lib

commit 1419b5aeb98fba2c45109d0ede94dac851773954
parent 7b798f4dc5771dd052e494ee0311db3a1112608f
Author: triesap <tyson@radroots.org>
Date:   Sat, 21 Feb 2026 19:36:54 +0000

ci: enforce blocking 100-100-100 for `radroots-identity`


- add a blocking identity coverage gate step in sdk coverage ci
- require branch coverage for the identity blocking gate path
- publish the identity blocking gate report artifact for audits
- keep non-blocking crate coverage reporting unchanged

Diffstat:
M
.github/workflows/sdk-coverage-ci.yml
 | 
15
+++++++++++++++

1 file changed, 15 insertions(+), 0 deletions(-)
diff --git a/.github/workflows/sdk-coverage-ci.yml b/.github/workflows/sdk-coverage-ci.yml
@@ -105,6 +105,20 @@ jobs:
             --fail-under-branches 100 \
             --require-branches
 
+      - name: enforce blocking identity coverage gate
+        run: |
+          set -euo pipefail
+          identity_dir="target/sdk-coverage/radroots_identity"
+          cargo run -q -p xtask -- sdk coverage report \
+            --scope "radroots-identity-blocking" \
+            --summary "${identity_dir}/coverage-summary.json" \
+            --lcov "${identity_dir}/coverage-lcov.info" \
+            --out "${identity_dir}/coverage-gate-blocking.json" \
+            --fail-under-exec-lines 100 \
+            --fail-under-functions 100 \
+            --fail-under-branches 100 \
+            --require-branches
+
       - name: upload sdk coverage reports
         uses: actions/upload-artifact@v4
         with:
@@ -114,3 +128,4 @@ jobs:
             target/sdk-coverage/radroots_core/coverage-gate-blocking.json
             target/sdk-coverage/radroots_types/coverage-gate-blocking.json
             target/sdk-coverage/radroots_events/coverage-gate-blocking.json
+            target/sdk-coverage/radroots_identity/coverage-gate-blocking.json