test(ci): forbid docs-only required-gate suppression

[seonghobae]

Causal repair

The original change attempted to reduce organization Actions pressure by adding paths-ignore for docs/** and root Markdown files to Noema application CI, reviewer CI, and patch-validator image verification. Review correctly demonstrated that this is not a safe queue remedy: Noema treats documentation and README content as executable contracts, and commercial/release discipline requires exact-head verification rather than an absent/skipped gate. Runner capacity is a control-plane concern and must not be converted into false-green product evidence by suppressing workflows.

All three workflow trigger changes were removed. The remaining product delta is the regression in test/ci-exact-head-contract.test.ts that rejects paths-ignore in application CI, reviewer CI, or patch-validator image verification.

TDD and convergence lineage

• RED fa4bb2bfc714d88a189a0bc37840c488c604ce7b added the executable regression while the branch still contained all three paths-ignore blocks;
• def52aadc50cd3feb779982070173209410dc1b1, 6bc6e590c4f0ba4d951fb157ab1a6270085e967f, and 60b83339cd53c639c28d4f1881d1ef4501e38534 restored application CI, reviewer CI, and patch-validator image trigger coverage respectively, leaving only the guard regression;
• compatible owner progress then ordinarily merged protected main@e1ac9d50f6c646f04be8c137c8acdc7200182fcd into this lane. Current exact head 83c319bd661d3173af744dd315f98be4864366b2 is two commits ahead of 60b833...; exact compare shows the only inherited protected delta is test/github-installation-token-stateless-format.test.ts. The one-file test(ci): forbid docs-only required-gate suppression #543 gate-suppression regression remains intact.

Current exact evidence — 2026-09-05 KST

On exact 83c319bd661d3173af744dd315f98be4864366b2:

• application ci 33871921797 — completed / success;
• required Security Scan 33871921699 — completed / success;
• patch-validator-image 33871921812 — completed / success;
• reviewer-ci 33871921622 — completed / workflow-surface success.

The reviewer result is still not merge-authoritative semantic GREEN because #546 remains Draft and has not moved its corrected CodeGraph semantic-evidence contract into protected truth. This exact-head review therefore ran under the protected pre-#546 reviewer contract. The clean one-test branch must not be mutated merely to manufacture a new review event.

Current authority

• protected/live base: main@e1ac9d50f6c646f04be8c137c8acdc7200182fcd;
• exact head: 83c319bd661d3173af744dd315f98be4864366b2;
• lifecycle: open / Draft / mergeable;
• fix(reviewer): fail closed on empty CodeGraph semantics #546 remains the repository-wide semantic-review prerequisite.

After #546 reaches protected truth, regenerate semantic reviewer evidence for this unchanged exact head and re-read live review/governance state before promotion. Do not transfer pre-#546 reviewer success, mutate source merely to retrigger execution, self-approve, force-push/destructively rebase, or weaken any required gate.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[seonghobae]

Fresh protected-base repair supersedes the prior exact-head block. Protected main is e1ac9d50f6c646f04be8c137c8acdc7200182fcd. Ordinary two-parent non-force merge 83c319bd661d3173af744dd315f98be4864366b2 preserves the one-test docs-only gate-suppression regression and inherits the protected stateless GitHub installation-token regression. Current exact-head workflows ci 33871921797, reviewer-ci 33871921622, required Security Scan 33871921699, and patch-validator-image 33871921812 are all queued/non-passing. The prior four successful workflows, including the confirmed pre-#546 reviewer false-green, do not transfer. Keep Draft.