From 840fbb1cddbc43170cf0a659a5d125e46835d95f Mon Sep 17 00:00:00 2001
From: "s0wlz (Matthias Puchstein)" <matthias@puchstein.lu>
Date: Sat, 2 May 2026 23:29:40 +0200
Subject: [PATCH] chore: add verify-all target and mandate local verification
 in GEMINI.md

---
 GEMINI.md | 5 +++++
 Makefile  | 7 +++++++
 2 files changed, 12 insertions(+)

diff --git a/GEMINI.md b/GEMINI.md
index ce5e338..19ff941 100644
--- a/GEMINI.md
+++ b/GEMINI.md
@@ -21,9 +21,14 @@ make dev-frontend     # pnpm dev (port 5173, /api proxied to :3000)
 
 # Linting & Quality
 make lint             # runs cargo fmt, clippy (-D warnings), and svelte-check
+make verify-all       # full local pre-flight: lint + tests + E2E + audit
 
 # Build
 make build            # runs lint, then pnpm build and cargo build --release
+...
+# 🚨 MANDATE: Run `make verify-all` locally before every release tag or push. 
+# This ensures that all quality, security, and lockfile gates pass, minimizing 
+# CI/CD debugging cycles.
 make compose-up       # docker compose build + start
 
 # Testing
diff --git a/Makefile b/Makefile
index f716fdb..34b262d 100644
--- a/Makefile
+++ b/Makefile
@@ -92,3 +92,10 @@ test-reset:
 test-e2e:
 	$(MAKE) test-up
 	@. scripts/test-env.sh; cd frontend && pnpm test:e2e
+
+verify-all: lint test test-e2e
+	@echo "Checking frontend lockfile sync..."
+	cd frontend && pnpm install --frozen-lockfile
+	@echo "Running local security audit..."
+	cd backend && cargo audit --ignore RUSTSEC-2023-0071
+	@echo "✅ All verification gates passed!"