From 82f59c140682d435cdba034b1cd4b14220a03479 Mon Sep 17 00:00:00 2001
From: Rob Taylor <rob.taylor@chipflow.io>
Date: Sat, 14 Feb 2026 21:37:19 +0000
Subject: [PATCH] Route submit job through GitHub environments for
 staging/production isolation

The submit job now uses the ENVIRONMENT input (defaulting to staging) to
pick up environment-specific CHIPFLOW_API_ORIGIN and CHIPFLOW_API_KEY,
preventing staging builds from hitting the production API and vice versa.

Co-developed-by: Claude Code v2.1.42 (claude-opus-4-6)
---
 .github/workflows/main.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index 9814726..bc64ac5 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -33,6 +33,7 @@ jobs:
 
   submit:
     runs-on: ubuntu-latest
+    environment: ${{ inputs.ENVIRONMENT || 'staging' }}
     strategy:
       matrix:
         design: ['mcu_soc', 'minimal']