S01.3 — Establish Make, CI, collaboration, and foundation validation contracts

Planning / historicaltaskdelivery

Historical

Planning material. It summarizes and links to the authoritative specification and the current measured state — it does not replace either, and it is not current engineering truth.

Migration identity#

Canonical identifier: S01.3 (GitHub issue type: subtask).
Legacy identifier: C01.3 (retained as old_identifier).
Parent epic: E01.
Milestone: M1 — IntentGuard Weekend MVP.

Objective#

Expose every primary command, make future behavior fail honestly, and configure CPU CI plus locally reviewable collaboration templates.

Rationale#

One command surface and truthful automation make later implementation and evidence repeatable.

Parent identifier#

E01.

Source task#

T-001.

Traceability#

Primary: FR-010. Secondary: NFR-002, NFR-009.

Prerequisites#

C01.1 and C01.2 files exist; locked environment commands are known.

Likely files#

Makefile, scripts/validate_foundation.py, .github/ISSUE_TEMPLATE/, .github/pull_request_template.md, .github/workflows/ci.yml, contract tests.

Implementation boundary#

Only help/setup/lint/foundation-test behavior succeeds; data through demo targets fail non-zero until owners implement them.

MUST scope#

Ten Make targets, pinned CPU workflow, safe issue forms, PR evidence checklist, repository/backlog validator.

Explicit non-goals#

Remote execution, GitHub resources, fake ML targets, secrets/services, deployment, or GPU workflow.

Acceptance criteria#

make help, make lint, and make test pass; each unimplemented target emits its U identifier and fails; CI runs the same locked checks with read-only permission.

Validation commands#

make help && make lint && make test; separately assert non-zero exits for data, baseline, train, evaluate, serve, and demo.

Expected evidence#

Command listing, static/test output, explicit failure messages, valid issue-form syntax where a parser exists, and pinned workflow actions.

Fallback and status consequence#

A successful no-op command is not Implemented and fails U01. An unavailable YAML parser is reported unavailable, not passed.

Stop condition#

Stop for nonexistent CI commands, secret references, floating runtime configuration, or any attempted GitHub mutation.

Definition of ready#

C01.2 lock/install contract is stable and planned command owners are fixed.

Definition of done#

All operational targets execute real checks, all future targets fail clearly, and CI/collaboration files validate truthfully.

Labels#

type:subtask, priority:MUST, area:foundation

Estimate#

0.25 hour.