examples/.github/workflows/ci.yml at main · agentrust-io/examples · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

env:
  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"

jobs:
  validate:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
      - name: Validate JSON files
        run: |
          find . -name "*.json" -not -path "./.git/*" | while read f; do
            python3 -m json.tool "$f" > /dev/null && echo "OK: $f" || exit 1
          done
      - name: Validate YAML files
        run: |
          pip install pyyaml -q
          find . -name "*.yaml" -o -name "*.yml" | grep -v ".git" | while read f; do
            python3 -c "import yaml, sys; yaml.safe_load(open(sys.argv[1]))" "$f" && echo "OK: $f" || exit 1
          done

  financial-services:
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: financial-services
    steps:
      - uses: actions/checkout@v7

      - name: Set up Python 3.11
        uses: actions/setup-python@v7
        with:
          python-version: "3.11"

      - name: Run credit engine tests
        run: python -m unittest discover -s tests -v

  industrial-embodied-ai:
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: industrial-embodied-ai
    steps:
      - uses: actions/checkout@v7

      - name: Set up Python 3.11
        uses: actions/setup-python@v7
        with:
          python-version: "3.11"
          cache: "pip"
          cache-dependency-path: industrial-embodied-ai/requirements.txt

      - name: Install controller test dependencies
        run: python -m pip install cryptography

      - name: Run controller tests
        run: python -m unittest discover -s tests -v

      - name: Install artifact validation dependencies
        if: github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository
        run: python -m pip install -r requirements.txt

      - name: Verify committed evidence artifacts
        if: github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository
        run: python validate_artifacts.py

  healthcare:
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: healthcare
    steps:
      - uses: actions/checkout@v7

      - name: Set up Python 3.11
        uses: actions/setup-python@v7
        with:
          python-version: "3.11"

      - name: Run clinical engine tests
        run: python -m unittest discover -s tests -v

  embodied-action-receipts:
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: embodied-action-receipts
    steps:
      - uses: actions/checkout@v7

      - name: Set up Python 3.11
        uses: actions/setup-python@v7
        with:
          python-version: "3.11"
          cache: "pip"
          cache-dependency-path: embodied-action-receipts/requirements.txt

      - name: Install dependencies
        run: python -m pip install -r requirements.txt

      - name: Verify embodied-action receipt fixtures
        run: python -m unittest discover -s tests -v

  multi-tenant-saas:
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: multi-tenant-saas
    steps:
      - uses: actions/checkout@v7

      - name: Set up Python 3.11
        uses: actions/setup-python@v7
        with:
          python-version: "3.11"

      - name: Run people directory tests
        run: python -m unittest discover -s tests -v

  ca2a-delegation:
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: ca2a-delegation
    steps:
      - uses: actions/checkout@v7

      - name: Set up Python 3.11
        uses: actions/setup-python@v7
        with:
          python-version: "3.11"

      - name: Install cA2A runtime (pre-release)
        run: python -m pip install --pre ca2a-runtime

      - name: Run delegation tests
        run: python -m unittest discover -s tests -v

      - name: Run the delegation demo
        run: python delegation_agent.py

  weight-custody-manifest:
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: weight-custody-manifest
    steps:
      - uses: actions/checkout@v7

      - name: Set up Python 3.11
        uses: actions/setup-python@v7
        with:
          python-version: "3.11"

      - name: Install the WCM SDK from PyPI
        run: python -m pip install -r requirements.txt

      - name: Run the 30-second refuse-and-wipe demo
        run: python refuse_and_wipe.py

      - name: Run the end-to-end custody demo
        run: python open_model_e2e.py

      - name: Run the sovereign threshold demo
        run: python sovereign_self_custody.py

      - name: Replay a SEV-SNP quote offline
        run: python snp_replay.py

      - name: Run the feature examples
        run: |
          for s in closed_model_e2e multi_stage_byom transparency_log post_quantum channel_binding revocation_kill_switch quote_verification load_guard; do
            echo "== $s =="
            python "$s.py"
          done

      - name: Run the model-signing provenance example
        run: |
          python -m pip install "weight-custody-manifest[model-signing]>=0.21.0"
          python provenance_model_signing.py