[bioinfornatics]

Outcome

• Keep complete reference CI for feature PRs to develop and push/develop.
• Promotion PRs to main use a separate read-only exact-source canonical proof preflight, not another full suite.
• Request identity is checked before and after canonical verification; identity-only CLI cannot grant publication approval.
• Default independent approval / explicit owner-manual publication guards remain unchanged.
• Include new workflow in generated main; no authoring source merge into main.

Verification

40 focused CI/production/distribution tests pass; isolated Git installation/update passes. Real CLI exercised with only API transport simulated. No independent completed reviewer claim. User authorized commit/push/develop merge/main promotion2026-10-28. Personal journal/editor excluded.

Rollout

After this PR merges, verify exact merge SHA on develop; open promotion request and verify it runs only promotion-preflight. Publish generated tree using owner authorization and close without merging.