igneum/tools/ci/checks.txt

# every check tools/ci/pre-push.sh runs, one name per line (tools/ci/gate-manifest-check.sh --write regenerates it; commit it with the gate change)
no lateral scroll: scrollWidth equals clientWidth on every route at five widths, both themes (self-test, then the site; skipped where there is no Playwright)
no conflict markers in tracked files
every tracked path is valid on Windows (colon, trailing dot, reserved names, length)
identity grep of the public export list and the served site
no secret file names and no 64-hex secrets in the tree
the gate's manifest: every listed check has its run line and every run line is listed (never-push: a conflict resolution cannot drop a check)
no founder name, personal login, earlier business or personal address in any tracked text file (the pre-public scrub; self-test first, encoded list)
every check in tools/ci/checks.txt has its run line here and every run line is listed (a conflict resolution cannot drop a check unseen; self-test first)
site build (in a temporary copy here, in place only inside GitHub Actions)
internal link check of site/*.html
every served page carries the slim bar (mark, Mine, Network, Learn, Download) with every route in its panels and the sheet (self-test, then the tree)
vendor marks: site/lib/marks.mjs is brand/marks/vendor-marks.mjs byte for byte (the app and the site draw one set)
the phone menu opens and is seen at 390 px on every page (self-test first; needs the box or CI browser, says so without one)
padding and visuals: text 24 px from every band, card and section edge, section padding on the scale, no touching controls, media inside its frame, no heading under the bar, at 390 to 1600 px both themes (known-failed fixture first)
ledger sentences present verbatim on their public pages
shell inside .github/workflows parses (bash -n, the PowerShell 5.1 rule)
PowerShell drive-reference check (\$name: in a double-quoted string)
copied sources are re-stamped before a build
override params files parse with no duplicate key
second-engine playbooks log to a file and end their tree (C35)
no playbook quits, pauses or resumes the installed app
no script writes into another worktree or walks Projects
the signer is never piped into head
bash bodies in PowerShell job scripts pass bash -n
the PC 1 measurement pass keeps four minutes of its cap for the restore and sizes each step from the last rate (known-failed first)
run jobs test their fetched kit before use
every Windows spawn of the app runs with a hidden console
pinned guest programs match their manifest
root prover playbooks kill the GPU server and unlink its socket
commit-string gate self-test
engine gate self-test (igneumd and igneum-miner must carry igneum-pow/src/ paths)
build server remote checkout self-test
a slot holder keeps its own line for the whole run (the watcher-trust rule)
the remote checkout resets the mirror's tree before the branch checkout (the stale-overlay class)
the remote checkout's clean spares a lane's scratch (.igneum-scratch-spare, the fixed prefixes, never -x; the lost-scratch class)
long-running tools keep their body in one parsed block (the edited-while-running class)
build-remote without a priority flag bounds suites and benches (nice 10, 32 cores); a gate runs unbounded
the class router is a preference with spill-over (a held or overloaded box hands the job to the other one)
per-core leases, the quiet class and the reaper pass on the box (lease.sh and remote-run.sh self-tests over ssh; skipped on a runner with no box; one retry)
no deletion inside an inline bash -c / sh -c string in a tracked script (self-test first; the app cannot check it)
the manifest digest guard refuses a node pin whose consensus digest differs from the network's current one unless the move clock is recorded (known-failed first)
the simulators job runs on master and release-* pushes and pull requests into them only
publish-jobs.sh never removes a running or installs-app job without --force (the PC 2 abort class)
no shell assignment hides behind a trailing comment (the swallowed-defaults class)
no script kills or finds a process by a plain name or a file name (pgrep/pkill -f literals, ps | grep)
the identity check's own self-test (excluded research path passes, exported leak fails)
the Windows paths check's own self-test
the red watcher's own self-test (one line per run, posted once)
faucet unit tests
redesign package data tests (the /api/live contract the pages read)
the home hero's loop never idles in view, stops hidden, resumes without a jump
chain scene: the site's and the app's copies are scene/ byte for byte, the palette tokens live once (self-test, then the tree)
chain scene: a push paints with the document hidden and no animation frame (the blank /live of 7 Oct 2026; known-failed first)
chain scene: the live feed contract (the recorded reply validates; a rewritten miner, a float now, a stray key refused)
chain scene parity: one recorded feed through the home fold, /live and the app's Inspect view on build-2, three frames each pixel-equal apart from the app's own-key overlay (a changed token fails first; skipped with no box and no Playwright; one retry)
no text overlaps: every served page at 390 to 1600 px, light and dark, the hero at each step (self-test first; IGNEUM_OVERLAP_APPS=1 adds the miner and wallet UIs)
explorer, emission and public stats unit tests
ship tool self-test
relay unit tests
miner app notice strip and update card tests
launch gates: every row with its check, the handoff text clean (self-test, then the tree)
spec read-back: every constant the lottery-hash spec names agrees with the crate's pub const (known-failed fixture first; the ids half is igneum-pow/tests/spec_readback.rs)
income per tier: the public table equals its inputs, the schedule arithmetic
hash-origin report: a known-finished day and a known-failed day
harness summaries never carry a raw 64-hex key (the writer's own redaction and check)
docs-only pushes skip the compile-or-compute CI jobs (the changes job's classifier)
the public ledger (docs/ledger-public.md) is what docs/fud-ledger.md generates: one row per item, no commit ids, times or team names (self-test first)
the ledger page reads both entry heading forms (M1 and AP-F8-1) so no in-house pass row is dropped from /ledger (known-failed first)
every workflow job carries timeout-minutes (site 15, changes 10, pow 60, sims 45; the hung-job class of 7 October 2026)
a box or network check gets one retry before it is red (retry-once self-test)
gh's active account on the pushing Mac is the stored Igneum entry (self-test: another login refused and named; the hook and the merge tool run the check live)
CI state reader: a commit's newest run, master's last compiled run, a branch's last red (fake gh; the merge rule's reader)
the Intel rotate-fold rewrite: Intel gets the shift form, AMD and NVIDIA untouched (proto-opencl/test_intel_rotr.c)
known failure
known success