Enforce Design CI

Add a reviewable design-quality gate that runs without an LLM. Memi writes a policy, baseline, universal agent skill, SARIF, and human-readable report artifacts.

This workflow targets published beta 2.8.0-beta.2. Use npx -y @memi-design/cli@2.8.0-beta.2 --version to verify the exact package; a local memi must report that same version before these recipes run. The independent stable compatibility baseline is 2.7.9. See current release state and known limitations. npm availability alone does not establish native-binary success.

Existing project setup

Beta initialization is unavailable. Use an existing reviewed policy and baseline; this skill does not invoke legacy setup commands. Review project changes before committing them.

Verify Locally

memi --profile connected --allow project-write --allow source-content-persistence --allow shell ci . --no-scope --report --json

The command may exit nonzero when findings exceed the configured gate. Treat that as a quality result, not a tool crash.

Add GitHub Actions

Use the pinned major action in .github/workflows/design.yml:

name: Design CI
on: [pull_request]
jobs:
  design:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      security-events: write
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - uses: memi-design/memi@v2
        with:
          version: "2.7.9"

Completion Criteria

• Policy and baseline are reviewed and committed.
• Local CI produces SARIF and a design-health report.
• The workflow passes on unchanged accepted debt and fails on a seeded regression.
• The final handoff names the gate threshold, suppressed baseline count, active findings, and artifact paths.