MCAF: CI/CD
Read root/local AGENTS.md, existing workflows, called scripts, artifact consumers, environment permissions, and the actual release mechanism.
Workflow
- Trace PR validation, trusted artifact production, staging, and release/promotion as applicable. Give each stage an explicit purpose, input, failure signal, and completion condition.
- Preserve exact repo build, test, format, analysis, and coverage gates. For .NET, derive runner and coverage switches from the configured toolchain.
- Review triggers, dependencies, concurrency, shell quoting, secret handling, least-privilege permissions, and rollback before executing verification.
- Keep reusable logic in checked-in scripts when it improves reliability. Validate the complete workflow and affected scripts after self-review and fixes.
- Obtain approval for material deployment topology, dependency, permission, or weakened gate changes. A pipeline edit does not itself authorize production promotion.
- Report local validation, CI completion, artifact publication, deployment, and live health as separate observed states. A queued job or green build is not publication or production proof.
Deliver the requested workflow and relevant release/runbook updates, with exact verification evidence and remaining blockers.
References
- For stage and rollback criteria: CI/CD guidance.
- For .NET tools not bundled here: Managed Code Skills catalog.