Found during the CI/CD audit (#42).
elements/oci/brew-nspawn.bst and the build-brew/verify-brew/install-brew recipes are a documented, deliberate exception to the distroless rules (docs/skills/nspawn-machine-image.md), but no workflow builds or verifies that lane. It is only ever exercised by hand, so it can rot silently while every other target is gated.
Decide and document one of:
- add a scheduled (not per-PR) build +
just verify-brew job, or
- state explicitly in the skill doc that the lane is manually verified and by whom.
Found during the CI/CD audit (#42).
elements/oci/brew-nspawn.bstand thebuild-brew/verify-brew/install-brewrecipes are a documented, deliberate exception to the distroless rules (docs/skills/nspawn-machine-image.md), but no workflow builds or verifies that lane. It is only ever exercised by hand, so it can rot silently while every other target is gated.Decide and document one of:
just verify-brewjob, or