ci: apply and verify wardnet adaptive default

Author: seonghobae

.github/workflows/apply-adaptive-orchestrator-default.yml

@@ -0,0 +1,93 @@
+name: Apply adaptive contextual-orchestrator default
+
+on:
+  push:
+    branches:
+      - agent/adaptive-orchestrator-default
+    paths:
+      - scripts/stage_adaptive_soc_default_test.py
+      - scripts/apply_adaptive_soc_default.py
+      - .github/workflows/apply-adaptive-orchestrator-default.yml
+
+permissions:
+  contents: write
+
+concurrency:
+  group: apply-adaptive-orchestrator-default-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  red-green-verify:
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    steps:
+      - name: Checkout exact branch head
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # actions/checkout@v4
+        with:
+          fetch-depth: 0
+          persist-credentials: true
+
+      - name: Set up Python
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # actions/setup-python@v6
+        with:
+          python-version: "3.12"
+
+      - name: Set up Rust
+        uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30
+
+      - name: Stage the Rust contract test
+        run: python scripts/stage_adaptive_soc_default_test.py
+
+      - name: Establish red state or recognize an already-applied source change
+        id: red
+        shell: bash
+        run: |
+          set -euo pipefail
+          set +e
+          cargo test --test adaptive_orchestrator_default > /tmp/wardnet-adaptive-red.log 2>&1
+          status=$?
+          set -e
+          cat /tmp/wardnet-adaptive-red.log
+          if [ "$status" -eq 0 ]; then
+            echo "already_applied=true" >> "$GITHUB_OUTPUT"
+          else
+            grep -Eq "FAILED|panicked|test result: FAILED" /tmp/wardnet-adaptive-red.log
+            echo "already_applied=false" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Apply SOC payload, ADR, and changelog changes
+        run: python scripts/apply_adaptive_soc_default.py
+
+      - name: Format Rust source
+        run: cargo fmt --all
+
+      - name: Prove the focused regression is green
+        run: cargo test --test adaptive_orchestrator_default
+
+      - name: Run complete Rust tests
+        run: cargo test --workspace
+
+      - name: Run clippy with warnings denied
+        run: cargo clippy --workspace --all-targets -- -D warnings
+
+      - name: Verify formatting and patch integrity
+        shell: bash
+        run: |
+          cargo fmt --all -- --check
+          git diff --check
+
+      - name: Publish the verified source commit
+        env:
+          TARGET_BRANCH: agent/adaptive-orchestrator-default
+        shell: bash
+        run: |
+          set -euo pipefail
+          rm scripts/stage_adaptive_soc_default_test.py
+          rm scripts/apply_adaptive_soc_default.py
+          rm .github/workflows/apply-adaptive-orchestrator-default.yml
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git add --all
+          git diff --cached --check
+          git commit -m "feat(ai): delegate SOC analysis to adaptive orchestration"
+          git push origin "HEAD:${TARGET_BRANCH}"