initial commit

Change-Id: Ieef4347967c992d99068a9713b252fd625499445

.platform/config.yaml

@@ -0,0 +1,14 @@
+# Platform configuration — read by CI/CD workflows at runtime.
+# DO NOT DELETE: required for platform-managed GitOps and CI/CD.
+
+runtime: typescript-nestjs
+
+# Health check endpoint used by the integration-test smoke test.
+# Java Spring Boot uses /actuator/health; Liberty uses /health; all others use /health.
+health_path: /health
+
+# Port the service listens on inside the container.
+# Python FastAPI defaults to 8000; Node/TypeScript to 3000; Liberty to 9080; everything else to 8080.
+container_port: 3000
+
+service: sonar-test-nest3

.platform/initialized.md

@@ -0,0 +1,25 @@
+# Platform Initialization
+
+| Field | Value |
+|-------|-------|
+| Component | `sonar-test-nest3` |
+| Repository | `validate/sonar-test-nest3` |
+| Runtime | `typescript-nestjs` |
+| Branch model | `dev` → `staging` → `prod` (→ `main` SoR) |
+| Code lives on | `dev` (push to dev triggers build + deploy to dev env) |
+| Protected | `main`, `staging`, `prod` (require PR + passing CI + 1 approval) |
+| Free push | `dev` (inner loop — no PR, no approval required) |
+
+## Promotion flow
+
+Push to `dev` freely. The CI/CD pipeline builds and deploys to the dev
+environment automatically on every commit.
+
+Promotion to higher environments requires a PR — the integration test must
+pass and 1 reviewer must approve before the merge is allowed:
+
+- **dev → staging** — opens a PR; CI gate + 1 approval required
+- **staging → prod** — opens a PR; CI gate + 1 approval required
+
+`main` is the system of record. It contains only workflow files and
+platform metadata. Application code is promoted to it from `prod` via PR.