Skip to content

PayPal sandbox only. No real money moves.

ProveProof

Quality checks

What CI runs on every change.

Verifiedbacked by a real run or committed evidence

Page last changed 7 Nov 2026 (from the git history)

Heavy work runs in GitHub Actions, not on a laptop. Every pull request goes through the ci workflow, and a final required job fails unless every job succeeded.

JobWhat it checks
typecheck, lint, format-checkStrict TypeScript, ESLint with zero warnings, Prettier
unit, coverage, property, scenariosUnit tests, coverage thresholds that may only be raised, property tests with replayable seeds, the scenario DSL
depsDependency rules between packages and the engine purity check
secretsTracked node_modules, live host references, a secret scan of the history, and a bundle scan with canary secrets
ascii-bannedASCII-only text and the banned-word list, run from the base commit
docs-formatThe formats of docs/DECISIONS.md and docs/GATES.md, and the gates result
commitlint, ownershipConventional commit headers and one-area ownership of each change
voice, e2e-fixturesParser golden files, held-out set guard, bundle size, audio fixtures
reference-python, differentialA Python reference of the engine, compared on 2000 scenarios with a pinned seed
package-checks, prod-buildPackage-level lint and trace baselines, and a production build with a smoke test

Property tests print their seed; GAVEL_PROPERTY_SEED=<n> replays a run.

Edit on GitHub

Last updated on