feat(platform): checkpoint current implementation state

scripts/check-architecture-guardrails.mjs

@@ -1,8 +1,9 @@
 import { readFile } from "node:fs/promises";
 import path from "node:path";
 import process from "node:process";
+import { resolveRealWorkspaceRoot } from "./load-env.mjs";
 
-const rootDir = process.cwd();
+const rootDir = resolveRealWorkspaceRoot();
 
 const rules = [
   {
@@ -148,6 +149,21 @@ const rules = [
     ],
     forbidden: [],
   },
+  {
+    file: ".github/workflows/ci.yml",
+    required: [
+      {
+        pattern: /run:\s+pnpm db:generate/,
+        message: "CI must route Prisma client generation through the workspace env/schema wrapper",
+      },
+    ],
+    forbidden: [
+      {
+        pattern: /pnpm --filter @capakraken\/db exec prisma generate/,
+        message: "CI must not call prisma generate directly outside the workspace wrapper",
+      },
+    ],
+  },
   {
     file: "tooling/deploy/deploy-compose.sh",
     required: [