# Branch protection (configure in Gitea UI)

Apply these rules to **main** and **develop**:

- [ ] Require pull request before merging
- [ ] Required approvals: 1
- [ ] Require status checks: `test`
- [ ] Require branches to be up to date before merging
- [ ] Include administrators
- [ ] Prevent force push
- [ ] Prevent deletion

Repository secrets required for CI:

- `PACKAGE_TOKEN` — registry push
- `GITEA_TOKEN` — releases and wiki sync