This repository uses two complementary mechanisms.
The workflow .github/workflows/formal-verify.yml dispatches to SentinelOps remote CI. That path may enforce organization-wide policy, secrets, or resource tiers that are not visible from a public fork.
The workflow .github/workflows/local-ci.yml runs on GitHub-hosted ubuntu-22.04 and macos-14 and is the reproducible check contributors can mirror locally. Job order:
bash scripts/check_sorry.sh— fails onsorryinLeanToolchain/except whole-file entries inscripts/sorry_allowlist.txt.lake build— default Lake targets (including mathlib-backed modules).lake test—leanToolchainTestsunified driver (crypto + math smoke tests).lake exe extract— refresh generatedrust/sources and manifests.cargo testandcargo clippy --all-targets -- -D warnings— from therust/directory.
Toolchains: Lean via leanprover/lean-action, Rust via dtolnay/rust-toolchain with Clippy enabled.
.github/dependabot.yml opens weekly update PRs for GitHub Actions and rust/ Cargo dependencies.