Pierre Warnier 90faf4cc86 ci: reject AI tooling artifacts in pull requests (#219) ...

* ci: reject AI tooling artifacts in pull requests

The project's public face carries no AI tooling attribution, but nothing
enforced it: a session trailer reached a merged commit message and a pull
request body before anyone noticed.

Add a check that runs on pull requests and inspects only what the PR
changes — commit messages, PR title and body, added lines, and any
attempt to track the local-only guidance and review-export files that
are meant to stay gitignored. History is untouched and unrelated files
are not scanned. The clean-room audit records are exempt: they must
describe their own methodology to serve as compliance evidence.

Also drop the tooling credits from README and CHANGELOG.

* ci: fix base-ref fetch in the artifact check

`--depth=0` is rejected by git, and the extra fetch was redundant with
the full-history checkout. Fetch the base branch plainly and diff against
FETCH_HEAD.

2026-09-03 12:06:56 +02:00

..

audit.yml

chore(deps): update actions/checkout action to v7

2026-06-19 08:21:09 +02:00

ci.yml

ci: reject AI tooling artifacts in pull requests (#219)

2026-09-03 12:06:56 +02:00

release.yml

ci: publish release binaries with dist (#207) (#216)

2026-09-03 11:54:24 +02:00