ci: enforce monetisation wheel boundary on the release gate - #236
Merged
Merged
Conversation
Public cherry-pick of private-merged enforcement. This is the repo whose CI publishes to PyPI, so the guard only gates the real release once it lands here. scripts/ci/trade_secret_wheel_gate.py gains --check-monetisation: on the real release build (push to master + every v* tag) it asserts the Community wheel SHIPS the client-side monetisation enforcers (limits.py, meter.py, manager.py, ed25519_license.py, trusted_keys.json, guardian/tier.py) and STRIPS the server-side/signer code (cloud/*, server/*, leads/*, studio/*, keygen.py) — exit 1 on violation. Opt-in flag → the TS gate's synthetic-wheel unit tests are unaffected. The workflow passes --check-monetisation. +4 gate tests. Touches ONLY the gate script + workflow + tests — no version/release files. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
🛡️ GraQle PR Guardian💥 Blast Radius: 3 modules affected
Total blast radius: 3 🏛️ Governance Verdict🚫 FAIL
🔍 SHACL ViolationsNo SHACL violations detected. ✅ 🔐 Approval RequirementsThis PR requires approval from:
❌ Approval requirement NOT yet satisfied.
🔬 Powered by GraQle PR Guardian v0.1.0 · Scan completed 2026-07-26T17:33:27.839924+00:00 |
harishquantamix
approved these changes
Jul 26, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Public cherry-pick of the private-merged enforcement (#311). This is the repo whose CI publishes to PyPI, so the guard only gates the real release once it lands here.
What
scripts/ci/trade_secret_wheel_gate.pygains--check-monetisation: on the real release build (push to master + everyv*tag) it asserts the Community wheel:limits.py,meter.py,manager.py,ed25519_license.py,trusted_keys.json,guardian/tier.pycloud/*,server/*,leads/*,studio/*,keygen.pyOpt-in flag (off by default) → the TS gate's synthetic-wheel unit tests are unaffected. The workflow passes
--check-monetisation. +4 gate tests.Verified
27 gate tests pass. (Gate scans the wheel RECORD, independent of source values.)
Scope
Touches ONLY the gate script + workflow + tests — no version/release files (separate from any version-bump work).
🤖 Generated with Claude Code