From 5af237661f705b66323977172e14818778122ffe Mon Sep 17 00:00:00 2001
From: ernestprovo23 <ernest@thedataexperts.us>
Date: Mon, 8 Jun 2026 22:05:41 -0400
Subject: [PATCH] ci: enable main branch protection + document config (PR-E)

Applied via: gh api -X PUT repos/ernestprovo23/conclave/branches/main/protection

Required status checks (all must pass before merge):
  - pytest / py3.11
  - pytest / py3.12
  - pytest / py3.13
  - ruff
  - gitleaks

Settings: strict=true (branches must be up to date), enforce_admins=false
(admin can still merge), no PR review requirement (sole maintainer).
Repo made public to enable branch protection on free plan.
---
 .github/branch-protection.json | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 .github/branch-protection.json

diff --git a/.github/branch-protection.json b/.github/branch-protection.json
new file mode 100644
index 0000000..81ac84a
--- /dev/null
+++ b/.github/branch-protection.json
@@ -0,0 +1,18 @@
+{
+  "branch": "main",
+  "required_status_checks": {
+    "strict": true,
+    "contexts": [
+      "pytest / py3.11",
+      "pytest / py3.12",
+      "pytest / py3.13",
+      "ruff",
+      "gitleaks"
+    ]
+  },
+  "enforce_admins": false,
+  "required_pull_request_reviews": null,
+  "restrictions": null,
+  "allow_force_pushes": false,
+  "allow_deletions": false
+}