# CASAN production gate — Gitea Actions workflow (adoption template).
# The runner installs the approved CASAN release globally and the project provides
# CASAN_PROJECT_MANIFEST. Internal CASAN product tests are intentionally not shipped.
name: CASAN Gate

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  casan-gate:
    runs-on: ci-runner
    timeout-minutes: 45
    env:
      CASAN_PROJECT_MANIFEST: apps/<project>/domain/project.manifest.json
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Ensure toolchain
        run: |
          set -euo pipefail
          command -v python3 >/dev/null || { apt-get update && apt-get install -y python3; }
          python3 --version

      - name: Verify installed CASAN runtime
        run: casan verify-harness

      - name: Run project governance gate
        run: casan gate