CI CD

🔄 CI/CD Workflows

All workflows live in .github/workflows/.

Workflow Summary

File	Trigger	Purpose
ci.yml	push/PR to main	Test matrix (Py 3.11+3.12), coverage ≥60%, React tests, wheel build, Docker build check
codeql.yml	push/PR/weekly	Advanced CodeQL security scan (Python + JS + Actions)
release.yml	v* tag push	Build wheel+tarball → create GitHub Release with assets
publish.yml	v* tag push	Build → publish to PyPI via twine + PYPI_TOKEN secret
docker-publish.yml	push to main / v* tags	Multi-platform Docker Buildx image build
nightly-stress.yml	Daily 00:00 UTC	Full stress benchmark + 148-stage dialectical pipeline
lint.yml	push/PR to main	Python bytecode compile check across all 176 subsystems + React component AST validation

Triggering a Release

git tag v32.1.0
git push origin v32.1.0
# → release.yml creates GitHub Release with wheel + tarball
# → publish.yml uploads to PyPI

Coverage Gate

CI enforces --fail-under=60. Current coverage: 81.31%.