From 4af427c01e69f47bd47fb06b17e220dfb1852570 Mon Sep 17 00:00:00 2001
From: autonomic-bot <maxf.account@proton.me>
Date: Wed, 27 May 2026 20:53:08 +0100
Subject: [PATCH] =?UTF-8?q?ci(1b):=20add=20lint=20stage=20to=20.drone.yml?=
 =?UTF-8?q?=20push=20pipeline=20=E2=80=94=20enforces=20format/lint=20on=20?=
 =?UTF-8?q?every=20commit=20(RL1)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 .drone.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.drone.yml b/.drone.yml
index 4ec3f0b..3aa04f7 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -14,6 +14,15 @@ trigger:
     - push
 
 steps:
+  # Lint/format gate (Phase 1b, RL1). Runs the exact toolchain from the pinned `lint` devshell
+  # (flake.nix) via scripts/lint.sh in check mode — FAILS the build on any unclean file so future
+  # commits stay formatted + lint-clean. HOME=/root so nix reuses root's store/eval cache.
+  - name: lint
+    environment:
+      HOME: /root
+    commands:
+      - nix develop .#lint --command bash scripts/lint.sh
+
   - name: hello
     commands:
       - echo "cc-ci self-test on the exec runner"