mirror of
https://github.com/uutils/shadow.git
synced 2026-10-16 02:48:14 -07:00
* ci: reject AI tooling artifacts in pull requests The project's public face carries no AI tooling attribution, but nothing enforced it: a session trailer reached a merged commit message and a pull request body before anyone noticed. Add a check that runs on pull requests and inspects only what the PR changes — commit messages, PR title and body, added lines, and any attempt to track the local-only guidance and review-export files that are meant to stay gitignored. History is untouched and unrelated files are not scanned. The clean-room audit records are exempt: they must describe their own methodology to serve as compliance evidence. Also drop the tooling credits from README and CHANGELOG. * ci: fix base-ref fetch in the artifact check `--depth=0` is rejected by git, and the extra fetch was redundant with the full-history checkout. Fetch the base branch plainly and diff against FETCH_HEAD.