From 6ae9766eca14ef4419abab3796698b5c82aa6b91 Mon Sep 17 00:00:00 2001
From: Adam Moussa <adam@seahavenind.com>
Date: Thu, 17 Sep 2026 16:58:02 -0400
Subject: [PATCH] ci: run Frontend checks and Terraform CI on PRs to main and
 dev

Match backend 148 so a PR targeting origin/dev still gets the required
checks. Push remains main only.
---
 .github/workflows/ci-terraform.yaml | 2 +-
 .github/workflows/ci.yaml           | 4 ++--
 QUALITY_GATES.md                    | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci-terraform.yaml b/.github/workflows/ci-terraform.yaml
index 759dca4a..5a155d70 100644
--- a/.github/workflows/ci-terraform.yaml
+++ b/.github/workflows/ci-terraform.yaml
@@ -6,7 +6,7 @@ name: Terraform CI
 
 on:
   pull_request:
-    branches: [main]
+    branches: [main, dev]
     paths:
       - "terraform/**"
       - "scripts/**"
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 96b0a4d8..0409abf0 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -2,7 +2,7 @@ name: Frontend checks
 
 on:
   pull_request:
-    branches: [main]
+    branches: [main, dev]
   push:
     branches: [main]
   workflow_dispatch: {}
@@ -26,7 +26,7 @@ jobs:
     # checks in scripts/governance-check.mjs (godfile ratchet, changed-file
     # maintainability gate, Terraform fmt/validate, Terraform import-plan
     # guard, HCP run guard, CloudFront verify, GitHub workflow shell, and G13
-    # app/Terraform isolation).
+    # app/Terraform isolation). Runs on PRs to main or dev; push is main only.
     # If the reusable workflow is later confirmed to run every gate, this job
     # can be slimmed to `npm run governance`.
     #
diff --git a/QUALITY_GATES.md b/QUALITY_GATES.md
index e5a5e127..28a2acdf 100644
--- a/QUALITY_GATES.md
+++ b/QUALITY_GATES.md
@@ -68,7 +68,7 @@ isolation). A task is not done until this is green.
   of the reusable workflow.
 - **Terraform CI ([`.github/workflows/ci-terraform.yaml`](.github/workflows/ci-terraform.yaml)):**
   fmt, `init -backend=false`, validate, import-plan unit tests, and G13
-  classifier unit tests on `terraform/**` changes.
+  classifier unit tests on `terraform/**` changes for PRs to `main` or `dev`.
 
 ## Toolchain pin