Verify the owner email before asserting email_verified #72

	name: Backend types drift check

	on:
	# All PRs, not path-filtered: the release/version-bump PR does not touch
	# backend/, so a path filter would skip exactly the PR that ships. Running
	# on every PR guarantees main is drift-free at each merge.
	pull_request:
	workflow_dispatch:

	jobs:
	drift-check:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout shard_core
	uses: actions/checkout@v4

	- name: Checkout freeshard-controller (source of truth)
	uses: actions/checkout@v4
	with:
	repository: FreeshardBase/freeshard-controller
	ref: main
	token: ${{ secrets.CONTROLLER_RO_TOKEN }}
	path: freeshard-controller

	- name: Install just
	uses: extractions/setup-just@v2

	- name: Resync vendored models from controller main
	run: \|
	just --set SOURCE_DIR \
	"freeshard-controller/freeshard-controller-backend/freeshard_controller/data_model" \
	get-types

	- name: Fail on drift
	run: \|
	if ! git diff --exit-code shard_core/data_model/backend; then
	echo "::error::shard_core/data_model/backend is out of sync with freeshard-controller main. Run 'just get-types' (with ../freeshard-controller checked out) and commit the result."
	exit 1
	fi

Navigation Menu