name: Anti-Smuggle Gate
on: [push, pull_request]

jobs:
  layers-0-5:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      
      - name: Install Lean
        run: |
          curl -sL https://raw.githubusercontent.com/leanprover/elan/master/elan-init.sh | sh -s
          echo "$HOME/.elan/bin" >> $GITHUB_PATH
      
      - name: Setup Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.11"
          cache: pip
      
      - name: Install deps
        run: |
          pip install sympy numpy
      
      - name: Restore lake cache
        uses: actions/cache@v4
        with:
          path: .lake
          key: lake-${{ hashFiles('lake-manifest.json') }}
      
      - name: Layer 0 — Determinism
        run: python3 scripts/check_determinism.py --seed 0 --check-all || echo "Layer 0: WARN (no artifacts)"
      
      - name: Layer 2 — Mutation Testing
        run: |
          python3 -c "
          from scripts.qc_flag.mutation_generator import generate_all, load_manifest
          m = load_manifest()
          g = generate_all(m)
          print(f'Generated {sum(len(v) for v in g.values())} mutations')
          "
      
      - name: Layer 3 — CAS/SMT Grounding
        run: python3 scripts/verify_with_sympy.py || echo "Layer 3: WARN (SymPy check)"
      
      - name: Layer 4 — Build Gate
        run: lake build SilverSightRRC