refactor: retire weekly ci layer (#40)

Author: xiaojiou176

…rkflows/changed-scope-quality-weekly.yml …kflows/changed-scope-quality-nightly.yml.github/workflows/changed-scope-quality-weekly.yml renamed to .github/workflows/changed-scope-quality-nightly.yml .github/workflows/changed-scope-quality-weekly.yml renamed to .github/workflows/changed-scope-quality-nightly.yml

@@ -1,8 +1,8 @@
-name: changed-scope-quality-weekly
+name: changed-scope-quality-nightly
 
 on:
   schedule:
-    - cron: '45 3 * * 1'
+    - cron: '45 3 * * *'
   workflow_dispatch:
     inputs:
       feedback_jsonl_path:
@@ -18,7 +18,7 @@ on:
       - 'configs/changed_scope/rule_tuning.json'
       - 'tests/fixtures/changed_scope/changed-scope-feedback.schema.json'
       - 'tests/fixtures/changed_scope/changed-scope-feedback.sample.jsonl'
-      - '.github/workflows/changed-scope-quality-weekly.yml'
+      - '.github/workflows/changed-scope-quality-nightly.yml'
 
 permissions:
   contents: read
@@ -90,7 +90,7 @@ jobs:
           summary_md=".runtime-cache/test_output/changed_scope_quality/${latest_week}/changed_scope_quality.summary.md"
           if [[ -f "${summary_md}" ]]; then
             {
-              echo "## changed-scope-quality-weekly"
+              echo "## changed-scope-quality-nightly"
               echo "- run_id: ${RUN_ID}"
               echo "- input: \`${INPUT_PATH}\`"
               echo "- sample_fallback_used: \`${SAMPLE_FALLBACK_USED}\`"
@@ -125,7 +125,7 @@ jobs:
         if: always()
         uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
         with:
-          name: changed-scope-quality-weekly-${{ github.run_id }}
+          name: changed-scope-quality-nightly-${{ github.run_id }}
           retention-days: 14
           if-no-files-found: warn
           path: |

.github/workflows/continuous-governance.yml

@@ -24,7 +24,7 @@ on:
   schedule:
     # Daily run (Tuesday-Sunday): 03:00 UTC
     - cron: "0 3 * * 0,2-6"
-    # Weekly run: Monday 03:00 UTC
+    # Nightly full run: Monday 03:00 UTC
     - cron: "0 3 * * 1"
 
 permissions:

AGENTS.md

@@ -42,6 +42,9 @@ Work in CortexPilot as a contract-first engineering agent:
 
 ## Generated Governance Context
 
+- active CI layers: `pre-commit`, `pre-push`, `hosted`, `nightly`, `manual`
+- do not reintroduce a sixth CI/profile/workflow layer; move scheduled heavy checks to `nightly` and explicit high-cost verification to `manual`
+
 <!-- GENERATED:ci-topology-summary:start -->
 - trust flow: `ci-trust-boundary -> quick-feedback -> hosted policy/core slices -> pr-release-critical-gates -> pr-ci-gate`
 - hosted policy/core slices: `policy-and-security, core-tests`

README.md

@@ -477,6 +477,20 @@ npm run test
 `npm run security:scan:closeout` only when you intentionally want the stricter
 closeout/manual layers.
 
+Current CI contract has five layers only:
+
+| Layer | What it owns | Default posture |
+| --- | --- | --- |
+| `pre-commit` | cheap local commit-time quality gates | automatic, local, fast |
+| `pre-push` | local fast verification before remote CI | automatic, local, still bounded |
+| `hosted` | GitHub-hosted base CI and required checks | automatic, remote, hosted-first |
+| `nightly` | scheduled heavier audits and analytics | automatic, scheduled, non-default |
+| `manual` | owner-invoked closeout or high-cost validation | explicit, protected, high-friction |
+
+There is no separate sixth CI layer anymore. Old extra-layer behavior now
+belongs either to `nightly` scheduled governance or to explicit `manual`
+verification.
+
 `npm run test:quick` now expects the dashboard clean-room install gate to
 prove `jsdom` itself can load, instead of pinning success to the presence of a
 specific transitive dependency layout such as `data-urls`.

configs/ci_policy.core.json

@@ -37,8 +37,7 @@
     "execution": {
       "test_phase_parallel": true,
       "apply_retention": false,
-      "nightly_full": false,
-      "weekly_full": false
+      "nightly_full": false
     },
     "defaults": {
       "external_web_probe_url": "https://example.com",

configs/ci_policy.profiles.json

@@ -4,7 +4,7 @@
     "version": "1.0.0",
     "layer": "profile",
     "schema": "schemas/ci_policy.schema.json",
-    "description": "Profile-level CI defaults (pr/nightly/weekly).",
+    "description": "Profile-level CI defaults (pr/nightly/manual).",
     "source_of_truth": [
       "scripts/ci.sh"
     ]
@@ -45,7 +45,7 @@
           "p1_max_threshold_percent": 1.0
         }
       },
-      "weekly": {
+      "manual": {
         "ui_flake": {
           "p0_iterations": 50,
           "p1_iterations": 50,

configs/env.registry.json

@@ -2929,18 +2929,6 @@
       "scripts/ci.sh"
     ]
   },
-  {
-    "name": "CORTEXPILOT_CI_WEEKLY_FULL",
-    "scope": "ci",
-    "secret": false,
-    "required": false,
-    "default": null,
-    "owner": "platform",
-    "description": "CORTEXPILOT_CI_WEEKLY_FULL controls ci runtime behavior and is consumed by 1 first-party path(s).",
-    "consumers": [
-      "scripts/ci.sh"
-    ]
-  },
   {
     "name": "CORTEXPILOT_CLEANUP_CONFIRM",
     "scope": "platform",
@@ -4664,7 +4652,7 @@
     "required": false,
     "default": "auto",
     "owner": "platform",
-    "description": "Selects E2E timeout budget profile (auto|pr|nightly-full); auto resolves using nightly/weekly CI flags.",
+    "description": "Selects E2E timeout budget profile (auto|pr|nightly-full); auto resolves using nightly CI flags.",
     "consumers": [
       "scripts/e2e_dashboard_high_risk_actions_real.sh"
     ]

configs/governance/continuous_ops.json

@@ -19,7 +19,7 @@
       "min_scoped": 4,
       "fail_on_todo": 0
     },
-    "p2_weekly_target": {
+    "p2_nightly_ramp": {
       "enabled": true,
       "tiers": "P2",
       "surfaces": "dashboard,desktop",
@@ -30,62 +30,62 @@
         "partial_count": 63,
         "covered_count": 0
       },
-      "min_weekly_gap_reduction": 1.0,
+      "min_gap_reduction": 1.0,
       "fail_closed_mode": "strict",
       "ramp_table": [
         {
           "week_offset": 1,
           "target_partial_max": 63,
           "target_covered_min": 0,
-          "min_weekly_gap_reduction": 0.0
+          "min_gap_reduction": 0.0
         },
         {
           "week_offset": 2,
           "target_partial_max": 60,
           "target_covered_min": 3,
-          "min_weekly_gap_reduction": 1.0
+          "min_gap_reduction": 1.0
         },
         {
           "week_offset": 3,
           "target_partial_max": 56,
           "target_covered_min": 7,
-          "min_weekly_gap_reduction": 1.0
+          "min_gap_reduction": 1.0
         },
         {
           "week_offset": 4,
           "target_partial_max": 50,
           "target_covered_min": 13,
-          "min_weekly_gap_reduction": 1.5
+          "min_gap_reduction": 1.5
         },
         {
           "week_offset": 6,
           "target_partial_max": 42,
           "target_covered_min": 21,
-          "min_weekly_gap_reduction": 1.5
+          "min_gap_reduction": 1.5
         },
         {
           "week_offset": 8,
           "target_partial_max": 34,
           "target_covered_min": 29,
-          "min_weekly_gap_reduction": 2.0
+          "min_gap_reduction": 2.0
         },
         {
           "week_offset": 10,
           "target_partial_max": 24,
           "target_covered_min": 39,
-          "min_weekly_gap_reduction": 2.0
+          "min_gap_reduction": 2.0
         },
         {
           "week_offset": 12,
           "target_partial_max": 12,
           "target_covered_min": 51,
-          "min_weekly_gap_reduction": 2.5
+          "min_gap_reduction": 2.5
         },
         {
           "week_offset": 14,
           "target_partial_max": 0,
           "target_covered_min": 63,
-          "min_weekly_gap_reduction": 2.5
+          "min_gap_reduction": 2.5
         }
       ]
     }

docs/README.md

@@ -134,6 +134,8 @@ navigation set.
 
 ## Public CI Contract
 
+- active CI layers are `pre-commit`, `pre-push`, `hosted`, `nightly`, and `manual`
+- no sixth CI/profile/workflow layer exists in this repository
 - default public CI is hosted-first and GitHub-hosted
 - fork PRs stay on low-privilege checks only and must not touch secrets or
   live/external systems

package.json

@@ -95,7 +95,7 @@
     "ui:truth:gate": "bash scripts/ui_e2e_truth_gate.sh",
     "ui:ops:pr": "UI_REGRESSION_PROFILE=pr UI_REGRESSION_REQUIRE_FULL_STRICT=1 UI_REGRESSION_REQUIRE_CRITICAL_P2=1 UI_REGRESSION_CLICK_INVENTORY_REQUIRED=1 bash scripts/ui_regression_operational_gate.sh --profile pr",
     "ui:ops:nightly": "UI_REGRESSION_PROFILE=nightly bash scripts/ui_regression_operational_gate.sh --profile nightly",
-    "ui:ops:weekly": "UI_REGRESSION_PROFILE=weekly bash scripts/ui_regression_operational_gate.sh --profile weekly",
+    "ui:ops:manual": "UI_REGRESSION_PROFILE=manual bash scripts/ui_regression_operational_gate.sh --profile manual",
     "bench:e2e:speed": "bash scripts/bench_e2e_speed.sh",
     "bench:e2e:speed:dry-run": "bash scripts/bench_e2e_speed.sh --rounds 3 --ui-full-gemini-strict --dashboard-high-risk --dry-run",
     "bench:e2e:speed:report-only": "bash scripts/bench_e2e_speed.sh --report-only",