audit-build-ci

name	audit-build-ci
description	Audit build and CI configuration for correctness risks
context	fork
agent	auditor
disable-model-invocation	true

Audit the build and CI configuration for subtle correctness risks.

Read the build files and CI workflows before analyzing:

• build.gradle.kts (root and caffeine module)
• gradle/plugins/ (custom Gradle plugins)
• .github/workflows/ (GitHub Actions)
• gradle.properties

Consider:

• Misconfigured dependency scopes
• Incorrect test isolation
• Non-reproducible builds
• Incorrect Gradle cache configuration
• Missing failure modes (tests passing when they shouldn't)
• Incorrect CI matrix coverage
• Silent test skipping
• Multi-line YAML values that get interpolated elsewhere (a > folded scalar keeps a trailing newline; splicing one into another folded scalar embeds that newline mid-string, so a consumer splitting on literal spaces mis-parses the spliced-in value's last token)
• Performance problems in the build
• Security issues (dependency vulnerabilities, secret exposure)
• Bad practices that could cause false confidence

Report only issues that could cause incorrect artifacts, missing failures, or false confidence in test results.