chore(eddy): fix code-review findings — workflow split, et al. truncation

.github/workflows/build-pdf.yml

@@ -1,29 +1,31 @@
 name: Build LaTeX PDF
 
 on:
+  # Build on every PR so the required status check always reports, even when
+  # a PR touches only governance files (README, SECURITY.md, dependabot.yml).
+  # Build is ~1m30s; cheap enough to run as a universal merge gate.
   push:
     branches: [main]
     paths:
       - 'paper/**'
       - '.github/workflows/build-pdf.yml'
   pull_request:
-    paths:
-      - 'paper/**'
-      - '.github/workflows/build-pdf.yml'
   workflow_dispatch:
 
-# Workflow-level default is read-only; jobs/steps opt-in to writes explicitly.
+# Workflow-level default is read-only; jobs opt-in to writes explicitly.
 permissions:
   contents: read
 
 jobs:
   build:
-    name: Compile and (on main push) publish PDF
+    name: build
     runs-on: ubuntu-latest
+    # Build/upload/attest do NOT need contents:write. The auto-commit lives in
+    # a separate downstream job with its own narrowed write scope.
     permissions:
-      contents: write           # required only for the auto-commit step below
-      attestations: write       # required for SLSA build provenance
-      id-token: write           # required for attestation OIDC signing
+      contents: read
+      attestations: write       # SLSA build provenance
+      id-token: write           # OIDC signing for attestations
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
@@ -47,8 +49,26 @@ jobs:
         with:
           subject-path: paper/main.pdf
 
+  publish-pdf:
+    name: publish-pdf
+    needs: build
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+    runs-on: ubuntu-latest
+    # contents:write scoped to this job alone — the only step that uses it
+    # is the git commit/push at the bottom.
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+
+      - name: Download built PDF
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
+        with:
+          name: eddy-paper
+          path: paper
+
       - name: Commit PDF
-        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
         run: |
           git config user.name "github-actions[bot]"
           git config user.email "github-actions[bot]@users.noreply.github.com"

.github/workflows/gitleaks.yml

@@ -4,6 +4,7 @@ on:
   push:
     branches: [main]
   pull_request:
+    branches: [main]
   workflow_dispatch:
   schedule:
     # Sunday 04:17 UTC weekly sweep — catches secrets that slipped past push-time scanning.

.gitignore

@@ -18,6 +18,9 @@ TODO.md
 *.fls
 *.fdb_latexmk
 *.synctex.gz
+# biber / biblatex (in case of future migration from BibTeX)
+*.bcf
+*.run.xml
 
 # Local acmart class (fetched for local builds)
 **/acmart.cls

CITATION.cff

@@ -29,7 +29,8 @@ identifiers:
     value: "10.5281/zenodo.19074337"
     description: "Zenodo concept DOI (resolves to the latest version)"
 preferred-citation:
-  type: article
+  # type "preprint" matches the actual venue (Zenodo deposit), not a peer-reviewed journal article.
+  type: preprint
   title: "Position: Eddy --- ADHD as Competitive Advantage in AI-Augmented Multi-Project Orchestration"
   authors:
     - family-names: "Yoon"
@@ -38,3 +39,6 @@ preferred-citation:
   year: 2026
   doi: "10.5281/zenodo.19074337"
   url: "https://doi.org/10.5281/zenodo.19074337"
+  repository: "https://zenodo.org/records/19074337"
+  institution:
+    name: "Zenodo"

paper/main.bib

@@ -197,7 +197,7 @@ @article{macdonald2024
 }
 
 @article{faraone2021,
-  author  = {Faraone, Stephen V. and Banaschewski, Tobias and Coghill, David and Zheng, Yi and Biederman, Joseph and Bellgrove, Mark A. and Newcorn, Jeffrey H. and Gignac, Martin and Al Saud, Nouf M. and Manor, Iris and Rohde, Luis Augusto and Yang, Li and Cortese, Samuele and Almagor, Doron and Stein, Mark A. and Albatti, Turki H. and Aljoudi, Haya F. and Alqahtani, Mohammed M. J. and Asherson, Philip and Atwoli, Lukoye and Bölte, Sven and Buitelaar, Jan K. and Crunelle, Cleo L. and Daley, David and Dalsgaard, Søren and Döpfner, Manfred and Espinet, Stacey and Fitzgerald, Michael and Franke, Barbara and Gerlach, Manfred and Haavik, Jan and Hartman, Catharina A. and Hartung, Cynthia M. and Hinshaw, Stephen P. and Hoekstra, Pieter J. and Hollis, Chris and Kollins, Scott H. and Sandra Kooij, J. J. and Kuntsi, Jonna and Larsson, Henrik and Li, Tingyu and Liu, Jing and Merzon, Eugene and Mattingly, Gregory and Mattos, Paulo and McCarthy, Suzanne and Mikami, Amori Yee and Molina, Brooke S. G. and Nigg, Joel T. and Purper-Ouakil, Diane and Omigbodun, Olayinka O. and Polanczyk, Guilherme V. and Pollak, Yehuda and Poulton, Alison S. and Rajkumar, Ravi P. and Reding, Andrew and Reif, Andreas and Rubia, Katya and Rucklidge, Julia and Romanos, Marcel and Ramos-Quiroga, J. Antoni and Schellekens, Arnt and Scheres, Anouk and Schoeman, Renata and Schweitzer, Julie B. and Shah, Henal and Solanto, Mary V. and Sonuga-Barke, Edmund and Soutullo, César and Steinhausen, Hans-Christoph and Swanson, James M. and Thapar, Anita and Tripp, Gail and van de Glind, Geurt and van den Brink, Wim and Van der Oord, Saskia and Venter, Andre and Vitiello, Benedetto and Walitza, Susanne and Wang, Yufeng},
+  author  = {Faraone, Stephen V. and others},
   title   = {The World Federation of {ADHD} International Consensus Statement: 208 Evidence-Based Conclusions About the Disorder},
   journal = {Neuroscience and Biobehavioral Reviews},
   volume  = {128},
@@ -307,7 +307,7 @@ @misc{wolf2025
 }
 
 @article{cortese2025,
-  author  = {Cortese, Samuele and Song, Mengshi and Farhat, Luis C. and Yon, David K. and Lee, Seung Won and Kim, Min Seo and Park, Sunyoung and Oh, Jae Won and Lee, Sangil and Cheon, Keun-Ah and Smith, Lee and Gosling, Corentin J. and Polanczyk, Guilherme V. and Larsson, Henrik and Rohde, Luis A. and Faraone, Stephen V. and Koyanagi, Ai and Dragioti, Elena and Radua, Joaquim and Carvalho, Andre F. and Il Shin, Jae and Solmi, Marco},
+  author  = {Cortese, Samuele and others},
   title   = {Attention-Deficit/Hyperactivity Disorder ({ADHD}) in Adults: Evidence Base, Uncertainties and Controversies},
   journal = {World Psychiatry},
   volume  = {24},