This document defines the minimum gates to move HomeDir across release stages.
- Stage:
ALPHA - Baseline CI gate (this iteration):
- JaCoCo line coverage
>= 60% - JaCoCo branch coverage
>= 40% PublicExperienceSmokeTestmandatory on every PR
- JaCoCo line coverage
These thresholds are intentionally conservative to avoid delivery disruption during the first hardening cycle.
Required:
- CI quality gates enabled and stable for at least 2 weeks.
PR Validationsuccess rate>= 95%over rolling 14 days.Production Releasesuccess rate>= 95%over rolling 14 days.- Public smoke routes stable (
/,/comunidad,/eventos,/proyectos) with no critical regressions. - Core product loops available (community content, events, identity/profile) without blocking empty states.
Required:
- Feature freeze for major modules (only bugfix, perf, reliability, security).
PR Validationsuccess rate>= 97%over rolling 30 days.Production Releasesuccess rate>= 97%over rolling 30 days.- Incident management and rollback drill documented and validated.
- Security gates active in CI (dependency and static checks).
Required:
- SLO/SLI dashboard active for availability and key endpoint latency.
- Error budget policy documented and followed.
- Data governance baseline active (retention, deletion/export paths, auditability).
- No open P0/P1 defects and no unresolved release blocker.
- Stable release cadence for at least 30 days.
After this PR, increase thresholds in small steps while monitoring pipeline health:
- Marcha blanca 1:
60/40(line/branch) for 1 week. - Marcha blanca 2:
62/42if pipeline remains stable. - Marcha blanca 3:
65/45. - Beta target candidate:
70/50(or higher if sustainable).
Do not raise thresholds in the same PR as unrelated feature work.
Track daily:
- PR Validation pass/fail trend.
- Production Release pass/fail trend.
- Mean time to recover from failed release.
- Critical smoke failures by route.
Automation:
- GitHub Actions workflow
Pipeline Healthcomputes a rolling 14-day report every hour and on each completed PR/Release run. - Default mode is advisory (
warnonly). - Use manual dispatch with
enforce=truewhen you want hard-fail behavior against thresholds. - GitHub Actions workflow
Security Advisoryruns dependency review on PRs and runs scheduled/manual CodeQL in advisory mode. Security Advisorysupportsworkflow_dispatchwithenforce=trueto convert advisory signals into hard-fail checks during controlled hardening windows.
If failures increase after a gate change:
- Pause gate ratchet.
- Open hotfix PR for CI reliability.
- Resume feature iterations only after stabilization.