Skip to content

Infrastructure CICD Project Governance

Jump to bottom
elb-pr edited this page Apr 7, 2026 · 2 revisions

Infrastructure, CI/CD & Project Governance

The following files were used as context for generating this wiki page:

This section provides a high-level overview of the systems and policies that ensure the stability, security, and evolution of the Claude Sleuth (DI Claudian) toolkit. It covers the automated pipelines used for quality assurance and releases, the security protocols for vulnerability disclosure, and the governance model for community contributions.

CI/CD & Automation

The project utilizes GitHub Actions to maintain high code quality and automate the delivery of new versions. These workflows ensure that every change is verified against supported Python environments and that releases are consistently documented.

Smoke Testing

The continuous integration pipeline performs "smoke tests" to verify the integrity of the toolkit across multiple environments. It specifically targets Python versions 3.10, 3.11, and 3.12 .github/workflows/ci.yml:16-16. The tests confirm that:

Automated Release Process

The release workflow is triggered by the creation of a version tag (e.g., v1.0.0) .github/workflows/release.yml:4-6. It automates the generation of GitHub Release notes by parsing the CHANGELOG.md file using awk and sed to extract only the relevant entries for the new version .github/workflows/release.yml:25-32.

For a deep dive into the specific shell commands and matrix configurations, see CI/CD: Smoke Tests & Release Automation.

Project Governance & Security

Claude Sleuth follows a structured governance model to maintain the rigor required for intelligence investigation tools. This includes strict branching strategies and a coordinated disclosure policy for security vulnerabilities.

Security Policy

The project maintains a 48-hour acknowledgement SLA for reported vulnerabilities .github/SECURITY.md:24-24. Security issues are handled via a private communication channel to prevent premature disclosure of exploits that could impact ongoing investigations .github/SECURITY.md:11-13.

Contribution Workflow

Contributions are managed through a "Fork and Pull" model. The main branch is protected and serves as the stable production-ready code .github/CONTRIBUTING.md:36-36. Contributors are required to use specific naming conventions for branches (e.g., feature/, fix/, docs/) and provide atomic, imperative commit messages .github/CONTRIBUTING.md:37-48.

For details on the disclosure timeline, PR requirements, and issue templates, see Contributing, Security & Issue Tracking.

System Integration Map

The following diagrams illustrate the relationship between the GitHub infrastructure and the local development/execution environment.

Infrastructure to Code Mapping

This diagram shows how GitHub Actions interact with the core Python scripts and metadata files.

graph TD
    subgraph "GitHub_Infrastructure"
        CI_Workflow[".github/workflows/ci.yml"]
        Release_Workflow[".github/workflows/release.yml"]
        Security_Policy[".github/SECURITY.md"]
    end

    subgraph "Code_Entities"
        TR["scripts/task_runner.py"]
        TB["scripts/template_builder.py"]
        SP["scripts/setup.py"]
        CL["CHANGELOG.md"]
    end

    CI_Workflow -- "executes --help" --> TR
    CI_Workflow -- "executes --help" --> TB
    CI_Workflow -- "executes --list" --> SP
    Release_Workflow -- "parses via awk" --> CL
Loading

Sources: .github/workflows/ci.yml:33-39, .github/workflows/release.yml:25-32

Contribution & Release Flow

This diagram maps the lifecycle of a change from a local feature branch to an automated GitHub Release.

graph LR
    subgraph "Contributor_Space"
        FB["feature/branch"]
        PR["Pull Request"]
    end

    subgraph "Automation_Space"
        SmokeTests["Smoke Tests (Py 3.10-3.12)"]
        Tag["git v* tag"]
        RelGen["release.yml"]
    end

    subgraph "Distribution"
        GHR["GitHub Release"]
    end

    FB -- "push & open" --> PR
    PR -- "triggers" --> SmokeTests
    SmokeTests -- "on merge" --> Tag
    Tag -- "triggers" --> RelGen
    RelGen -- "creates" --> GHR
Loading

Sources: .github/CONTRIBUTING.md:34-49, .github/workflows/ci.yml:6-7, .github/workflows/release.yml:4-6

Summary of Governance Standards

Area Policy / Tool File Reference
Python Support 3.10, 3.11, 3.12 .github/workflows/ci.yml:16-16
Branching Feature/Fix/Docs prefixes .github/CONTRIBUTING.md:37-39
Vulnerability Reporting Email (elb.pr.contact@gmail.com) .github/SECURITY.md:13-13
SLA 48h Ack / 5d Assessment .github/SECURITY.md:24-25
Release Notes Automated from CHANGELOG.md .github/workflows/release.yml:29-32

Sources: .github/CONTRIBUTING.md:1-69, .github/SECURITY.md:1-40, .github/workflows/ci.yml:1-53, .github/workflows/release.yml:1-42

Overview

Investigation Phases

CLI Tools

Scripts

Templates

CSDb

Project

Clone this wiki locally