Clean-room velnor-workflow regeneration

.github-gen/velnor-workflow.toml

@@ -6,33 +6,8 @@ revision = "e05aee6de1d1614d752b4d1b1d26a49ac2c5ef91"
 
 [workflow]
 runners = "both"
-automatic = "both"
-default_dispatch_runner = "github"
 automatic_lanes = "github"
+default_dispatch_runner = "github"
 github_runner = "ubuntu-24.04"
 velnor_labels = ["self-hosted", "velnor-target-mvp"]
 default_branch = "main"
-
-[release]
-enabled = true
-reason = "Publish signed ruxel CLI archives and update the Homebrew tap."
-kind = "rust-binary"
-package = "ruxel-cli"
-binary = "ruxel"
-targets = [
-  "aarch64-apple-darwin",
-  "x86_64-apple-darwin",
-  "aarch64-unknown-linux-gnu",
-  "x86_64-unknown-linux-gnu",
-]
-source_repository = "tailrocks/ruxel"
-
-[[declare]]
-primitive = "release"
-file = "release.yml"
-
-[[declare]]
-primitive = "preview"
-file = "preview.yml"
-
-# Note: rust-toolchain.toml targets are patched in the migration branch to match release targets.

.github/actionlint.yaml

@@ -4,7 +4,6 @@
 
 self-hosted-runner:
   labels:
-    - macos-15
     - self-hosted
     - ubuntu-24.04
     - velnor-target-mvp

.github/ci/.github-actions-generator-state

@@ -1,19 +1,17 @@
 # Generated ownership state; do not edit.
 schema = 2
 [inputs]
-config	04fe5ecdd1abff0e
+config	4b2710c1154efb7d
 scan	73483f0bc233ebc4
 generator	47
 [outputs]
-.github/actionlint.yaml	b75eef6f28137009
-.github/ci/project.toml	37e1b1997575fa0d
+.github/actionlint.yaml	ec35f48ae7e90e0e
+.github/ci/project.toml	a0c5060b9b02e82b
 .github/workflows/ci-main.yml	537e2660324fc9cb
 .github/workflows/ci-policy.yml	679740121455a70d
 .github/workflows/ci-pr.yml	c03fdd762bebc144
 .github/workflows/ci-unit-docker.yml	094cf8fe4b277f46
 .github/workflows/ci-unit-rust.yml	c8f0cbd26e1ceb67
 .github/workflows/maintenance.yml	dd8712190b92c173
 .github/workflows/nightly.yml	76e5e2bc12a599c6
-.github/workflows/preview.yml	98ef034306370cf6
-.github/workflows/release.yml	8fae2b06e584218a
 config/fleet/velnor-host.env	d14b419216449423

.github/ci/project.toml

@@ -14,18 +14,12 @@ limitations = ["Project code, build scripts, task runners, and commands are neve
 [workflow]
 github_runner = "ubuntu-24.04"
 velnor_labels = ["self-hosted", "velnor-target-mvp"]
-files = ["ci-main.yml", "ci-policy.yml", "ci-pr.yml", "ci-unit-docker.yml", "ci-unit-rust.yml", "maintenance.yml", "nightly.yml", "preview.yml", "release.yml"]
+files = ["ci-main.yml", "ci-policy.yml", "ci-pr.yml", "ci-unit-docker.yml", "ci-unit-rust.yml", "maintenance.yml", "nightly.yml"]
 notes = ["Rust verification uses Mr. Boxington 1.11.1 by default on both lanes. GitHub-hosted jobs use its GitHub cache backend with bounded snapshot keys (a key names the toolchain/image/linker compatibility class and the hashed source state, so a new source state saves a new snapshot and retention keeps generations bounded). Velnor jobs use an explicit local-backend setup step against the image/runner-provided local store."]
 
 [release]
-enabled = true
-reason = "Publish signed ruxel CLI archives and update the Homebrew tap."
-kind = "rust-binary"
-package = "ruxel-cli"
-packages = []
-binary = "ruxel"
-targets = ["aarch64-apple-darwin", "x86_64-apple-darwin", "aarch64-unknown-linux-gnu", "x86_64-unknown-linux-gnu"]
-source_repository = "tailrocks/ruxel"
+enabled = false
+reason = "Release is fail-closed. Enable only after declaring immutable artifact, registry, provenance, and tag-protection policy."
 
 [[unit]]
 id = "docker-tools-fixtures-docker"