action.yml

name: "punchmark gate"
description: >-
  Fail CI when a punchmark fitted model's calibrated operating point moved without a
  declared detector-version or spec-MAJOR bump. Consumes serialized artifacts only;
  makes no statement about model weights or model quality.
branding:
  icon: "shield"
  color: "gray-dark"
inputs:
  model:
    description: "Path to the .pmk-model.json fitted-model file to gate"
    required: true
  baseline:
    description: "Path to the committed gate-baseline/v1 operating_point.json"
    required: true
  rulings:
    description: "Optional ruling store to chain-verify"
    required: false
    default: ""
  version:
    description: "punchmark version to install from PyPI; empty installs from the action checkout"
    required: false
    default: ""
runs:
  using: "composite"
  steps:
    - uses: actions/setup-python@v7
      with:
        python-version: "3.12"
    # Inputs reach the shell through the environment, never by string
    # interpolation into the script: a path containing a space or a shell
    # metacharacter must stay one argument.
    - name: Install punchmark
      shell: bash
      env:
        PUNCHMARK_VERSION: ${{ inputs.version }}
        ACTION_PATH: ${{ github.action_path }}
      run: |
        if [ -n "$PUNCHMARK_VERSION" ]; then
          pip install "punchmark==$PUNCHMARK_VERSION"
        else
          pip install "$ACTION_PATH"
        fi
    - name: Run punchmark gate
      shell: bash
      env:
        MODEL: ${{ inputs.model }}
        BASELINE: ${{ inputs.baseline }}
        RULINGS: ${{ inputs.rulings }}
      run: |
        if [ -n "$RULINGS" ]; then
          punchmark gate "$MODEL" --baseline "$BASELINE" \
            --require-chain-valid --rulings "$RULINGS"
        else
          punchmark gate "$MODEL" --baseline "$BASELINE"
        fi