CI release gate Q1 2027

Block a release only when agents or personas newly fail on a Confirmed finding, not on noise.

GitHub Actions

.github/workflows/altqa.yml

name: alt.qa matrix
on: [deployment_status]
jobs:
  matrix:
    if: github.event.deployment_status.state == 'success'
    runs-on: ubuntu-latest
    steps:
      - uses: alt-qa/matrix-action@v1
        with:
          api-key: ${{ secrets.ALTQA_API_KEY }}
          matrix: booking-quick          # saved in the app
          target: ${{ github.event.deployment_status.target_url }}
          fail-on: new-confirmed         # exit 1 only on NEW Confirmed findings

GitLab / Jenkins

alt run --matrix booking-quick --target "$PREVIEW_URL" --fail-on new-confirmed

Rules the gate always follows

Stops before payment; sandbox and test cards only.
Uses the property’s Test Authorization: previews must be on a verified origin.
Posts one PR comment with the failure bundle: step, screenshot, DOM, likely cause, suggested fix, replay link.