ci: fail closed before executing on unverified hosted runner

2026-10-24 08:55:02 +02:00
parent 549b2cba5a
commit 75cd04cfc2
5 changed files with 159 additions and 1 deletions
@@ -1,13 +1,18 @@
 name: MariaDB persistence qualification
 on:
  push:
-    branches: [codex/rd21-mariadb-standardisation]
+    branches: [codex/rd21-mariadb-standardisation, fix/p9-ci-and-requalification]
  pull_request:
  workflow_dispatch:
 jobs:
  mariadb:
    runs-on: ubuntu-latest
    steps:
+      - name: Require verified runner isolation
+        # Remove this blocker only after the operator evidence and workflow review in the handoff.
+        run: |
+          echo '::error::BLOCKED: hosted runner isolation is unverified. See docs/redesign/phase-9/p9-requal-01/CI_OPERATOR_HANDOFF.md before enabling database execution.'
+          exit 1
      - uses: actions/checkout@v4
      - uses: actions/setup-dotnet@v4
        with: