fix(rulesets): negative control for the required deploy guards (do not merge)

.github/workflows/ci.yaml

@@ -46,27 +46,6 @@ jobs:
         # CRDs are applied/validated on-cluster, not here.
         run: kubectl kustomize deploy/ > /dev/null
 
-      - name: 🗑️ Validate deploy/ deletions are acknowledged
-        # Compares the RENDERED deploy/ output at the base and head by resource
-        # identity, so a resource cut out of a multi-document file is caught as
-        # surely as a deleted file. Every removed identity needs its own
-        # `Deletion-Acknowledged: <Kind>.<group>/<name>` line in the pull-request body.
-        # The body arrives through an env var and is written to a file — never
-        # interpolated into the shell — because it is contributor-authored text.
-        if: github.event_name == 'pull_request'
-        env:
-          BASE_SHA: ${{ github.event.pull_request.base.sha }}
-          PR_BODY: ${{ github.event.pull_request.body }}
-        run: |
-          git worktree add --detach "$RUNNER_TEMP/base" "$BASE_SHA"
-          kubectl kustomize "$RUNNER_TEMP/base/deploy" > "$RUNNER_TEMP/base-render.yaml" ||
-            { echo "deploy-deletions: UNKNOWN — the base deploy/ tree does not render; repair main first" >&2; exit 2; }
-          kubectl kustomize deploy/ > "$RUNNER_TEMP/head-render.yaml" ||
-            { echo "deploy-deletions: UNKNOWN — this pull request's deploy/ tree does not render" >&2; exit 2; }
-          printf '%s' "$PR_BODY" > "$RUNNER_TEMP/pr-body.txt"
-          bash scripts/validate-deploy-deletions.sh \
-            "$RUNNER_TEMP/base-render.yaml" "$RUNNER_TEMP/head-render.yaml" "$RUNNER_TEMP/pr-body.txt"
-
       - name: 🧪 Test active Admins policy
         run: bash tests/admin-team-policy.sh
 

deploy/organization-rulesets/kustomization.yaml

@@ -21,5 +21,4 @@ resources:
   # Net-new, managed (Create).
   - protect-release-tags.yaml
   - require-world-at-ruin-trusted-regressions.yaml
-  - require-monorepo-ci-aggregate-contract.yaml
   - require-dotgithub-deploy-guards.yaml