ci(release): consolidate quality artifacts

[ootakazuhiko]

Summary\n- invoke release-quality-artifacts from release.yml via workflow_call\n- remove release trigger from release-quality-artifacts and keep manual dispatch\n- keep release asset upload behavior for tag releases\n\n## Testing\n- not run (workflow change)

[github-actions]

❓ Code Generation Drift Detection

Status:
Regeneration needed: No

---

Automated by AE-Framework Codegen

[github-actions]

Quality Summary

• Adapters:

• Formal: n/a

• Replay: n/a

• Trace IDs:

[github-actions]

🔍 Verification Summary

• Traceability: 6 scenarios
  • Tests: 3 (50%)
  • Impl: 3 (50%)
  • Formal: 3 (50%)

Unlinked (top 5)

- Device registration publishes enough pre-keys and emits audit log (id: device-registration-publishes-enough-pre-keys-and-emits-audit-log) test:N/A impl:N/A formal:N/A - Invalid auth tag triggers audit violation for AES-GCM envelopes (id: invalid-auth-tag-triggers-audit-violation-for-aes-gcm-envelopes) test:N/A impl:N/A formal:N/A - Session rotation stays within forward secrecy thresholds (id: session-rotation-stays-within-forward-secrecy-thresholds) test:N/A impl:N/A formal:N/A

Linked examples (up to 3)

- Successful reservation (id: successful-reservation) test: [traceability/inventory.trace.test.ts](https://github.com/itdojp/ae-framework/blob/0b88b0f3b78fcebb219705be282ac37d907e21fd/tests/traceability/inventory.trace.test.ts) impl: [domain/inventory.ts](https://github.com/itdojp/ae-framework/blob/0b88b0f3b78fcebb219705be282ac37d907e21fd/src/domain/inventory.ts) formal: [tla+/Inventory.tla](https://github.com/itdojp/ae-framework/blob/0b88b0f3b78fcebb219705be282ac37d907e21fd/specs/formal/tla+/Inventory.tla) - Prevent negative stock (id: prevent-negative-stock) test: [traceability/inventory.trace.test.ts](https://github.com/itdojp/ae-framework/blob/0b88b0f3b78fcebb219705be282ac37d907e21fd/tests/traceability/inventory.trace.test.ts) impl: [domain/inventory.ts](https://github.com/itdojp/ae-framework/blob/0b88b0f3b78fcebb219705be282ac37d907e21fd/src/domain/inventory.ts) formal: [tla+/Inventory.tla](https://github.com/itdojp/ae-framework/blob/0b88b0f3b78fcebb219705be282ac37d907e21fd/specs/formal/tla+/Inventory.tla) - Idempotent by order id (id: idempotent-by-order-id) test: [traceability/inventory.trace.test.ts](https://github.com/itdojp/ae-framework/blob/0b88b0f3b78fcebb219705be282ac37d907e21fd/tests/traceability/inventory.trace.test.ts) impl: [domain/inventory.ts](https://github.com/itdojp/ae-framework/blob/0b88b0f3b78fcebb219705be282ac37d907e21fd/src/domain/inventory.ts) formal: [tla+/Inventory.tla](https://github.com/itdojp/ae-framework/blob/0b88b0f3b78fcebb219705be282ac37d907e21fd/specs/formal/tla+/Inventory.tla)

Hit basis (tests/formal)

- Test hits: title=3 id=0 tag=0 - Formal hits: title=0 id=3 tag=0

- Model Check (TLC): 2/8 (25%) modules ok

Non-OK modules (top 5)

- KvOnce (log: artifacts/codex/KvOnce.tlc.log.txt) - KvOnceRefinement (log: artifacts/codex/KvOnceRefinement.tlc.log.txt) - KvOnceImpl (log: artifacts/codex/KvOnceImpl.tlc.log.txt) - KvOnce (log: artifacts/codex/KvOnce.tlc.log.txt) - KvOnceRefinement (log: artifacts/codex/KvOnceRefinement.tlc.log.txt)

- Alloy: detected 2 specs (execution skipped) - Contracts: schemas=true conditions=true machine=true - Contracts exec: parseIn=false pre=false post=false parseOut=false

[github-actions]

CodeX Artifacts Summary

• • Contract/E2E templates: 1 files (dir: tests/api/generated)
• • Tests: PBT files=122, BDD features=0
• • Formal specs: TLA=1, Alloy=1

[Copilot]

Pull request overview

This PR consolidates the release quality artifacts workflow by invoking it from the main release workflow via workflow_call, rather than having it triggered independently by release events.

Changes:

• Modified release-quality-artifacts.yml to use workflow_call instead of the release event trigger
• Added a new job in release.yml to invoke the quality artifacts workflow after the main release job completes
• Updated conditional logic to distinguish between workflow_call invocations and manual dispatches for proper artifact upload handling

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.github/workflows/release.yml	Adds release-quality-artifacts job that calls the quality artifacts workflow after release completion with appropriate permissions
.github/workflows/release-quality-artifacts.yml	Replaces release event trigger with workflow_call and updates upload conditionals to handle both workflow_call and manual dispatch scenarios

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

CI Status Snapshot (2026-01-27T11:36:43.681Z)

• ci(release): consolidate quality artifacts #1787 ci(release): consolidate quality artifacts | ✅23 ❌0 ⏳0 ⏭️33 | review:NONE | mergeable:MERGEABLE