From ae971f14cde2fb25b5501161ecec573b2976979c Mon Sep 17 00:00:00 2001
From: eimyroot <eimyherrer@gmail.com>
Date: Fri, 11 Sep 2026 03:38:18 +0200
Subject: [PATCH 1/4] R2: keep ordinary CI separate from canonical artifact
 promotion

---
 .github/workflows/ci.yml | 46 +---------------------------------------
 1 file changed, 1 insertion(+), 45 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index fe71708..32ba14e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -9,7 +9,7 @@ permissions:
 
 concurrency:
   group: webforge-ci-${{ github.ref }}
-  cancel-in-progress: false 
+  cancel-in-progress: false
 
 jobs:
   verify:
@@ -50,47 +50,3 @@ jobs:
 
       - name: Full environment release gate
         run: npm run release:full
-
-  canonical-artifact:
-    runs-on: ubuntu-latest
-    timeout-minutes: 20
-    steps:
-      - name: Checkout exact canonical main source
-        uses: actions/checkout@v4
-        with:
-          ref: 20ef0fcd45bcf5b8cdd4c9c61fd1eb07c48041d6
-
-      - name: Setup canonical Node
-        uses: actions/setup-node@v4
-        with:
-          node-version: 24.20.0
-
-      - name: Verify pinned Node and npm
-        run: |
-          test "$(node --version)" = "v24.20.0"
-          test "$(npm --version)" = "11.19.0"
-          test "$(git rev-parse HEAD)" = "20ef0fcd45bcf5b8cdd4c9c61fd1eb07c48041d6"
-
-      - name: Install pinned Vercel CLI
-        run: npm install --global vercel@59.11.7 --ignore-scripts --no-audit --no-fund
-
-      - name: Build canonical webforge-reference artifact
-        env:
-          WEBFORGE_ALLOW_NETWORK: '1'
-          WEBFORGE_GENERATION_RUN_ID: ${{ github.run_id }}-${{ github.run_attempt }}
-          WEBFORGE_REPOSITORY: ${{ github.repository }}
-        run: WEBFORGE_SOURCE_SHA="$(git rev-parse HEAD)" npm run artifact:canonical
-
-      - name: Upload canonical provenance artifact
-        if: always()
-        uses: actions/upload-artifact@v4
-        with:
-          name: webforge-reference-canonical-main-20ef0fcd-${{ github.run_attempt }}
-          path: |
-            generated/canonical/webforge-reference/${{ github.run_id }}-${{ github.run_attempt }}/runtime/**
-            !generated/canonical/webforge-reference/${{ github.run_id }}-${{ github.run_attempt }}/runtime/node_modules/**
-            generated/canonical/webforge-reference/${{ github.run_id }}-${{ github.run_attempt }}/*.receipt.json
-            generated/canonical/webforge-reference/${{ github.run_id }}-${{ github.run_attempt }}/artifact-run.summary.json
-          include-hidden-files: 
-  
-          if-no-files-found: warn

From a15d26c084543046a5709cac6113692226bffb72 Mon Sep 17 00:00:00 2001
From: eimyroot <321177660+eimyroot@users.noreply.github.com>
Date: Fri, 11 Sep 2026 03:41:09 +0200
Subject: [PATCH 2/4] chore: trigger CI evidence for PR #10


From 97053d44e7f8baf33e966dcbb64f326a055be6bd Mon Sep 17 00:00:00 2001
From: Eimy Herrer <321177660+eimyroot@users.noreply.github.com>
Date: Fri, 11 Sep 2026 05:52:44 +0200
Subject: [PATCH 3/4] ci: verify selected Actions policy


From 26b7d6040dd0e08e6e13baaa63fe6c7ecec39025 Mon Sep 17 00:00:00 2001
From: Eimy Herrer <321177660+eimyroot@users.noreply.github.com>
Date: Fri, 11 Sep 2026 05:56:52 +0200
Subject: [PATCH 4/4] ci: retrigger after clearing stale queue