name: Harness governance

on:
  push:
  pull_request:

permissions: read-all

jobs:
  validate:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          persist-credentials: false
      - name: Validate templates and governance
        run: |
          python scripts/validate_agent_context.py
          python -m unittest discover -s tests -p "test_*.py"
          python scripts/validate_harness_governance.py