Skip to content

QUALITY_GATES.md

Latest commit

 

History

History
53 lines (39 loc) · 3.02 KB

QUALITY_GATES.md

File metadata and controls

53 lines (39 loc) · 3.02 KB

Release Quality Gates

This document defines Go/No-Go gates for ThreadPilot releases.

Gate Checklist

Gate Criteria Owner Status
Build integrity Release build succeeds with no blocking errors CI/CD Complete
Core automated tests Tests/ThreadPilot.Core.Tests passes on Release config QA Complete
Coverage gate CI parses Cobertura and fails below the active threshold QA Complete
Dependency security No Critical/High vulnerabilities from dotnet audit Security Complete
Secret hygiene Gitleaks scan has no active findings Security Complete
Performance baseline Idle tray footprint collected and archived Performance Complete
Packaging Installer + release zips + checksums + packaging evidence generated Release Eng Complete
Documentation Release notes, runbook, changelog updated Tech Writer Complete
Compatibility Smoke test on Windows 11 and Windows 10 best-effort QA Deferred (release candidate pass)

Mandatory Commands

dotnet restore ThreadPilot_1.sln
dotnet build ThreadPilot_1.sln --configuration Release --no-restore
dotnet test Tests/ThreadPilot.Core.Tests/ThreadPilot.Core.Tests.csproj --configuration Release --no-restore --collect:"XPlat Code Coverage" --settings "Tests/ThreadPilot.Core.Tests/coverlet.runsettings" --results-directory TestResults
dotnet list ThreadPilot.csproj package --vulnerable --include-transitive

Coverage Scope

  • The coverage badge tracks business/application code.
  • Generated build artifacts are excluded via coverlet.runsettings.
  • Legacy runtime harness files under Tests/*.cs are not part of the CI coverage contract.

Active Coverage Threshold

The repository now uses a real Cobertura-parsed gate in CI.

  • Transitional threshold: 1.5% line coverage
  • Reason: this matches the current honest baseline while service coverage is still being expanded
  • Planned ratchet: raise progressively as additional deterministic service tests land

Go/No-Go Rule

Release can proceed only when all gates are marked complete or explicitly waived with a written risk note.

Evidence Snapshot (2026-04-21)

  • Build: dotnet build ThreadPilot_1.sln --configuration Release --no-restore (success in CI release path).
  • Tests: dotnet test Tests/ThreadPilot.Core.Tests/ThreadPilot.Core.Tests.csproj --configuration Release --collect:"XPlat Code Coverage" --settings "Tests/ThreadPilot.Core.Tests/coverlet.runsettings" (45 passed, 0 failed in the current hardening branch).
  • Coverage: Cobertura from the current hardening branch is 7.52% line / 5.50% branch and is enforced by CI against the transitional 1.5% line gate.
  • Dependency security: dotnet list ThreadPilot.csproj package --vulnerable --include-transitive (no vulnerable packages).
  • Secret hygiene: local gitleaks run, report docs/audits/GITLEAKS_REPORT_2026-04-15.json (no leaks).
  • Packaging: installer/packages/checksums plus winget/chocolatey evidence artifacts generated in artifacts/release/ / workflow artifacts.