There is no CI: the pre-push hook is the only gate

open   by a73x

Labels: backlog

[claude 2026-08-18] Carried in notes as #31. Verified today: the repo has no
.github/, no .builds/ (sourcehut), no other pipeline config — .golangci.yml is
the only CI-adjacent file. Every gate (make ci, coverage floors, boot gate) runs
only if a human pushes from a machine with the pre-push hook installed. A clone
without the hook, or --no-verify, lands ungated code on main.
Scope: a real pipeline on the origin (sr.ht) or the a73x remote running at
minimum `make ci`; the boot gate needs the devhost fleet, so decide whether it
stays local.