Makefile targets per ROADMAP M1: build / vet / test / race / cover / check-cover
/ map / vm-proof. check-cover reports any package below a 70% floor (advisory —
not yet a hard gate, since rotate/policy/tui are still below target).
.gitea/workflows/ci.yml enforces the non-negotiable green bar on push/PR:
build + vet + `go test -race ./...` on Go 1.25, installing bash+openssl for the
self-contained test suite. Coverage floors are reported but not enforced until
the lagging packages are lifted (ROADMAP M1). Remote is gitea only.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>