fix: stabilize rlm-core CI workflows

Author: rand

.github/workflows/rlm-core-coverage.yml

@@ -31,6 +31,19 @@ jobs:
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@stable
 
+      - name: Install Python toolchain
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Bootstrap REPL Python environment
+        shell: bash
+        run: |
+          set -euo pipefail
+          python -m venv rlm-core/python/.venv
+          rlm-core/python/.venv/bin/python -m pip install --upgrade pip
+          rlm-core/python/.venv/bin/python -m pip install -e rlm-core/python
+
       - name: Install cargo-llvm-cov
         uses: taiki-e/install-action@cargo-llvm-cov
 

.github/workflows/rlm-core-feature-matrix.yml

@@ -60,8 +60,14 @@ jobs:
         run: |
           set -euo pipefail
           echo "Running ${{ matrix.vg_id }} (${{ matrix.label }})"
+          lock_arg=""
+          if [[ -f Cargo.lock ]]; then
+            lock_arg="--locked"
+          else
+            echo "Cargo.lock not present in rlm-core; running without --locked"
+          fi
           if [[ -n "${{ matrix.cargo_args }}" ]]; then
-            cargo check --locked ${{ matrix.cargo_args }}
+            cargo check ${lock_arg} ${{ matrix.cargo_args }}
           else
-            cargo check --locked
+            cargo check ${lock_arg}
           fi

docs/developer-guide/quality-gates.md

@@ -28,6 +28,7 @@ Runs:
 Notes:
 - If `cargo-llvm-cov` is missing locally, the script exits with actionable install guidance.
 - GitHub Actions workflow `rlm-core-coverage.yml` is the canonical enforcement path.
+- Coverage CI bootstraps `rlm-core/python/.venv` and installs `rlm-core/python` so REPL-backed Rust tests run with deterministic Python dependencies.
 
 ### Layer 2.5: API docs contract