Skip to content

docs(governance): 支持 Registry 容器与 Neon 预览 #32

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
xiaoland merged 2 commits into from
Sep 13, 2026
Merged

docs(governance): 支持 Registry 容器与 Neon 预览 #32

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
2b87e00
docs(governance): 对齐 Registry Worker 预览交付
xiaoland Sep 6, 2026
dafd33c
docs(governance): 对齐 Registry 容器与 Neon 预览交付
xiaoland Sep 13, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 7 additions & 2 deletions GOVERNANCE.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -75,7 +75,7 @@ of the tool or merge method.
### Pull-request validation

A pull-request validation workflow proves a candidate change but does not
produce a Pages preview delivery input. A Pages preview workflow may run after
produce a preview delivery input. A preview workflow may run after
successful validation, but it must check out the exact pull-request head and
own its preview build and upload. Preview delivery requires all of these
controls:
Expand Down Expand Up @@ -161,7 +161,12 @@ required context.
| `client-web` | `Workspace contract`, `Dependency review`, `client-web E2E`, and `client-webext E2E`; isolated Pages preview | Focused web release build and same-run production Pages delivery |
| `ui` | `ui-web checks`; isolated runner-pushed Histoire preview | Changesets package publication and runner-pushed Histoire deployment |
| `docs` | Website contract | Website release build and production Pages delivery |
| `ext-reg` | `ext-reg checks`; CI-orchestrated trusted-controller static Pages preview built from the exact head for same-repository PRs | Exact-current-main native Registry verification and deployment through the protected production environment |
| `ext-reg` | `ext-reg checks`; CI-orchestrated trusted-controller CPython image preview built from the exact head, with per-PR Neon branches and R2 buckets for same-repository PRs | Exact-current-main native Registry verification and deployment through the protected production environment |

For `ext-reg`, the preview workflow owns its build and transfers only built
OCI images to a separate trusted delivery runner. The controller owns provider
credentials; the candidate service receives only its own PostgreSQL branch and
R2 bucket credentials. Closing the PR retires its app and deletes those resources.

Check names and commands remain repository-local implementation truth. The
profiles standardize authority and evidence semantics, not identical jobs.
Expand Down