[dustinbyrne]

Summary

OpenSpec CI currently validates canonical specifications but allows unfinished change proposals to pass. Repository policy requires changes to be applied and archived in the same PR before merging.

• Add an independent Require archived changes job to the OpenSpec workflow.
• Fail when openspec/changes/ contains a directory other than archive/, and list the unarchived changes in the log.
• Preserve the existing workflow triggers, permissions and canonical-spec validation.

This is CI-only; no SDK behavior or release metadata changes. Configure the new check as required in branch protection to enforce it at merge time.

Validation

• Workflow YAML parses successfully.
• Bash syntax check passes.
• Executed the exact inline check against five directory-tree scenarios: archived history passes; one or multiple active changes fail; current main passes; the proposal-only tree from docs(flags): specify SDK-sent $experiment_exposure for config version 2 flags #162 fails and names its active change.
• git diff --check passes.
• Independent read-only review found no issues.

[ioannisj]

🤖 An AI agent wrote this on behalf of @ioannisj.

The find check itself looks right to me, my only concern is how it gets enforced. As it stands it can't become a required check without blocking every PR outside openspec/**, so I think it needs to move out of the path-filtered workflow first.