Dev

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,21 @@
+## Thinking Path
+<!-- Trace from the top of the project down to this change (5–8 steps minimum). -->
+
+## What Changed
+<!-- Bullet list of concrete changes, one per logical unit. -->
+
+## Verification
+<!-- How a reviewer can confirm it works (test commands, manual steps). -->
+- [ ] `cargo test` passes
+- [ ] `cargo clippy -- -D warnings` clean
+- [ ] `cargo fmt --check` clean
+
+## Risks
+<!-- Explicit risk acknowledgment: race conditions, migrations, behavioral shifts, or "Low risk" with justification. -->
+
+## Checklist
+- [ ] Tests pass locally
+- [ ] No new warnings from clippy
+- [ ] Code is formatted with `cargo fmt`
+- [ ] Commit messages follow conventional format
+- [ ] Co-Authored-By trailer included for agent commits

.github/workflows/ci.yml

@@ -54,6 +54,36 @@ jobs:
       - name: test
         run: cargo test --workspace
 
+  benchmark:
+    name: Benchmark
+    needs: [test]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Install Rust stable
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          components: rustfmt, clippy
+      - name: Cache cargo
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cargo/registry
+            ~/.cargo/git
+            target
+          key: ${{ runner.os }}-cargo-bench-${{ hashFiles('**/Cargo.lock') }}
+          restore-keys: ${{ runner.os }}-cargo-bench-
+      - name: Install jq
+        run: sudo apt-get update && sudo apt-get install -y jq
+      - name: Run benchmarks
+        run: bash benchmarks/run.sh
+      - name: Upload benchmark results
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: benchmark-results
+          path: benchmark-results.json
+
   security:
     name: Security Audit
     runs-on: ubuntu-latest

.gitignore

@@ -1,5 +1,4 @@
 /target
-Cargo.lock
 .env
 *.db
 *.db-shm

CONTRIBUTING.md

@@ -63,15 +63,15 @@ Scopes: `core`, `tools`, `memory`, `cli`, `gateway`, `tui`, `paperclip`, `github
 ## Branching model
 
 ```
-main              ← stable, protected — PRs from dev only, requires human approval
+main              ← stable, protected — PRs from dev only, merged autonomously when CI is green and review passes
   dev             ← integration — PRs from feature/* only (no direct commits)
     feature/*     ← new features
     fix/*         ← bug fixes
     docs/*        ← docs only
     chore/*       ← deps / CI / tooling
 ```
 
-All feature branches cut from `dev`. Open a PR to `dev`; `dev` → `main` requires board approval.
+All feature branches cut from `dev`. Open a PR to `dev`; `dev` → `main` merges happen autonomously when all CI gates pass and review is complete.
 Squash-merge preferred for feature/* and fix/*; merge commit for larger milestones.
 
 ## Testing philosophy