chore(work): finish 07-pre-commit-and-ci-integration

docs/work/_system/_state.json

@@ -1,5 +1,5 @@
 {
-  "updated_at": "2026-05-18T20:12:13.393Z",
+  "updated_at": "2026-05-18T20:16:23.080Z",
   "epics": {
     "binder-wrap-helper": {
       "status": "done",
@@ -212,10 +212,10 @@
           ]
         },
         "07-pre-commit-and-ci-integration": {
-          "status": "todo",
+          "status": "done",
           "title": "Pre-commit hook and CI integration for compliance drift detection",
           "ac_total": 1,
-          "ac_completed": 0,
+          "ac_completed": 1,
           "depends_on": [
             "06-compliance-generator-scripts"
           ],
@@ -437,11 +437,6 @@
     }
   },
   "ready": [
-    {
-      "epic": "compliance-manifests-pii-retention-subprocessors",
-      "story": "07-pre-commit-and-ci-integration",
-      "title": "Pre-commit hook and CI integration for compliance drift detection"
-    },
     {
       "epic": "compliance-manifests-pii-retention-subprocessors",
       "story": "08-docs-compliance-reference-files",

docs/work/epics/compliance-manifests-pii-retention-subprocessors/07-pre-commit-and-ci-integration/_story.md

@@ -3,12 +3,12 @@ id: 07-pre-commit-and-ci-integration
 epic: compliance-manifests-pii-retention-subprocessors
 title: Pre-commit hook and CI integration for compliance drift detection
 type: technical-story
-status: todo
+status: done
 feature: tooling
 depends-on: [06-compliance-generator-scripts]
 blocks: []
 created: 2026-05-18T17:52:09Z
-updated: 2026-05-18T18:06:15.725Z
+updated: 2026-05-18T20:16:22.912Z
 ---
 
 ## Goal
@@ -37,4 +37,4 @@ The generators alone don't prevent drift — a developer could edit a Payload co
 
 ## Tasks
 
-- [ ] Add conditional `pnpm compliance:emit-all` step to `.husky/pre-commit` (staged-file pattern guard matching Payload configs, library traces, and `compliance/*.yml`; auto-stages generated files via `git add compliance/`) and add `pnpm compliance:emit-all --check` hard-fail step to `.github/workflows/ci.yml` validate job with failure message pointing to the fix command — all gates pass on this commit.
+- [x] Add conditional `pnpm compliance:emit-all` step to `.husky/pre-commit` (staged-file pattern guard matching Payload configs, library traces, and `compliance/*.yml`; auto-stages generated files via `git add compliance/`) and add `pnpm compliance:emit-all --check` hard-fail step to `.github/workflows/ci.yml` validate job with failure message pointing to the fix command — all gates pass on this commit.

docs/work/epics/compliance-manifests-pii-retention-subprocessors/_epic.md

@@ -7,7 +7,7 @@ status: in-progress
 features:
   [core-shared, core-eslint, auth, blog, media, marketing-pages, navigation]
 created: 2026-05-18T17:52:09Z
-updated: 2026-05-18T20:12:13.181Z
+updated: 2026-05-18T20:16:22.912Z
 ---
 
 ## Goal
@@ -22,5 +22,5 @@ Ship the declarative compliance manifests + generators so downstream consumers g
 - [x] [04 — Background retention purge job in core-shared](04-retention-purge-job/_story.md)
 - [x] [05 — Backfill existing template collections](05-backfill-template-collections/_story.md)
 - [x] [06 — Compliance generator scripts](06-compliance-generator-scripts/_story.md)
-- [ ] [07 — Pre-commit hook and CI integration](07-pre-commit-and-ci-integration/_story.md)
+- [x] [07 — Pre-commit hook and CI integration](07-pre-commit-and-ci-integration/_story.md)
 - [ ] [08 — docs/compliance reference files and README](08-docs-compliance-reference-files/_story.md)