ci: enforce documented Gate 2 coverage floors

.github/workflows/ci.yml

@@ -328,8 +328,8 @@ jobs:
           fi
           "$TEST_ENV/bin/python" scripts/check_coverage_thresholds.py \
             "test-results/coverage-py${{ matrix.python-version }}.json" \
-            --min-line 70 \
-            --min-branch 55 \
+            --min-line 75 \
+            --min-branch 60 \
             --min-file obliteratus/device.py=70 \
             --min-file obliteratus/models/loader.py=70 \
             --min-file obliteratus/architecture_profiles.py=70 \

tests/test_ci_policy.py

@@ -2,6 +2,7 @@
 
 from __future__ import annotations
 
+import json
 import re
 from pathlib import Path
 
@@ -81,6 +82,16 @@ def test_ci_enforces_exact_base_module_regression_and_risk_mapping():
     assert "scripts/check_test_risk_map.py" in workflow
 
 
+def test_ci_repository_coverage_floors_match_quality_policy():
+    workflow = WORKFLOW.read_text(encoding="utf-8")
+    policy = json.loads(
+        (ROOT / "ci" / "test-quality-policy.json").read_text(encoding="utf-8"),
+    )
+
+    assert f"--min-line {policy['minimums']['repository_statement']:g}" in workflow
+    assert f"--min-branch {policy['minimums']['repository_branch']:g}" in workflow
+
+
 def test_ci_retains_normalized_test_and_quality_trends_for_ninety_days():
     workflow = WORKFLOW.read_text(encoding="utf-8")