test+docs: property-test the core guarantees; add Guarantees page (#18) #12

	name: ci

	on:
	push:
	branches: [main]
	pull_request:

	concurrency:
	group: ci-${{ github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	quality:
	name: lint · types · coverage (3.12)
	runs-on: ubuntu-latest
	steps:
	# NOTE: tags are pinned to digests by Renovate (see renovate.json).
	- uses: actions/checkout@v4
	- uses: actions/setup-python@v5
	with:
	python-version: "3.12"
	- name: Install
	run: pip install -e ".[dev,cli,mcp,rest-api]"
	- name: Ruff (lint)
	run: ruff check .
	- name: Ruff (format)
	run: ruff format --check .
	- name: Mypy
	run: mypy src/
	- name: Pytest + coverage gate
	run: pytest --cov --cov-report=term-missing -q

	tests:
	name: tests (${{ matrix.python }})
	runs-on: ubuntu-latest
	strategy:
	fail-fast: false
	matrix:
	python: ["3.10", "3.11", "3.13"] # 3.12 is covered by the quality job
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-python@v5
	with:
	python-version: ${{ matrix.python }}
	- name: Install
	run: pip install -e ".[dev,cli,mcp,rest-api]"
	- name: Pytest
	run: pytest -q

Provide feedback