Final controlled-beta evidence #1

	name: Final controlled-beta evidence

	on:
	workflow_dispatch:
	inputs:
	release_id:
	description: Approved non-secret release identifier
	required: true

	permissions:
	contents: read

	jobs:
	verify-final-candidate:
	runs-on: ubuntu-latest
	timeout-minutes: 30
	steps:
	- name: Check out approved candidate
	uses: actions/checkout@v4

	- name: Use Node.js 22
	uses: actions/setup-node@v4
	with:
	node-version: 22.13.0
	cache: npm
	cache-dependency-path: \|
	backend/package-lock.json
	frontend/package-lock.json
	website/package-lock.json

	- name: Install locked dependencies
	run: npm run install:all

	- name: Verify immutable release identifier
	env:
	INPUT_RELEASE_ID: ${{ inputs.release_id }}
	run: node scripts/verify-final-release-id.mjs

	- name: Run complete engineering gate
	run: npm run check

	- name: Run fail-closed final completion gate
	run: npm run final:check

	- name: Archive non-secret final evidence
	uses: actions/upload-artifact@v4
	with:
	name: ross-${{ inputs.release_id }}-final-evidence
	retention-days: 90
	if-no-files-found: error
	path: \|
	reports/final-completion-dossier.md
	reports/ontario-evaluation-v1.json
	reports/legal-source-health-v1.json
	reports/backup-restore-exercise-2026-07-18.json
	reports/release-manifest-v1.json
	config/final-completion.v1.json
	config/professional-validation.v1.json
	config/release-approvals.v1.json
	config/operations-readiness.v1.json
	config/launch-readiness.v1.json
	docs/release-evidence/effective-notices-owner-approval-2026-07-18.md

	# Evidence only. Deployment remains a separate, human-approved action.

Navigation Menu