-
cargo fmt,cargo clippy -D warnings,cargo test(if Rust changed) -
cargo deny check/cargo audit(if dependencies or lockfiles changed) -
lake buildandlake exe test_rbac,test_tenant,test_attest(if Lean changed) -
ruff check,pytest tests/(if Python changed)
- No secrets or credentials committed
- TRACEABILITY.md updated if formal spec ↔ code mapping changed
- docs/README.md or README.md updated if user-facing workflows or layout changed materially