --filter-class SkillView.Tests.Maintenance.CapturedPayloadArchiveTests \
            --filter-class SkillView.Tests.Maintenance.CapturedResolutionArchiveTests \
            --filter-class SkillView.Tests.Maintenance.ReplacementLocalReviewTests \
            --filter-class SkillView.Tests.Inventory.NativeExposureLinkTests \
            --filter-class SkillView.Tests.Inventory.NativePlacementTests \
            --filter-class SkillView.Tests.Maintenance.LocalSourceSwitchTests \
            --filter-class SkillView.Tests.Maintenance.NativePayloadBorrowedHandleTests \
            | tee dist/windows-metadata-tests.log
      - name: Retain Windows metadata evidence
        if: always()
        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
        with:
          name: windows-metadata-evidence-${{ matrix.os }}
          path: dist/windows-metadata-tests.log
          if-no-files-found: error
          retention-days: 14

  aot-smoke:
    if: inputs.verification != 'windows-metadata'
    name: ${{ inputs.verification == 'windows-metadata' && 'Diagnostics only - skipped ' || '' }}AOT publish smoke (${{ matrix.rid }})
    runs-on: ${{ matrix.os }}
    # Both product hosts plus four historical native producers and restart
    # proofs run sequentially; retain a bounded budget for the expanded suite.
    timeout-minutes: 180
    strategy:
      fail-fast: false
      matrix:
        include:
          - rid: linux-x64
            os: ubuntu-latest
            ext: ''
          - rid: osx-arm64
            os: macos-15
            ext: ''
          - rid: win-x64
            os: windows-latest
            ext: .exe
          - rid: win-arm64
            os: windows-11-arm
            ext: .exe
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - name: Install Linux AOT toolchain
        if: runner.os == 'Linux'
        run: |
          sudo apt-get update
          sudo apt-get install -y clang zlib1g-dev
      - uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6
        with:
          global-json-file: global.json
          cache: true
          cache-dependency-path: '**/packages.lock.json'
      - name: AOT publish (standalone)
        shell: bash
        run: |
          dotnet publish src/SkillView.App/SkillView.App.csproj \
            -c Release -r ${{ matrix.rid }} \
            -p:PublishAot=true -p:StripSymbols=true -p:RestoreLockedMode=true \
            -warnaserror:IL2026 -warnaserror:IL3050 -warnaserror:IL3053 \
            -o dist/app
      - name: AOT publish (extension)
        shell: bash
        run: |
          dotnet publish src/SkillView.GhExtension/SkillView.GhExtension.csproj \
            -c Release -r ${{ matrix.rid }} \
            -p:PublishAot=true -p:StripSymbols=true -p:RestoreLockedMode=true \
            -o dist/ext
      - name: Build exact previous native host for saved-plan compatibility
        shell: bash
        run: |
          set -euo pipefail
          baseline_sha=0dba59be59776e6e654123aa1ce1e5496074763e
          baseline_path="$RUNNER_TEMP/skillview-unpin-baseline"
          git fetch --no-tags origin "$baseline_sha"
          git -c core.autocrlf=false -c core.eol=lf worktree add --detach "$baseline_path" "$baseline_sha"
          dotnet publish "$baseline_path/src/SkillView.App/SkillView.App.csproj" \
            -c Release -r ${{ matrix.rid }} \
            -p:PublishAot=true -p:StripSymbols=true -p:RestoreLockedMode=true \
            -warnaserror:IL2026 -warnaserror:IL3050 -warnaserror:IL3053 \
            -o "$baseline_path/dist/app"
          printf 'SKILLVIEW_LEGACY_CHECKOUT=%s\n' "$baseline_path" >> "$GITHUB_ENV"
      - name: Build exact standalone-unpin native host for schema4 compatibility
        shell: bash
        run: |
          set -euo pipefail
          baseline_sha=c919199a6861b9aaf9301e31c4b2945e098da799
          baseline_path="$RUNNER_TEMP/skillview-local-reimport-baseline"
          git fetch --no-tags origin "$baseline_sha"
          git -c core.autocrlf=false -c core.eol=lf worktree add --detach "$baseline_path" "$baseline_sha"
          dotnet publish "$baseline_path/src/SkillView.App/SkillView.App.csproj" \
            -c Release -r ${{ matrix.rid }} \
            -p:PublishAot=true -p:StripSymbols=true -p:RestoreLockedMode=true \
            -warnaserror:IL2026 -warnaserror:IL3050 -warnaserror:IL3053 \
            -o "$baseline_path/dist/app"
          printf 'SKILLVIEW_UNPIN_CHECKOUT=%s\n' "$baseline_path" >> "$GITHUB_ENV"
      - name: Build exact local-reimport native host for schema5 compatibility
        shell: bash
        run: |
          set -euo pipefail
          baseline_sha="$(python - <<'PY'
          import ast
          from pathlib import Path
          tree = ast.parse(Path('agent_docs/evidence/prove-old-native-reimport.py').read_text())
          values = [ast.literal_eval(node.value) for node in tree.body if isinstance(node, ast.Assign)
                    and any(isinstance(target, ast.Name) and target.id == 'BASELINE' for target in node.targets)]
          assert len(values) == 1 and isinstance(values[0], str) and len(values[0]) == 40, 'Corrected merged schema5 baseline is not frozen'
          assert all(character in '0123456789abcdef' for character in values[0]), 'Corrected merged schema5 baseline is not frozen'
          print(values[0])
          PY
          )"
          baseline_path="$RUNNER_TEMP/skillview-source-switch-baseline"
          git fetch --no-tags origin "$baseline_sha"
          git -c core.autocrlf=false -c core.eol=lf worktree add --detach "$baseline_path" "$baseline_sha"
          dotnet publish "$baseline_path/src/SkillView.App/SkillView.App.csproj" \
            -c Release -r ${{ matrix.rid }} \
            -p:PublishAot=true -p:StripSymbols=true -p:RestoreLockedMode=true \
            -warnaserror:IL2026 -warnaserror:IL3050 -warnaserror:IL3053 \
            -o "$baseline_path/dist/app"
          printf 'SKILLVIEW_REIMPORT_CHECKOUT=%s\n' "$baseline_path" >> "$GITHUB_ENV"
      - name: Build exact pre-review source-switch native host for schema6 compatibility
        shell: bash
        run: |
          set -euo pipefail
          baseline_sha="$(python - <<'PY'
          import ast
          from pathlib import Path
          tree = ast.parse(Path('agent_docs/evidence/prove-old-native-reimport.py').read_text())
          values = [ast.literal_eval(node.value) for node in tree.body if isinstance(node, ast.Assign)
                    and any(isinstance(target, ast.Name) and target.id == 'SOURCE_SWITCH_BASELINE' for target in node.targets)]
          assert len(values) == 1 and isinstance(values[0], str) and len(values[0]) == 40, 'Merged pre-review schema6 baseline is not frozen'
          assert all(character in '0123456789abcdef' for character in values[0]), 'Merged pre-review schema6 baseline is not frozen'
          print(values[0])
          PY
          )"
          baseline_path="$RUNNER_TEMP/skillview-pre-review-source-switch-baseline"
          git fetch --no-tags origin "$baseline_sha"
          git -c core.autocrlf=false -c core.eol=lf worktree add --detach "$baseline_path" "$baseline_sha"
          dotnet publish "$baseline_path/src/SkillView.App/SkillView.App.csproj" \
            -c Release -r ${{ matrix.rid }} \
            -p:PublishAot=true -p:StripSymbols=true -p:RestoreLockedMode=true \
            -warnaserror:IL2026 -warnaserror:IL3050 -warnaserror:IL3053 \
            -o "$baseline_path/dist/app"
          printf 'SKILLVIEW_SOURCE_SWITCH_CHECKOUT=%s\n' "$baseline_path" >> "$GITHUB_ENV"
      - name: Prepare checksum-verified minimum and recorded current gh proof hosts
        shell: bash
        run: |
          set -euo pipefail
          python agent_docs/evidence/prepare-gh-proof-tool.py --version 2.97.0 --rid '${{ matrix.rid }}' --output "$RUNNER_TEMP/skillview-proof-gh-minimum"
          python agent_docs/evidence/prepare-gh-proof-tool.py --version 2.102.0 --rid '${{ matrix.rid }}' --output "$RUNNER_TEMP/skillview-proof-gh-current"
      - name: Smoke-test native binaries
        shell: bash
        run: |
          set -euo pipefail
          test -s 'dist/app/skillview${{ matrix.ext }}'
          test -s 'dist/ext/gh-skillview${{ matrix.ext }}'
          'dist/app/skillview${{ matrix.ext }}' --version
          'dist/ext/gh-skillview${{ matrix.ext }}' --version
      - name: Prove explicit static package checks preserve payloads without running scripts
        shell: bash
        run: |
          python agent_docs/evidence/prove-static-package-check.py --app 'dist/app/skillview${{ matrix.ext }}' --output dist/package-check-app-proof.json
          python agent_docs/evidence/prove-static-package-check.py --app 'dist/ext/gh-skillview${{ matrix.ext }}' --output dist/package-check-extension-proof.json
      - name: Prove explicit authoring dry-runs preserve authored and Git files
        shell: bash
        run: |
          set -euo pipefail
          proof_gh_name='gh${{ matrix.ext }}'
          python agent_docs/evidence/prove-authoring-validation.py --app 'dist/app/skillview${{ matrix.ext }}' \
            --gh "$RUNNER_TEMP/skillview-proof-gh-minimum/$proof_gh_name" \
            --gh "$RUNNER_TEMP/skillview-proof-gh-current/$proof_gh_name" --output dist/authoring-app-proof
          python agent_docs/evidence/prove-authoring-validation.py --app 'dist/ext/gh-skillview${{ matrix.ext }}' \
            --gh "$RUNNER_TEMP/skillview-proof-gh-minimum/$proof_gh_name" \
            --gh "$RUNNER_TEMP/skillview-proof-gh-current/$proof_gh_name" --output dist/authoring-extension-proof
      - name: Prove explicit offline evaluation against a real local Docker runtime
        if: runner.os == 'Linux'
        shell: bash
        run: |
          set -euo pipefail
          # Fixture preparation is explicit and outside the product's no-pull boundary.
          docker pull busybox:1.37.0
          docker image inspect busybox:1.37.0 > dist/evaluation-fixture-image.json
          fixture_digest="$(python3 -c 'import json; print(json.load(open("dist/evaluation-fixture-image.json"))[0]["RepoDigests"][0])')"
          fixture_id="$(python3 -c 'import json; print(json.load(open("dist/evaluation-fixture-image.json"))[0]["Id"])')"
          docker_path="$(command -v docker)"
          python3 agent_docs/evidence/prove-isolated-evaluation.py --app dist/app/skillview \
            --docker "$docker_path" --image "$fixture_digest" --image-id "$fixture_id" --output dist/evaluation-app-proof
          python3 agent_docs/evidence/prove-isolated-evaluation.py --app dist/ext/gh-skillview \
            --docker "$docker_path" --image "$fixture_digest" --image-id "$fixture_id" --output dist/evaluation-extension-proof
      - name: Verify repository API access and retain response evidence
        shell: bash
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          set -euo pipefail
          mkdir -p dist
          : > dist/gh-api-access.txt
          test -n "$GH_TOKEN"
          gh api --include --method GET repos/cli/cli/git/ref/tags/v2.102.0 > dist/gh-api-access.txt
          python - <<'PYREF'
          import json, pathlib, re
          headers, body = pathlib.Path('dist/gh-api-access.txt').read_text().split('\n\n', 1)
          result = json.loads(body)
          assert re.fullmatch(r'HTTP/\S+ 200(?: .*)?', headers.splitlines()[0])
          assert result['ref'] == 'refs/tags/v2.102.0'
          assert re.fullmatch(r'[0-9a-f]{40}', result['object']['sha'])
          PYREF
      - name: Prove contextual agent loading without starting AI clients
        shell: bash
        run: |
          proof_gh_path="$(python -c 'import shutil; print(shutil.which("gh") or "", end="")')"
          python agent_docs/evidence/prove-effective-loading.py --app 'dist/app/skillview${{ matrix.ext }}' --gh "$proof_gh_path" --output dist/effective-loading-app-proof.json
          python agent_docs/evidence/prove-effective-loading.py --app 'dist/ext/gh-skillview${{ matrix.ext }}' --gh "$proof_gh_path" --output dist/effective-loading-extension-proof.json
      - name: Prove external cleanup suppression without payload mutations
        shell: bash
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          python agent_docs/evidence/prove-cleanup-suppression.py --app 'dist/app/skillview${{ matrix.ext }}' --output dist/suppression-app-proof.json
          python agent_docs/evidence/prove-cleanup-suppression.py --app 'dist/ext/gh-skillview${{ matrix.ext }}' --output dist/suppression-extension-proof.json
      - name: Prove native backup evidence and unchanged installed copies
        shell: bash
        run: |
          python agent_docs/evidence/prove-maintenance-backup.py --app 'dist/app/skillview${{ matrix.ext }}' --output dist/backup-app-proof.json
          python agent_docs/evidence/prove-maintenance-backup.py --app 'dist/ext/gh-skillview${{ matrix.ext }}' --output dist/backup-extension-proof.json
      - name: Inspect metadata with openat2 denied; retain removal refusal
        if: runner.os == 'Linux'
        run: python3 agent_docs/evidence/prove-metadata-without-openat2.py --app dist/app/skillview
      - name: Refuse linked-worktree and broken Git metadata removals
        shell: bash
        run: |
          python agent_docs/evidence/prove-gitfile-protection.py --app 'dist/app/skillview${{ matrix.ext }}' --output dist/gitfile-app-proof.json
          python agent_docs/evidence/prove-gitfile-protection.py --app 'dist/ext/gh-skillview${{ matrix.ext }}' --output dist/gitfile-extension-proof.json
      - name: Inspect native object evidence without changing installed skills
        shell: bash
        run: |
          python agent_docs/evidence/prove-native-object-evidence.py --app 'dist/app/skillview${{ matrix.ext }}' --output dist/object-app-proof.json
          python agent_docs/evidence/prove-native-object-evidence.py --app 'dist/ext/gh-skillview${{ matrix.ext }}' --output dist/object-extension-proof.json
      - name: Prove shared inventory scope and agent filters without network access
        shell: bash
        run: |
          python agent_docs/evidence/prove-inventory-filter.py --app 'dist/app/skillview${{ matrix.ext }}' --output dist/inventory-filter-app-proof.json
          python agent_docs/evidence/prove-inventory-filter.py --app 'dist/ext/gh-skillview${{ matrix.ext }}' --output dist/inventory-filter-extension-proof.json
      - name: Prove denied scan roots stay diagnostic and cannot authorize cleanup
        if: runner.os != 'Windows'
        shell: bash
        run: |
          python agent_docs/evidence/prove-inventory-denied-root.py --app 'dist/app/skillview${{ matrix.ext }}' --output dist/inventory-denied-app-proof.json
          python agent_docs/evidence/prove-inventory-denied-root.py --app 'dist/ext/gh-skillview${{ matrix.ext }}' --output dist/inventory-denied-extension-proof.json
      - name: Prove managed and built-in discovery preserves read-only resources
        shell: bash
        run: |
          python agent_docs/evidence/prove-managed-discovery.py --app 'dist/app/skillview${{ matrix.ext }}' --output dist/managed-discovery-app-proof.json
          python agent_docs/evidence/prove-managed-discovery.py --app 'dist/ext/gh-skillview${{ matrix.ext }}' --output dist/managed-discovery-extension-proof.json
      - name: Prove physical installation identities and frozen operation subjects
        shell: bash
        run: |
          python agent_docs/evidence/prove-installation-identities.py --app 'dist/app/skillview${{ matrix.ext }}' --output dist/identities-app-proof.json
          python agent_docs/evidence/prove-installation-identities.py --app 'dist/ext/gh-skillview${{ matrix.ext }}' --output dist/identities-extension-proof.json
      - name: Prove standalone quarantine and undo using native hosts
        shell: bash
        run: |
          python agent_docs/evidence/prove-quarantine-undo.py --app 'dist/app/skillview${{ matrix.ext }}' --output dist/quarantine-app-proof.json
          python agent_docs/evidence/prove-quarantine-undo.py --app 'dist/ext/gh-skillview${{ matrix.ext }}' --output dist/quarantine-extension-proof.json
      - name: Prove actual gh tracking metadata round trips through native hosts
        shell: bash
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          python agent_docs/evidence/prove-tracking-roundtrip.py --app 'dist/app/skillview${{ matrix.ext }}' --output dist/tracking-app-proof.json
          python agent_docs/evidence/prove-tracking-roundtrip.py --app 'dist/ext/gh-skillview${{ matrix.ext }}' --output dist/tracking-extension-proof.json
      - name: Prove update outcomes, same-tree repairs and no-op object preservation
        shell: bash
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          python agent_docs/evidence/prove-update-outcomes.py --app 'dist/app/skillview${{ matrix.ext }}' --output dist/update-outcomes-app-proof.json
          python agent_docs/evidence/prove-update-outcomes.py --app 'dist/ext/gh-skillview${{ matrix.ext }}' --output dist/update-outcomes-extension-proof.json
      - name: Prove recorded restoration and undo with real gh and native hosts
        shell: bash
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          python agent_docs/evidence/prove-recorded-replacement.py --app 'dist/app/skillview${{ matrix.ext }}' --output dist/replacement-app-proof.json
          python agent_docs/evidence/prove-recorded-replacement.py --app 'dist/ext/gh-skillview${{ matrix.ext }}' --output dist/replacement-extension-proof.json
      - name: Build disposable maintenance process-death proof host
        shell: bash
        run: dotnet build tests/SkillView.MaintenanceProof/SkillView.MaintenanceProof.csproj --configuration Release -p:RestoreLockedMode=true
      - name: Prove immutable revision updates with native hosts
        shell: bash
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          python agent_docs/evidence/prove-revision-update.py --app 'dist/app/skillview${{ matrix.ext }}' --output dist/revision-app-proof.json
          python agent_docs/evidence/prove-revision-update.py --app 'dist/ext/gh-skillview${{ matrix.ext }}' --output dist/revision-extension-proof.json
      - name: Prove shared owner updates and torn-registry repair after process death
        shell: bash
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          proof_gh_path="$(command -v gh)"
          python agent_docs/evidence/prove-shared-revision-update.py --app 'dist/app/skillview${{ matrix.ext }}' --proof-host 'tests/SkillView.MaintenanceProof/bin/Release/net10.0/SkillView.MaintenanceProof${{ matrix.ext }}' --gh "$proof_gh_path" --output dist/shared-owner-app-proof.json
          python agent_docs/evidence/prove-shared-revision-update.py --app 'dist/ext/gh-skillview${{ matrix.ext }}' --proof-host 'tests/SkillView.MaintenanceProof/bin/Release/net10.0/SkillView.MaintenanceProof${{ matrix.ext }}' --gh "$proof_gh_path" --output dist/shared-owner-extension-proof.json
      - name: Prove reviewed shared-owner merges and restart repair
        if: runner.os != 'Linux'
        shell: bash
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          set -euo pipefail
          proof_gh_path="$(command -v gh)"
          python agent_docs/evidence/prove-shared-revision-update.py --merged --app 'dist/app/skillview${{ matrix.ext }}' --proof-host 'tests/SkillView.MaintenanceProof/bin/Release/net10.0/SkillView.MaintenanceProof${{ matrix.ext }}' --gh "$proof_gh_path" --output dist/shared-local-merge-app-proof.json
          python agent_docs/evidence/prove-shared-revision-update.py --merged --app 'dist/ext/gh-skillview${{ matrix.ext }}' --proof-host 'tests/SkillView.MaintenanceProof/bin/Release/net10.0/SkillView.MaintenanceProof${{ matrix.ext }}' --gh "$proof_gh_path" --output dist/shared-local-merge-extension-proof.json
      - name: Prove standalone unpin without source access on both native hosts
        shell: bash
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          set -euo pipefail
          proof_gh_current="$RUNNER_TEMP/skillview-proof-gh-current/gh${{ matrix.ext }}"
          proof_gh_minimum="$RUNNER_TEMP/skillview-proof-gh-minimum/gh${{ matrix.ext }}"
          prove_unpin() {
            if [ "$RUNNER_OS" = Linux ]; then
              python agent_docs/evidence/prove-shared-revision-update.py --unpin-only --expect-metadata-refusal CAP_SYS_ADMIN "$@"
            else
              python agent_docs/evidence/prove-shared-revision-update.py --unpin-only "$@"
            fi
          }
          prove_unpin --app 'dist/app/skillview${{ matrix.ext }}' --proof-host 'tests/SkillView.MaintenanceProof/bin/Release/net10.0/SkillView.MaintenanceProof${{ matrix.ext }}' --gh "$proof_gh_minimum" --gh "$proof_gh_current" --output dist/unpin-app-proof.json
          prove_unpin --app 'dist/ext/gh-skillview${{ matrix.ext }}' --proof-host 'tests/SkillView.MaintenanceProof/bin/Release/net10.0/SkillView.MaintenanceProof${{ matrix.ext }}' --gh "$proof_gh_minimum" --gh "$proof_gh_current" --output dist/unpin-extension-proof.json
      - name: Prove captured local reimport and restart recovery on both native hosts
        shell: bash
        run: |
          set -euo pipefail
          proof_gh_current="$RUNNER_TEMP/skillview-proof-gh-current/gh${{ matrix.ext }}"
          proof_gh_minimum="$RUNNER_TEMP/skillview-proof-gh-minimum/gh${{ matrix.ext }}"
          prove_reimport() {
            if [ '${{ matrix.rid }}' = linux-x64 ]; then
              python agent_docs/evidence/prove-local-reimport.py --expect-metadata-refusal CAP_SYS_ADMIN "$@"
            else
              python agent_docs/evidence/prove-local-reimport.py "$@"
            fi
          }
          prove_reimport --app 'dist/app/skillview${{ matrix.ext }}' --proof-host 'tests/SkillView.MaintenanceProof/bin/Release/net10.0/SkillView.MaintenanceProof${{ matrix.ext }}' --gh "$proof_gh_minimum" --gh "$proof_gh_current" --output dist/local-reimport-app-proof.json
          prove_reimport --app 'dist/ext/gh-skillview${{ matrix.ext }}' --proof-host 'tests/SkillView.MaintenanceProof/bin/Release/net10.0/SkillView.MaintenanceProof${{ matrix.ext }}' --gh "$proof_gh_minimum" --gh "$proof_gh_current" --output dist/local-reimport-extension-proof.json
          prove_old_unpin() {
            if [ '${{ matrix.rid }}' = linux-x64 ]; then
              python agent_docs/evidence/prove-old-native-unpin.py --expect-metadata-refusal CAP_SYS_ADMIN "$@"
            else
              python agent_docs/evidence/prove-old-native-unpin.py "$@"
            fi
          }
          prove_old_unpin --old-app "$SKILLVIEW_UNPIN_CHECKOUT/dist/app/skillview${{ matrix.ext }}" --old-checkout "$SKILLVIEW_UNPIN_CHECKOUT" --app 'dist/app/skillview${{ matrix.ext }}' --proof-host 'tests/SkillView.MaintenanceProof/bin/Release/net10.0/SkillView.MaintenanceProof${{ matrix.ext }}' --gh "$proof_gh_current" --kill-boundary retain-moved --output dist/old-native-unpin-app-proof.json
          prove_old_unpin --old-app "$SKILLVIEW_UNPIN_CHECKOUT/dist/app/skillview${{ matrix.ext }}" --old-checkout "$SKILLVIEW_UNPIN_CHECKOUT" --app 'dist/ext/gh-skillview${{ matrix.ext }}' --proof-host 'tests/SkillView.MaintenanceProof/bin/Release/net10.0/SkillView.MaintenanceProof${{ matrix.ext }}' --gh "$proof_gh_current" --kill-boundary install-moved --output dist/old-native-unpin-extension-proof.json
      - name: Prove privileged Linux local reimport on private tmpfs
        if: matrix.rid == 'linux-x64'
        shell: bash
        run: |
          set -euo pipefail
          for host in app/skillview ext/gh-skillview; do
            proof_name="${host%%/*}"
            proof_boundary=retain-moved
            if [ "$proof_name" = ext ]; then proof_boundary=install-moved; fi
            python3 agent_docs/evidence/run-local-merge-disk-full-docker.py --local-reimport \
              --app "dist/$host" --proof-host-dir tests/SkillView.MaintenanceProof/bin/Release/net10.0 \
              --gh "$RUNNER_TEMP/skillview-proof-gh-current/gh" --extra-gh "$RUNNER_TEMP/skillview-proof-gh-minimum/gh" \
              --legacy-app "$SKILLVIEW_UNPIN_CHECKOUT/dist/app/skillview" --legacy-checkout "$SKILLVIEW_UNPIN_CHECKOUT" --legacy-kill-boundary "$proof_boundary" \
              --output "dist/local-reimport-privileged-$proof_name-proof" --platform linux/amd64
          done
      - name: Prove local source switching and actual schema5/6 recovery on both native hosts
        shell: bash
        run: |
          set -euo pipefail
          proof_gh_current="$RUNNER_TEMP/skillview-proof-gh-current/gh${{ matrix.ext }}"
          proof_gh_minimum="$RUNNER_TEMP/skillview-proof-gh-minimum/gh${{ matrix.ext }}"
          if [ '${{ matrix.rid }}' = linux-x64 ]; then
            source_switch_tmp="$(sudo mktemp -d /skillview-source-switch-refusal.XXXXXXXX)"
            sudo chown "$(id -u):$(id -g)" "$source_switch_tmp"
            trap 'sudo rmdir -- "$source_switch_tmp"' EXIT
            export TMPDIR="$source_switch_tmp"
            python - <<'PY'
          import os
          assert os.stat('/').st_dev == os.stat(os.environ['TMPDIR']).st_dev
          assert not os.path.ismount(os.environ['TMPDIR']), 'Placement refusal fixtures require the root mount'
          PY
          fi
          prove_switch() {
            if [ '${{ matrix.rid }}' = linux-x64 ]; then
              python agent_docs/evidence/prove-local-source-switch.py --expect-metadata-refusal CAP_SYS_ADMIN "$@"
            else
              python agent_docs/evidence/prove-local-source-switch.py "$@"
            fi
          }
          prove_legacy() {
            if [ '${{ matrix.rid }}' = linux-x64 ]; then
              python agent_docs/evidence/prove-old-native-reimport.py --expect-metadata-refusal CAP_SYS_ADMIN "$@"
            else
              python agent_docs/evidence/prove-old-native-reimport.py "$@"
            fi
          }
          prove_switch --app 'dist/app/skillview${{ matrix.ext }}' --proof-host 'tests/SkillView.MaintenanceProof/bin/Release/net10.0/SkillView.MaintenanceProof${{ matrix.ext }}' --gh "$proof_gh_minimum" --gh "$proof_gh_current" --output dist/local-source-switch-app-proof.json
          prove_switch --app 'dist/ext/gh-skillview${{ matrix.ext }}' --proof-host 'tests/SkillView.MaintenanceProof/bin/Release/net10.0/SkillView.MaintenanceProof${{ matrix.ext }}' --gh "$proof_gh_minimum" --gh "$proof_gh_current" --output dist/local-source-switch-extension-proof.json
          prove_legacy --old-app "$SKILLVIEW_REIMPORT_CHECKOUT/dist/app/skillview${{ matrix.ext }}" --old-checkout "$SKILLVIEW_REIMPORT_CHECKOUT" --app 'dist/app/skillview${{ matrix.ext }}' --proof-host 'tests/SkillView.MaintenanceProof/bin/Release/net10.0/SkillView.MaintenanceProof${{ matrix.ext }}' --gh "$proof_gh_current" --kill-boundary retain-moved --output dist/old-native-reimport-app-proof.json
          prove_legacy --old-app "$SKILLVIEW_REIMPORT_CHECKOUT/dist/app/skillview${{ matrix.ext }}" --old-checkout "$SKILLVIEW_REIMPORT_CHECKOUT" --app 'dist/ext/gh-skillview${{ matrix.ext }}' --proof-host 'tests/SkillView.MaintenanceProof/bin/Release/net10.0/SkillView.MaintenanceProof${{ matrix.ext }}' --gh "$proof_gh_current" --kill-boundary install-moved --output dist/old-native-reimport-extension-proof.json
          prove_legacy --legacy-schema 6 --old-app "$SKILLVIEW_SOURCE_SWITCH_CHECKOUT/dist/app/skillview${{ matrix.ext }}" --old-checkout "$SKILLVIEW_SOURCE_SWITCH_CHECKOUT" --app 'dist/app/skillview${{ matrix.ext }}' --proof-host 'tests/SkillView.MaintenanceProof/bin/Release/net10.0/SkillView.MaintenanceProof${{ matrix.ext }}' --gh "$proof_gh_current" --kill-boundary retain-moved --output dist/old-native-source-switch-app-proof.json
          prove_legacy --legacy-schema 6 --old-app "$SKILLVIEW_SOURCE_SWITCH_CHECKOUT/dist/app/skillview${{ matrix.ext }}" --old-checkout "$SKILLVIEW_SOURCE_SWITCH_CHECKOUT" --app 'dist/ext/gh-skillview${{ matrix.ext }}' --proof-host 'tests/SkillView.MaintenanceProof/bin/Release/net10.0/SkillView.MaintenanceProof${{ matrix.ext }}' --gh "$proof_gh_current" --kill-boundary install-moved --output dist/old-native-source-switch-extension-proof.json
      - name: Prove privileged Linux source switching on the private container root
        if: matrix.rid == 'linux-x64'
        shell: bash
        run: |
          set -euo pipefail
          for host in app/skillview ext/gh-skillview; do
            proof_name="${host%%/*}"
            proof_boundary=retain-moved
            if [ "$proof_name" = ext ]; then proof_boundary=install-moved; fi
            python3 agent_docs/evidence/run-local-source-switch-docker.py \
              --app "dist/$host" --proof-host-dir tests/SkillView.MaintenanceProof/bin/Release/net10.0 \
              --gh "$RUNNER_TEMP/skillview-proof-gh-current/gh" --extra-gh "$RUNNER_TEMP/skillview-proof-gh-minimum/gh" \
              --legacy-app "$SKILLVIEW_REIMPORT_CHECKOUT/dist/app/skillview" --legacy-checkout "$SKILLVIEW_REIMPORT_CHECKOUT" --legacy-kill-boundary "$proof_boundary" \
              --source-switch-legacy-app "$SKILLVIEW_SOURCE_SWITCH_CHECKOUT/dist/app/skillview" --source-switch-legacy-checkout "$SKILLVIEW_SOURCE_SWITCH_CHECKOUT" \
              --output "dist/local-source-switch-privileged-$proof_name-proof" --platform linux/amd64
          done
      - name: Capture source-switch proof inputs
        if: always()
        shell: bash
        run: |
          set -euo pipefail
          mkdir -p dist/source-switch-proof-inputs
          cp agent_docs/evidence/prove-local-source-switch.py agent_docs/evidence/prove-old-native-reimport.py \
            agent_docs/evidence/prove-local-reimport.py agent_docs/evidence/source_review_proof.py agent_docs/evidence/run-local-source-switch-docker.py \
            tests/SkillView.MaintenanceProof/Program.cs dist/source-switch-proof-inputs/
      - name: Prove actual previous native saved plans survive the new schema boundary
        shell: bash
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          set -euo pipefail
          proof_gh_current="$RUNNER_TEMP/skillview-proof-gh-current/gh${{ matrix.ext }}"
          prove_legacy() {
            if [ "$RUNNER_OS" = Linux ]; then
              python agent_docs/evidence/prove-old-native-plans.py --expect-schema3-metadata-refusal CAP_SYS_ADMIN "$@"
            else
              python agent_docs/evidence/prove-old-native-plans.py "$@"
            fi
          }
          prove_legacy --old-app "$SKILLVIEW_LEGACY_CHECKOUT/dist/app/skillview${{ matrix.ext }}" --old-checkout "$SKILLVIEW_LEGACY_CHECKOUT" --app 'dist/app/skillview${{ matrix.ext }}' --proof-host 'tests/SkillView.MaintenanceProof/bin/Release/net10.0/SkillView.MaintenanceProof${{ matrix.ext }}' --gh "$proof_gh_current" --kill-boundary retain-moved --output dist/old-native-app-proof.json
          prove_legacy --old-app "$SKILLVIEW_LEGACY_CHECKOUT/dist/app/skillview${{ matrix.ext }}" --old-checkout "$SKILLVIEW_LEGACY_CHECKOUT" --app 'dist/ext/gh-skillview${{ matrix.ext }}' --proof-host 'tests/SkillView.MaintenanceProof/bin/Release/net10.0/SkillView.MaintenanceProof${{ matrix.ext }}' --gh "$proof_gh_current" --kill-boundary install-moved --output dist/old-native-extension-proof.json
      - name: Prove privileged Linux unpin and native schema compatibility on private tmpfs
        if: runner.os == 'Linux'
        shell: bash
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          set -euo pipefail
          for host in app/skillview ext/gh-skillview; do
            proof_name="${host%%/*}"
            proof_boundary=retain-moved
            if [ "$proof_name" = ext ]; then proof_boundary=install-moved; fi
            python3 agent_docs/evidence/run-local-merge-disk-full-docker.py --unpin-only \
              --app "dist/$host" --proof-host-dir tests/SkillView.MaintenanceProof/bin/Release/net10.0 \
              --gh "$RUNNER_TEMP/skillview-proof-gh-current/gh" --extra-gh "$RUNNER_TEMP/skillview-proof-gh-minimum/gh" \
              --legacy-app "$SKILLVIEW_LEGACY_CHECKOUT/dist/app/skillview" --legacy-checkout "$SKILLVIEW_LEGACY_CHECKOUT" --legacy-kill-boundary "$proof_boundary" \
              --output "dist/unpin-privileged-$proof_name-proof" --platform linux/amd64
          done
      - name: Prove reviewed local dispositions and frozen resolutions
        shell: bash
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          set -euo pipefail
          proof_gh_path="$(command -v gh)"
          prove_local_merge() {
            if [ "$RUNNER_OS" = Linux ]; then
              python agent_docs/evidence/prove-local-merge-update.py --gh "$proof_gh_path" --resolved --expect-metadata-refusal CAP_SYS_ADMIN "$@"
            else
              python agent_docs/evidence/prove-local-merge-update.py --gh "$proof_gh_path" --resolved "$@"
            fi
          }
          prove_local_merge --app 'dist/app/skillview${{ matrix.ext }}' --output dist/local-merge-app-proof.json
          prove_local_merge --app 'dist/ext/gh-skillview${{ matrix.ext }}' --output dist/local-merge-extension-proof.json
      - name: Prove merged payload restart recovery at every directory move
        if: runner.os != 'Linux'
        shell: bash
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          set -euo pipefail
          proof_gh_path="$(command -v gh)"
          for boundary in retain-moved install-moved displace-moved restore-moved; do
            python agent_docs/evidence/prove-local-merge-update.py --app 'dist/app/skillview${{ matrix.ext }}' --gh "$proof_gh_path" --resolved \
              --proof-host 'tests/SkillView.MaintenanceProof/bin/Release/net10.0/SkillView.MaintenanceProof${{ matrix.ext }}' \
              --kill-boundary "$boundary" --output "dist/local-merge-killed-${boundary}-proof.json"
          done
      - name: Prove real disk-full recovery on isolated bounded tmpfs
        if: runner.os == 'Linux'
        shell: bash
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          set -euo pipefail
          proof_gh_path="$(command -v gh)"
          python3 agent_docs/evidence/run-local-merge-disk-full-docker.py \
            --app dist/app/skillview \
            --proof-host-dir tests/SkillView.MaintenanceProof/bin/Release/net10.0 \
            --gh "$proof_gh_path" --output dist/disk-full-proof --platform linux/amd64
      - name: Retain native verification evidence
        if: always()
        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
        with:
          name: native-maintenance-evidence-${{ matrix.rid }}
          path: |
            dist/*-proof.json
            dist/evaluation-*-proof/**
            dist/evaluation-fixture-image.json
            dist/authoring-*-proof/**
            dist/gh-api-access.txt
            dist/disk-full-proof/**
            dist/unpin-privileged-*-proof/**
            dist/local-reimport-privileged-*-proof/**
            dist/local-source-switch-privileged-*-proof/**
            dist/old-native-reimport-*-proof-raw/**
            dist/source-switch-proof-inputs/**
          if-no-files-found: warn
          retention-days: 14