kandev/docs/specs/ci

status, system, specification_version, migration, owners

status	system	specification_version	migration	owners
active	ci	1	in_progress	kandev

CI automation system

Purpose

The CI automation system defines base-controlled GitHub Actions behavior for contributor pull requests. It owns the trust gates for AI review, preview deployment, and pull request walkthrough generation.

Ownership

• Maintainer approval labels and their persistence rules.
• Direct contributor allowlist gates and their fail-closed behavior.
• Workflow event filters and job-level authorization expressions.
• Permissions and credential boundaries for review, preview, walkthrough, and publication jobs.
• Workflow contract tests for these boundaries.

Exclusions

• The review provider prompts and provider-specific agent behavior.
• The preview deployment command and its infrastructure.
• The walkthrough skill, renderer, and artifact format.
• Kandev application state or user-interface behavior.

Specification map

Requirements

• Unified contributor PR automation
• Contributor merge approval revocation

System design

• Unified contributor PR automation
• Contributor merge approval revocation

Migration

The new shared trust contract replaces the label portions of the Claude fork review allowlist requirement and the PR walkthrough requirement. Provider and walkthrough behavior remains in those canonical owning systems.