draft: reset Method Factory canonical persistence to SQLite

.github/workflows/release-gate.yml

@@ -7,42 +7,55 @@ on:
     branches: [main]
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
-  gate:
+  test:
     runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.11", "3.12"]
     steps:
-      - uses: actions/checkout@v4
-
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 (pinned SHA)
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0 (pinned SHA)
         with:
-          python-version: "3.11"
+          python-version: ${{ matrix.python-version }}
 
-      - name: Install deps
-        run: pip install pyyaml
+      - name: Install with test extras
+        run: pip install -e ".[test]"
 
-      - name: Unit tests (hard gate)
-        run: python -m unittest discover -s core/tests -t .
+      - name: Canonical unit tests
+        run: python -m unittest discover -s methodfactory/tests -t .
 
-      - name: Identity sweep — no stale PE references in new content
+      - name: Packaging smoke — mf entry point
         run: |
-          # Zero-tolerance: new Method Factory content (prompts/ + core/ +
-          # action envelope spec) must not carry any Process Engine identity.
-          # Legacy source material (skills/, templates/, references/, evals/,
-          # scripts/) is Phase 5 quarantine work — exempt (ADR-0009).
-          # ADRs and manifest-contract document the migration and are exempt.
-          STALE='Process Engine|process-engine|v1\.9\.1|lineage v7\.2'
-          SCOPE="prompts/ core/ docs/action-envelope.md"
+          mf --version
+          python -m methodfactory --version
 
+      # Honest terminology (Finding 4 item 2): this proves a CLEAN TRACKED
+      # WORKTREE (no uncommitted/untracked tracked-tree changes). Generated
+      # runtime/build files are gitignored, so their absence is proven by the
+      # explicit artifact scan below, not by git status alone.
+      - name: Clean tracked worktree
+        run: |
+          test -z "$(git status --porcelain)" || { echo "::error::dirty tracked worktree"; git status --porcelain; exit 1; }
+
+      # Explicit runtime/build-artifact scan with a documented allowlist
+      # (Finding 4 item 2): runtime store artifacts and SQLite files must not
+      # exist in the filesystem. methodfactory.egg-info IS allowlisted here:
+      # it is a build byproduct of the `pip install -e ".[test]"` step above
+      # (generated + gitignored), not a runtime store artifact. build/, dist/,
+      # and .pytest_cache are checked when they would be produced by this job.
+      - name: Runtime/build-artifact scan (explicit)
+        run: |
           FAIL=0
-          while IFS= read -r pattern; do
-            [ -z "$pattern" ] && continue
-            matches=$(grep -rIn "$pattern" $SCOPE --include='*.md' --include='*.py' 2>/dev/null || true)
-            if [ -n "$matches" ]; then
-              echo "::error::Stale PE reference in new content: $pattern"
-              echo "$matches"
-              FAIL=1
-            fi
-          done <<EOF
-          $(echo "$STALE" | tr '|' '\n')
-          EOF
+          for p in .mf build dist .pytest_cache; do
+            if [ -e "$p" ]; then echo "::error::forbidden generated artifact present: $p"; FAIL=1; fi
+          done
+          # SQLite rollback-journal files are forbidden (Finding 4 item 3).
+          found=$(find . -name '*.sqlite3' -o -name '*.sqlite' -o -name '*.db' \
+            -o -name '*.wal' -o -name '*.shm' -o -name '*.journal' 2>/dev/null | grep -v '^\./\.git/' || true)
+          if [ -n "$found" ]; then echo "::error::forbidden SQLite/journal artifact:"; echo "$found"; FAIL=1; fi
           exit $FAIL

.gitignore

@@ -22,3 +22,22 @@ node_modules/
 # Trial workspaces (generated at trial time)
 workspace/
 iteration-*/
+
+# Python build artifacts
+*.egg-info/
+build/
+dist/
+
+# Method Factory runtime store (operator data)
+.mf/
+
+# SQLite store + sidecars + rollback journal (ADR-0012 §3, Finding 4 item 3)
+*.sqlite3
+*.sqlite
+*.db
+*.wal
+*.shm
+*.journal
+
+# Test caches
+.pytest_cache/