Use unique aggregate check names

.github/workflows/ci.yml

@@ -184,7 +184,7 @@ jobs:
         run: python tools/stress_atomicity.py --writers 12 --replacements 80 --payload-size 96000
 
   required:
-    name: Required
+    name: CI required
     if: always()
     needs: [repository, quality, tests, coverage, package, stress]
     runs-on: ubuntu-latest

.github/workflows/security.yml

@@ -81,7 +81,7 @@ jobs:
           category: /language:${{ matrix.language }}
 
   required:
-    name: Required
+    name: Security required
     if: always()
     needs: [workflow-policy, dependency-review, codeql]
     runs-on: ubuntu-latest

docs/CI_ARCHITECTURE.md

@@ -21,7 +21,7 @@ Every push and pull request runs `.github/workflows/ci.yml`:
    contents and metadata, installs the wheel without an index or dependencies,
    and rebuilds an equivalent wheel from the source archive.
 6. A concurrent reader/writer stress test runs on all three operating systems.
-7. One stable `Required` job aggregates every result for branch protection.
+7. One stable `CI required` job aggregates every result for branch protection.
 
 The test matrix installs the package before running tests. It therefore tests
 what packaging exposes rather than importing `src/` through an environment
@@ -31,7 +31,7 @@ variable.
 
 `.github/workflows/security.yml` runs workflow-policy enforcement, dependency
 review for pull requests, and CodeQL analysis for both Python and GitHub Actions.
-The workflow has a separate stable `Required` aggregate check.
+The workflow has a separate stable `CI required` aggregate check.
 
 `.github/dependabot.yml` proposes reviewed updates for development tools and
 pinned GitHub Actions. Dependency updates never publish automatically.

docs/GITHUB_SETUP.md

@@ -44,7 +44,7 @@ Create a branch ruleset targeting `main` with these controls:
 - stale approvals are dismissed after new commits;
 - all review conversations must be resolved;
 - the branch must be current before merge;
-- required checks are `CI / Required` and `Security / Required`;
+- required checks are `CI / CI required` and `Security / Security required`;
 - force pushes and branch deletion are blocked;
 - linear history is required;
 - administrators should not bypass the rules during ordinary work.

docs/RELEASING.md

@@ -8,8 +8,8 @@ upload production distributions.
 1. Merge all intended changes through `main`.
 2. Update the project version, package `__version__`, and dated changelog entry.
 3. Run `python tools/ci.py all` where development tools are installed.
-4. Merge the release-preparation pull request after `CI / Required` and
-   `Security / Required` pass.
+4. Merge the release-preparation pull request after `CI / CI required` and
+   `Security / Security required` pass.
 5. Confirm the latest scheduled extended validation has no unexplained failure.
 
 ## Publish

tools/validate_repository.py

@@ -121,15 +121,15 @@ def _validate_workflow_architecture(errors: list[str]) -> None:
             "python tools/typecheck_consumers.py",
             "python tools/rebuild_from_sdist.py dist",
             "python tools/stress_atomicity.py",
-            "name: Required",
+            "name: CI required",
         ),
         "security.yml": (
             "language: [python, actions]",
             "queries: security-extended",
             "actions/dependency-review-action@",
             "github/codeql-action/init@",
             "github/codeql-action/analyze@",
-            "name: Required",
+            "name: Security required",
         ),
         "extended.yml": (
             "python tools/repeat_tests.py --runs 15",