no-mistakes(document): Fixed stale PR CI docs: integration suite trigger wrong in CONTRIBUTING.md; overlong workflow comments reflowed. GOVERNANCE.md paid-work commitment checked, accurate.

Author: dmealing

.github/workflows/conformance.yml

@@ -1,8 +1,9 @@
 name: conformance
 
 # COST: the cross-port conformance matrix + full Java reactor + drift/mutation gates
-# are heavy, so they do NOT run on every push or PR (pr-ci.yml runs the touched ports' lanes on a PR) — release gate (tag `v*`), a NIGHTLY
-# schedule, and on-demand (workflow_dispatch). Run them LOCALLY before opening/merging
+# are heavy, so they do NOT run on every push or PR (pr-ci.yml runs the touched ports'
+# lanes on a PR) — release gate (tag `v*`), a NIGHTLY schedule, and on-demand
+# (workflow_dispatch). Run them LOCALLY before opening/merging
 # a PR:
 #   scripts/ci-local.sh            # full parity (this + integration suite + drift)
 #   scripts/ci-local.sh --quick    # everything except the docker integration suite

.github/workflows/pr-ci.yml

@@ -12,8 +12,8 @@ name: pr-ci
 # WHICH PORTS: `detect` maps the PR's changed paths to ports with
 # scripts/ci-affected-ports.sh, the same mapper local-ci.yml uses. A change under a
 # port's directory selects that port; a change to fixtures/, spec/, scripts/, .github/,
-# agent-context/ or anything unrecognised selects ALL ports (the mapper fails open); a docs-only change
-# selects none and runs only the offline `gates` lane.
+# agent-context/ or anything unrecognised selects ALL ports (the mapper fails open); a
+# docs-only change selects none and runs only the offline `gates` lane.
 #
 # WHAT RUNS PER PORT: unit tests plus the conformance corpora, not the docker
 # integration suites (integration-tests.yml owns those, on tags and on demand):
@@ -24,8 +24,9 @@ name: pr-ci
 #   python / csharp — the port's full test suite and conformance
 #
 # THE REQUIRED CHECK: the final job, `pr-ci`, is the name to put in branch protection
-# when a maintainer decides to (it is not required yet; `leak-scan` is). It always runs and is green only when every lane that was selected passed, so the
-# set of lanes can change per PR without touching branch protection. Do not rename it.
+# when a maintainer decides to (it is not required yet; `leak-scan` is). It always runs
+# and is green only when every lane that was selected passed, so the set of lanes can
+# change per PR without touching branch protection. Do not rename it.
 #
 # SECURITY: this is a `pull_request` workflow on GitHub-hosted runners with a read-only
 # token and no secrets, so fork-submitted code cannot reach anything. It must NEVER move

CONTRIBUTING.md

@@ -30,7 +30,7 @@ conformance corpora. This guide covers how to propose changes.
 3. Run the gates locally with **`scripts/ci-local.sh --quick`** and make sure it's
    green. On a pull request GitHub Actions runs the leak scan (`hygiene.yml`) and the
    unit and conformance tests of the ports your change touches (`pr-ci.yml`); the docker
-   integration suites run on `main`, nightly and on release tags — see the *Local CI*
+   integration suites run on release tags and on manual dispatch — see the *Local CI*
    section below.
 4. Open a **pull request** against `main` and fill out the PR template.
 5. A maintainer reviews the change and the checks on the pull request before merge. Who can
@@ -90,8 +90,8 @@ under `fixtures/`, `spec/`, `scripts/`, `.github/` or `agent-context/`, or to an
 outside a port's directory that the selector does not recognise, touches every port; a
 change only to `docs/` or to Markdown files outside those directories runs just the
 offline gates). Its `pr-ci` job is green only when every selected lane is, and a newer
-push cancels the superseded run. The docker integration suites run on `main`, nightly and
-on release tags. Run the script locally before opening or merging a PR, so nothing red
+push cancels the superseded run. The docker integration suites run on release tags and on
+manual dispatch. Run the script locally before opening or merging a PR, so nothing red
 reaches `main`:
 
 ```bash