Optional hardening after the repository is public and CI is stable. Configure in the GitHub UI:
Settings → Branches → Add branch protection rule (or edit an existing rule).
- Require a pull request before merging — forces review and keeps direct pushes off
main(aligns with.github/instructions/development-workflow.instructions.md). - Require status checks to pass — enable the checks from
.github/workflows/ci.yml(e.g. thetestjob) sogo testmust pass before merge. - Require branches to be up to date before merging — reduces merge skew.
- Do not allow bypassing the above settings — restrict who can push or dismiss reviews per team policy.
Apply the same pattern with checks appropriate for that branch, or protect only main and use development
as a fast-moving integration branch per your workflow.