.github/workflows/dual-approval.yaml

@@ -1,19 +1,19 @@
-name: Dual Approval (CTO + QA)
+name: Promotion Gate
 
-# Calls the shared dual-approval-check workflow.
+# Calls the shared promotion gate workflow.
-# Passes when both privilegedescalation-cto and privilegedescalation-qa
+# dev PRs: no gate (engineer self-merges).
-# have approved the PR. Add "Dual Approval (CTO + QA)" to required_status_checks
+# uat PRs: QA approval required.
-# in branch protection to enforce this gate.
+# main PRs: UAT approval required (uat→main promotions).
 
 on:
   pull_request_review:
     types: [submitted, dismissed]
   pull_request:
-    branches: [main]
+    branches: [uat, main]
     types: [opened, reopened, synchronize]
 
 jobs:
-  dual-approval:
+  promotion-gate:
     uses: privilegedescalation/.github/.github/workflows/dual-approval-check.yaml@main
     secrets: inherit
     with: