From 5a5818f4c261f951d1881d86a519759268aab134 Mon Sep 17 00:00:00 2001
From: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
Date: Fri, 26 Jun 2026 13:49:02 -0400
Subject: [PATCH] =?UTF-8?q?ci:=20promote=20dev=20=E2=86=92=20main=20(prod)?=
 =?UTF-8?q?,=20not=20a=20separate=20prod=20branch=20(#3)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Aligns the promotion target with the locked migration architecture
(main = PROD, dev = integration). Plain ref push is fast-forward-only;
branch protection on main rejects non-FF pushes, so a diverged main
fails loudly instead of force-moving prod.
---
 .github/workflows/promote_dev_to_prod.yml | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/promote_dev_to_prod.yml b/.github/workflows/promote_dev_to_prod.yml
index 718fba74..3677d42f 100644
--- a/.github/workflows/promote_dev_to_prod.yml
+++ b/.github/workflows/promote_dev_to_prod.yml
@@ -1,4 +1,4 @@
-name: Promote dev to prod
+name: Promote dev to main (prod)
 
 permissions:
   contents: write
@@ -9,7 +9,7 @@ on:
   workflow_dispatch:
 
 concurrency:
-  group: promote-dev-to-prod
+  group: promote-dev-to-main
   cancel-in-progress: false
 
 jobs:
@@ -20,6 +20,8 @@ jobs:
         with:
           ref: dev
           fetch-depth: 0
-      - name: Fast-forward prod to dev
+      - name: Fast-forward main (PROD) to dev
+        # main is the production branch; a plain ref push is fast-forward-only
+        # (branch protection rejects non-FF), so a diverged main fails loudly.
         run: |
-          git push origin HEAD:refs/heads/prod
+          git push origin HEAD:refs/heads/main