Run release readiness gate in CI

Author: RamazanKara

.github/workflows/ci.yml

@@ -14,13 +14,5 @@ jobs:
         with:
           go-version-file: go.mod
           cache: true
-      - name: Check formatting
-        run: make fmt-check
-      - name: Run lint
-        run: make lint
-      - name: Run tests
-        run: make test
-      - name: Build stamped binary
-        run: make build VERSION=0.1.0-ci
-      - name: Build release artifacts
-        run: make release-dist VERSION=0.1.0-ci
+      - name: Release readiness check
+        run: make release-check VERSION=0.1.0-ci

CHANGELOG.md

@@ -38,6 +38,7 @@
 - Added a public JSON Schema for evidence bundle manifests and test coverage that validates exported manifests against it.
 - Added `openexit verify-bundle` for offline evidence bundle verification with text and JSON reports.
 - Added `make release-check` and wired the draft-release workflow to run the full release gate before packaging artifacts.
+- Updated push CI to run the same release readiness gate, including smoke pipelines and bundle verification.
 - Updated CI and release workflows to Node.js 24-native GitHub Actions.
 
 ## 0.1.0 - 2026-05-24

docs/release.md

@@ -34,7 +34,8 @@ The AI provider path is complete for local fixture assessment workflows and incl
 ## Release Checklist
 
 - [ ] `git status --short --branch` is clean and on the intended release branch.
-- [ ] `make release-check VERSION=0.1.0` passes, including verification, CLI smoke pipelines, bundle verification, release artifact builds, and checksum count checks.
+- [ ] GitHub Actions CI passes the same `make release-check VERSION=0.1.0-ci` gate used for local release readiness.
+- [ ] `make release-check VERSION=0.1.0` passes locally, including verification, CLI smoke pipelines, bundle verification, release artifact builds, and checksum count checks.
 - [ ] `make verify VERSION=0.1.0` passes, including CLI smoke pipelines.
 - [ ] `make lint` runs `gofmt`, `golangci-lint`, and `go vet`.
 - [ ] `make release-dist VERSION=0.1.0` produces binaries and `dist/SHA256SUMS`.