42 lines
1.4 KiB
Markdown
42 lines
1.4 KiB
Markdown
# Quality status
|
|
|
|
Статус: public engineering transparency document.
|
|
|
|
## CI status
|
|
|
|
Public GitHub Actions workflows are available for mirror validation:
|
|
|
|
- `CI`: Rust checks, registry/docs checks and smoke checks.
|
|
- `Coverage`: cargo-llvm-cov baseline summary.
|
|
- `Security`: cargo audit, cargo deny, secret-pattern check and dependency
|
|
review for pull requests.
|
|
|
|
GitHub Actions is public mirror validation only. Public CI is not registry release evidence and is not the primary registry build contour.
|
|
|
|
## Coverage baseline policy
|
|
|
|
Coverage threshold is not enforced yet. The first stage is tracking and
|
|
regression visibility:
|
|
|
|
- collect `cargo llvm-cov --workspace --summary-only`;
|
|
- store coverage summary artifact;
|
|
- avoid failing early public builds by percentage before baseline review;
|
|
- add future threshold after the first stable baseline is reviewed.
|
|
|
|
## Registry release build
|
|
|
|
Registry release build and release evidence must be produced on the Russian
|
|
build-runner described in
|
|
`docs/registry/RU_BUILD_RUNNER_READINESS_RU.md`.
|
|
|
|
## Security checks
|
|
|
|
Public security checks are advisory/public validation. Registry release
|
|
security evidence must be generated in the Russian build contour.
|
|
|
|
## Conservative positioning
|
|
|
|
The quality layer does not claim certification, does not position AWatch-rus as
|
|
a SIEM/DLP replacement and does not claim legal completion of Russian software
|
|
registry registration.
|