Banking Backend, one use case at a time

The trigger

Every push to main, every pull request, and a manual dispatch. Both jobs start together, each on its own ubuntu-latest.

Checkout and JDK

The checkout brings the full history, which Sonar uses for blame. Java 21 from Temurin, with Maven's cache.

The harness, checked

A separate job, in parallel. doctor gate fails the build when a gated line fails: the 15 boundary rules, the sweep of every source file for forbidden imports, the extension schema, the hook jar built from the current ArchHook.java, and the hook registrations. Lines that depend on the runner, such as CLAUDE_PROJECT_DIR, show up but never gate.

  Boundaries ........ ✅ 15 active rules  Boundary violations . ✅ 203 file(s) swept against 15 rule(s)  Schema ............ ✅ all extension files pass  Hook jar .......... ✅ built from the current .claude/hooks/ArchHook.java  Hooks ............. ✅ 28 registration(s) across 12 event(s)✅ doctor gate: no gated line failed (Boundaries, Boundary violations, Schema, Hook jar, Hooks, MCP, Audit overrides).

Code rules, before compiling

At validate, Checkstyle reads src/main against config/checkstyle/checkstyle.xml, the mechanical half of rules/code-quality.md: length, parameters, complexity, nesting, magic numbers. One violation fails the build.

[INFO] You have 0 Checkstyle violations.

Compile

Production and test code compiled with Java 21. The JaCoCo agent is already attached, to measure coverage of the tests that follow.

Unit tests

287 tests, with no database and no broker. Among them, ArchitectureTest, with 21 ArchUnit rules.

[INFO] Tests run: 21, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 2.496 s -- in dev.nerviz.bankapp.ArchitectureTest[INFO] Tests run: 287, Failures: 0, Errors: 0, Skipped: 0

Integration tests, on real infrastructure

80 tests against real containers started by Testcontainers: postgres:16-alpine and apache/kafka:4.1.0. The GitHub runner has Docker, so none are skipped.

Creating container for image: postgres:16-alpineCreating container for image: apache/kafka:4.1.0[INFO] Tests run: 80, Failures: 0, Errors: 0, Skipped: 0

Formatting

Spotless checks src/main and src/test with palantir-java-format and fails on an unused import. It catches a file written outside the format hook.

[INFO] Spotless.Java is keeping 202 files clean - 0 needs changes to be clean, 202 were already clean, 0 were skipped because caching determined they were already clean

Rules for the tests

src/test against checkstyle-test.xml, a rule set of its own for test code. This is the check that left three runs red on 2026-10-12, with two violations that a28934c fixed.

[INFO] You have 0 Checkstyle violations.

Minimum coverage

JaCoCo requires 80% of lines and 70% of branches across the project, startup and configuration classes excluded. The numbers come from rules/testing.md and are never lowered to make the build pass.

[INFO] All coverage checks have been met.[INFO] BUILD SUCCESS

Did the integration tests really run?

A shell step reads failsafe-summary.xml. If *IT.java sources exist and no integration test ran, or any was skipped, the build fails: a skipped IT proves nothing.

✅ 80 integration test(s) ran, none skipped.

SonarQube Cloud analysis

After verify, with JaCoCo's report already there. It runs only when the SONAR_TOKEN secret exists, so a fork's pull request passes without it. The step uploads the analysis and does not wait for the quality gate: the result lives on SonarQube Cloud.

[INFO] ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=nerviz-ai_bank-app&branch=main