AWatch-rus/docs/QUALITY_STATUS_RU.md

Quality status

Статус: public engineering transparency document.

CI status

Public GitHub Actions workflows are available for mirror validation:

• CI: Rust checks, registry/docs checks and smoke checks.
• Coverage: cargo-llvm-cov baseline summary.
• Security: cargo audit, cargo deny, secret-pattern check and dependency review for pull requests.

GitHub Actions is public mirror validation only. Public CI is not registry release evidence and is not the primary registry build contour.

First public validation passed after 4f90aba chore(security): harden public secret scan and document policy:

• CI: passed.
• Coverage: passed.
• Security: passed.
• Secret-pattern scan: hardened and passed.

Coverage baseline policy

Coverage threshold is not enforced yet. The first stage is tracking and regression visibility:

• collect cargo llvm-cov --workspace --summary-only;
• store coverage summary artifact;
• avoid failing early public builds by percentage before baseline review;
• add future threshold after the first stable baseline is reviewed.

Registry release build

Registry release build and release evidence must be produced on the Russian build-runner described in docs/registry/RU_BUILD_RUNNER_READINESS_RU.md.

Public validation passed does not replace Russian build-runner release evidence. Russian build-runner still required for registry release evidence.

Security checks

Public security checks are advisory/public validation. Registry release security evidence must be generated in the Russian build contour.

Current local engineering gate for product changes is documented in docs/OPERATIONS_VALIDATION_RUNBOOK_RU.md and includes:

• full Rust workspace tests with --workspace --all-targets --locked;
• doc tests;
• clippy with -D warnings;
• RustSec check through cargo audit --deny warnings;
• dependency policy through cargo deny;
• repository quality-gate;
• public secret-pattern check;
• browser smoke through ActivityWatch UI, worktime reports, 1C manager pages, gateway and Grafana dashboards.

Conservative positioning

The quality layer does not claim certification, does not position AWatch-rus as a SIEM/DLP replacement and does not claim legal completion of Russian software registry registration.