feat: EU AI Act Art. 50 compliance — watermark all outputs + new back… #24

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	workflow_dispatch:

	# Cancel superseded runs on the same ref to save CI minutes.
	concurrency:
	group: ci-${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	# Least privilege: this workflow only needs to read the repo.
	permissions:
	contents: read

	jobs:
	lint:
	name: Lint (ruff)
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v7
	- uses: actions/setup-python@v6
	with:
	python-version: "3.12"
	cache: pip
	cache-dependency-path: pyproject.toml
	- name: Install dev dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install -e ".[dev]"
	- name: ruff check
	run: ruff check --output-format=github .

	test:
	name: Test (py${{ matrix.python-version }})
	runs-on: ubuntu-latest
	strategy:
	fail-fast: false
	matrix:
	# numpy is pinned <2 (torch-stack compatibility) which has no
	# cp313 wheels, so the supported range is 3.10–3.12.
	python-version: ["3.10", "3.11", "3.12"]
	steps:
	- uses: actions/checkout@v7
	- uses: actions/setup-python@v6
	with:
	python-version: ${{ matrix.python-version }}
	cache: pip
	cache-dependency-path: pyproject.toml
	- name: Install package + dev dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install -e ".[dev]"
	- name: Run test suite
	run: pytest

Provide feedback