Skip to content

docs(governance): 支持 Registry 完整 Worker 预览 #32

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
xiaoland wants to merge 1 commit into
base: main
Choose a base branch
from
Open

docs(governance): 支持 Registry 完整 Worker 预览 #32

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 7 additions & 2 deletions GOVERNANCE.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -75,7 +75,7 @@ of the tool or merge method.
### Pull-request validation

A pull-request validation workflow proves a candidate change but does not
produce a Pages preview delivery input. A Pages preview workflow may run after
produce a preview delivery input. A preview workflow may run after
successful validation, but it must check out the exact pull-request head and
own its preview build and upload. Preview delivery requires all of these
controls:
Expand Down Expand Up @@ -161,7 +161,12 @@ required context.
| `client-web` | `Workspace contract`, `Dependency review`, `client-web E2E`, and `client-webext E2E`; isolated Pages preview | Focused web release build and same-run production Pages delivery |
| `ui` | `ui-web checks`; isolated runner-pushed Histoire preview | Changesets package publication and runner-pushed Histoire deployment |
| `docs` | Website contract | Website release build and production Pages delivery |
| `ext-reg` | `ext-reg checks`; CI-orchestrated trusted-controller static Pages preview built from the exact head for same-repository PRs | Exact-current-main native Registry verification and deployment through the protected production environment |
| `ext-reg` | `ext-reg checks`; CI-orchestrated trusted-controller Python Worker preview built from the exact head, with per-PR D1/R2 for same-repository PRs | Exact-current-main native Registry verification and deployment through the protected production environment |

For `ext-reg`, the preview workflow owns its build and transfers only built
Python modules and SQL to a separate trusted delivery runner. The controller
owns resource bindings and credentials; the candidate Worker receives only its
own D1/R2. Closing the PR retires the Worker and deletes those resources.

Check names and commands remain repository-local implementation truth. The
profiles standardize authority and evidence semantics, not identical jobs.
Expand Down