[masarray]

Purpose — D20, scoped qualification of D19 optimized CI gates

BASE: protected integrated RC release/arsas-integrated-rc0-20261024 at 817c3910e8223fa2ac531a4426ada5d2d4bbbe50 (NOT main/stable).
HEAD: e0c9724b203ac38f2a947d71795ac1173ca5ed5b. DRAFT / DO NOT MERGE until GitHub Actions and required-check review are independently satisfied.

Implementation

• Canonical Build ARSAS runs full Windows on source/mixed/unknown, rename/delete, large/empty GitHub file lists, API/classifier failures, manual dispatch and push. Only positively certified README/docs Markdown additions/updates (excluding release-affecting interoperability contract) may skip Windows. Crucial: job expression deliberately tests needs.pr-scope.result != 'success' || needs.pr-scope.outputs.needs_windows != 'false': any missing output still runs Windows, unlike the older CI P4: fail-closed docs-only fast gate and opt-in Field Capture Windows packaging #653 candidate.
• Extra Smart Discovery Field Capture Windows packaging runs on relevant nondraft, explicitly labeled ci-field-capture PRs, or manual dispatch after exact-SHA reusable regression. Keeps all existing physical/safety gate invariants and action names.
• Existing scripts/test-ci-workflows.py gets static integration assertions and new Node VM-based actual-workflow-expression test with 26 conservative mocked API/event scenarios. The separate local fixture experiment passed; hosted CI result pending.
• No WPF/C#, engine, lock, control/write, performance/SG7, SCL semantics, release/stable/main, or RC HEAD changes. Source code diff limited to three existing workflow/test paths + one audit document.

CI cost / acceptance

• Open this single draft once; avoid pushing no-op fixes, re-running green workflow runs or enabling unrelated promotion CI. Reuse exact-SHA results.
• Review that CI P0 Workflow Integrity runs Python test including Node VM (Node is available on Ubuntu runner). Verify canonical Windows behavior with genuine PR event. Other required statuses that consume absent sealed artifacts must remain fail-closed on docs-only changes.
• Main branch protection read returned HTTP 403 to connector. Owner review required before merge: required checks/branch protection, real docs-only PR, actual label/manual Field Capture, exact artifact and CI minutes. Skipped job green must not be interpreted as binary/physical acceptance.
• Protect safety drafts M2.17-D safety: reject incomplete unbound GOOSE and foreign-domain SGCB/GoCB reads #753-756, Write INTEGRATION GATE ONLY: user-accepted Write onto latest SSOT V2; preserve advanced SMV #726/FAT Write safety: reject unrecognized live Boolean instead of selecting false #716, SG7 P0 SG7_BCU: async Browser model indexing, bounded metrics and CF-aware units #688, IP GUI P1 UI: unify premium cool-blue inputs, dropdowns, dialogs and empty states (#730) #732 and RC RC0 INTEGRATED — GUI P0/P1/P2 + SSOT/Write + main SV; physical release gates open #727/P0: reconcile v1.6.42 shipped source + stable docs to main (physical R7/R10 gates pending) #729.

References: CI D19 implementation notes, cost issue #542, historical #653.

Qualification pending: do not call CI green, physical FAT complete, or a proven reduction in billable Windows minutes until measured.

[masarray]

D21 qualification — real GitHub Actions evidence, exact SHAs; no reruns or source changes

Parent CI P4 draft #757 remains OPEN DRAFT, exact HEAD e0c9724b203ac38f2a947d71795ac1173ca5ed5b, base protected RC 817c3910e8223fa2ac531a4426ada5d2d4bbbe50, NOT main.

Source-impacting real PR wave (one attempt, 8 workflows, all finished):

• Build ARSAS #40407726657 SUCCESS; classifier log Changed paths=4, Windows required=true; canonical Windows job successful. Exact SHA produced ARSAS-test-evidence, ARSAS-windows-package-input (sealed) and direct ARSAS-1.6.42-win-x64-portable.exe Actions artifacts, plus source/native evidence. These are candidate CI artifacts, not stable release/physical acceptance.
• CI P0 Workflow Integrity #40407726690 SUCCESS, including the 26-case extracted workflow-expression regression inside the Python P0 suite and topology/budget checks.
• CI P1 Advisory #40407726721, COMTRADE #40407726689, IO #40407726707, SV #40407726693 each SUCCESS at exactly the same SHA.
• Smart Discovery Field Capture #40407726714 SKIPPED for draft/unlabeled PR, including its extra Windows job, as opt-in policy intends. Installer workflow #40407726656 also SKIPPED. No failure and no extra reruns.

Genuine documentation-only canary #758 was created from the candidate HEAD on a separate one-Markdown-file branch, targeted back to that candidate feature branch. Real Build ARSAS #40410571266 SUCCESS, pr-scope job SUCCESS (log Changed paths=1, Windows required=false), canonical Windows job SKIPPED, zero artifacts on canary SHA 00b0c519107e3d3cd7560428379a22500bb78b9a. Only one workflow triggered, demonstrating real docs-only CI saving without false package proof. Canary CLOSED UNMERGED after writing exact evidence. No commit added to #757 or the protected RC.

Qualification now supported: actual source PR Windows admission/build; actual docs-only Windows skip/no sealed artifact; actual Field Capture draft/unlabeled opt-out; P0 26-case policy regression. Still NOT supported: main branch-protection required-check topology (GitHub App GET 403), live nondraft labeled and manual Field Capture dispatch paths, real physical IEC 61850 FAT, or a robust measured cross-PR billable-minute savings baseline.

Disposition: retain #757 as DRAFT and #542 as OPEN, refrain from relabeling it ci-field-capture (would spend Windows runners) or pushing no-op changes. No release/engine pin/main/safety/Write/SG7/GUI modification.