{"ok":true,"meta":{"generatedAt":"2026-06-30T13:18:29.762Z"},"data":{"version":"tzv3-ci-policy-v1","endpoint":"/api/infrastructure/ci-policy","command":"npm run ci:audit","script":"scripts/tzv3-ci-audit.mjs","hostedRunAuditCommand":"npm run github-ci:audit","hostedRunAuditScript":"scripts/tzv3-github-ci-audit.mjs","workflowPath":".github/workflows/tzv3-ci.yml","configured":true,"contractReady":false,"productionReady":false,"requiredCommands":["npm ci","npm run source:audit","npm run preflight","npm run schedule:provider-reconciliation","npm start -- --hostname 127.0.0.1","npm run database:seed-payload","npm run search:bulk-payload"],"requiredWorkflowSignals":["pull_request:","push:","branches:","main","permissions:","contents: read","actions/checkout@v4","actions/setup-node@v4","node-version: 24.13.0","TZV3_BASE_URL: http://127.0.0.1:3000","Start production server","curl --fail --silent --show-error","timeout-minutes: 20"],"observed":{"workflowPresent":false,"commandChecks":[{"value":"npm ci","present":false},{"value":"npm run source:audit","present":false},{"value":"npm run preflight","present":false},{"value":"npm run schedule:provider-reconciliation","present":false},{"value":"npm start -- --hostname 127.0.0.1","present":false},{"value":"npm run database:seed-payload","present":false},{"value":"npm run search:bulk-payload","present":false}],"workflowChecks":[{"value":"pull_request:","present":false},{"value":"push:","present":false},{"value":"branches:","present":false},{"value":"main","present":false},{"value":"permissions:","present":false},{"value":"contents: read","present":false},{"value":"actions/checkout@v4","present":false},{"value":"actions/setup-node@v4","present":false},{"value":"node-version: 24.13.0","present":false},{"value":"TZV3_BASE_URL: http://127.0.0.1:3000","present":false},{"value":"Start production server","present":false},{"value":"curl --fail --silent --show-error","present":false},{"value":"timeout-minutes: 20","present":false}]},"productionBoundary":["GitHub Actions CI is a no-write quality gate for push and pull_request on main.","The workflow must not deploy, write Vercel env, write database rows, create schedule providers, or call production webhooks.","A green local CI policy does not prove GitHub hosted CI has passed; run github-ci:audit to capture the latest successful hosted GitHub Actions run before final production promotion.","Production launch still requires preflight:production, deployed-domain readiness, SEO audit, load smoke, provider data, env, database, CDN, legal, Telegram, and VIP workflow evidence."],"safety":{"mode":"read-only","writes":false,"network":false,"deploys":false,"printsSecrets":false,"note":"Reads the local workflow file and package scripts only. It does not call GitHub, Vercel, schedule, database, Telegram, or external providers."},"productionWarnings":[{"check":"github-actions-run","detail":"Latest hosted GitHub Actions run is verified separately by npm run github-ci:audit."}],"contractFailures":[{"check":"workflow-present","detail":".github/workflows/tzv3-ci.yml should exist."},{"check":"required-command-present","detail":"npm ci"},{"check":"required-command-present","detail":"npm run source:audit"},{"check":"required-command-present","detail":"npm run preflight"},{"check":"required-command-present","detail":"npm run schedule:provider-reconciliation"},{"check":"required-command-present","detail":"npm start -- --hostname 127.0.0.1"},{"check":"required-command-present","detail":"npm run database:seed-payload"},{"check":"required-command-present","detail":"npm run search:bulk-payload"},{"check":"workflow-signal-present","detail":"pull_request:"},{"check":"workflow-signal-present","detail":"push:"},{"check":"workflow-signal-present","detail":"branches:"},{"check":"workflow-signal-present","detail":"main"},{"check":"workflow-signal-present","detail":"permissions:"},{"check":"workflow-signal-present","detail":"contents: read"},{"check":"workflow-signal-present","detail":"actions/checkout@v4"},{"check":"workflow-signal-present","detail":"actions/setup-node@v4"},{"check":"workflow-signal-present","detail":"node-version: 24.13.0"},{"check":"workflow-signal-present","detail":"TZV3_BASE_URL: http://127.0.0.1:3000"},{"check":"workflow-signal-present","detail":"Start production server"},{"check":"workflow-signal-present","detail":"curl --fail --silent --show-error"},{"check":"workflow-signal-present","detail":"timeout-minutes: 20"}]}}