name: Architecture and changed-file quality

on:
  pull_request:
    branches: [main, dev]

permissions:
  contents: read

jobs:
  architecture:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Set up .NET
        uses: actions/setup-dotnet@v4
        with:
          dotnet-version: "8.0.x"

      # CI and local run the SAME governance check (scripts/governance-check.sh).
      # See QUALITY_GATES.md. A green run here is equivalent to a local run.
      - name: Governance check (restore + architecture tests + changed-file format)
        shell: bash
        env:
          BASE_REF: ${{ github.event.pull_request.base.sha }}
          HEAD_REF: ${{ github.event.pull_request.head.sha }}
        run: bash scripts/governance-check.sh