Phase 4 of the force-merge protection fix (internal#219 §2).
Changes:
- audit-force-merge.yml REQUIRED_CHECKS: add CI / all-required (pull_request)
— closes the audit gap; force-merge audit now checks ci/all-required.
- ci.yml: flip continue-on-error: false on stable jobs
(changes, platform-build, canvas-build, shellcheck, python-lint)
— confirmed green on main 2026-05-12 combined-status check.
The all-required sentinel (continue-on-error: true) will be flipped
once branch protection PATCH lands (Owner-tier, delegated separately).
NOT included in this PR (separate Owner-tier action required):
- Branch protection PATCH: add ci/all-required as required check on main.
Needed to make the sentinel actually block merges. Delegate to Core
Platform Lead.
Refs: molecule-core#622, molecule-core#623
core-devops