ci: enforce lowercase readme and tighten fast checks

Author: nikivdev

.github/workflows/canary.yml

@@ -44,6 +44,9 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
+      - name: Validate readme casing
+        run: scripts/ci/check-readme-case.sh
+
       - name: Cache vendored deps
         uses: actions/cache@v4
         with:
@@ -117,6 +120,9 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
+      - name: Validate readme casing
+        run: scripts/ci/check-readme-case.sh
+
       - name: Cache vendored deps
         uses: actions/cache@v4
         with:

.github/workflows/nightly-validation.yml

@@ -32,6 +32,9 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
+      - name: Validate readme casing
+        run: scripts/ci/check-readme-case.sh
+
       - name: Cache vendored deps
         uses: actions/cache@v4
         with:
@@ -77,6 +80,9 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
+      - name: Validate readme casing
+        run: scripts/ci/check-readme-case.sh
+
       - name: Cache vendored deps
         uses: actions/cache@v4
         with:

.github/workflows/pr-fast.yml

@@ -26,6 +26,9 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
+      - name: Validate readme casing
+        run: scripts/ci/check-readme-case.sh
+
       - name: Cache vendored deps
         uses: actions/cache@v4
         with:
@@ -55,3 +58,6 @@ jobs:
 
       - name: Check seq bridge
         run: cargo check -p seq_everruns_bridge
+
+      - name: Compile seq bridge tests
+        run: cargo test -p seq_everruns_bridge --no-run

.github/workflows/release.yml

@@ -36,6 +36,9 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
+      - name: Validate readme casing
+        run: scripts/ci/check-readme-case.sh
+
       - name: Cache vendored deps
         uses: actions/cache@v4
         with:
@@ -109,6 +112,9 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
+      - name: Validate readme casing
+        run: scripts/ci/check-readme-case.sh
+
       - name: Cache vendored deps
         uses: actions/cache@v4
         with:

.gitignore

@@ -79,5 +79,5 @@ __pycache__/
 # explain-commits output is local/generated by default
 docs/commits/*
 !docs/commits/
-!docs/commits/README.md
+!docs/commits/readme.md
 !docs/commits/.gitkeep

docs/ci-cd-runbook.md

@@ -16,6 +16,8 @@ This runbook documents how Flow CI/CD is wired today and how to debug it quickly
   - Both workflows run `scripts/vendor/vendor-repo.sh hydrate` immediately after checkout in each build job.
   - This materializes `lib/vendor/*` from the pinned commit in `vendor.lock.toml` before Cargo builds.
   - Build jobs cache vendor checkout/materialization (`.vendor/flow-vendor`, `lib/vendor`, `lib/vendor-manifest`) keyed by `vendor.lock.toml`.
+- Repository policy checks:
+  - CI enforces lowercase `readme.md` naming via `scripts/ci/check-readme-case.sh`.
 - Build jobs in both workflows:
   - Matrix build: macOS + Linux targets.
   - SIMD build: `build-linux-host-simd` (Linux x64 with `--features linux-host-simd-json`).
@@ -95,7 +97,7 @@ Canary flow:
 PR flow:
 
 1. Open/refresh PR to `main`.
-2. Watch `PR Fast Check`.
+2. Watch `PR Fast Check` (`cargo check` + `cargo test --no-run` shard).
 3. Merge only after fast check passes.
 
 ## Debug Playbook

docs/commits/README.md docs/commits/readme.mddocs/commits/README.md renamed to docs/commits/readme.md

@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+repo_root="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+cd "$repo_root"
+
+# Enforce lowercase readme filenames in tracked files.
+bad="$(git ls-files | rg '(^|/)README\.md$' || true)"
+
+if [[ -n "$bad" ]]; then
+  echo "error: uppercase README.md paths are not allowed; use lowercase readme.md"
+  echo "$bad" | sed 's/^/  - /'
+  exit 1
+fi
+
+echo "ok: no uppercase README.md paths found"

scripts/ci/check-readme-case.sh

@@ -174,8 +174,14 @@ ensure_repo_layout() {
   local checkout="$1"
   mkdir -p "$checkout/crates" "$checkout/manifests" "$checkout/profiles"
 
-  if [[ ! -f "$checkout/README.md" ]]; then
-    cat > "$checkout/README.md" <<'README'
+  # Enforce lowercase readme naming in vendor repo root.
+  if [[ -f "$checkout/README.md" && ! -f "$checkout/readme.md" ]]; then
+    mv "$checkout/README.md" "$checkout/readme.md"
+  fi
+  rm -f "$checkout/README.md"
+
+  if [[ ! -f "$checkout/readme.md" ]]; then
+    cat > "$checkout/readme.md" <<'README'
 # flow-vendor
 
 Canonical vendored dependency source for `nikivdev/flow`.