G-01 CI Gate Regression: Python deps missing in CI workflows (1 compliance failure, all gates pass after fix)

[github-actions]

G-01 CI Gate Regression Test — 2026-07-09

Summary

Gate	Result	Details
npm run compliance	PASS (98%, threshold 94%)	94 PASS / 1 FAIL / 0 WAIVED
bash scripts/sync-skills.sh	PASS	77 skills synced to all targets
bash scripts/validate-specs-yaml.sh	PASS	All YAML valid
scripts/golden-g04-selftest.sh	PASS	7/7 (cursor, gemini, pi, lockfile)

Root Cause of the 1 Compliance Failure

The compliance gate recorded 1 failure: and-the-skill-packaging-pipeline-round-trips-a-golden-fixture-without-data-loss in the Conventions feature.

Cause: The CI runner lacks PyYAML. The step calls sync-skills.sh, which uses Python scripts (srp-engine.py, trace-stories.py) that import yaml. When the import fails, sync-skills.sh produces incomplete/corrupt artifacts, and the golden fixture check detects the loss.

After running pip install -r requirements.txt, the failing step passes, and sync-skills.sh, validate-specs-yaml.sh, and golden-g04-selftest.sh all exit 0.

CI Workflow Drift

requirements.txt explicitly states: "CI installs this before running the compliance gate."

However, neither sync-skills.yml nor publish.yml includes a pip install -r requirements.txt step. The only workflow that installs Python deps is e42-golden-deepseek.lock.yml. This is a drift between documented intent and CI configuration.

Deterministic Gate Results (post-fix)

• compliance: GATE PASS (98% > 94% threshold)
• sync-skills: EXIT 0
• validate-specs-yaml: EXIT 0
• golden-g04-selftest: EXIT 0, 7/7 passed

Recommendation

Add pip install -r requirements.txt as a step in sync-skills.yml and publish.yml before any script that invokes Python through sync-skills.sh, validate-specs-yaml.sh, or the compliance audit pipeline.

Consistency Check

CI workflow files (.github/workflows/) are consistent with specs/release-plan.yaml declarations for e15 (CI/CD Pipeline), e22 (Skill Catalog CI Gate), e31 (Deterministic Gates), e38 (Traceability Gate), e42 (Golden Suite), and e51 (Always Green). No structural drift detected beyond the missing pip install step.

---

Generated with [Claude Code]((claude.com/redacted)

Generated by Golden Story G-01: CI Gate Regression Test · ⊞ 3.1K · ◷