Organize prime and dice code into dedicated suite

.github/workflows/aes-sec-001-governance.yml

@@ -12,7 +12,39 @@ permissions:
 
 jobs:
   governance:
-    uses: dlworrell/AEMS/.github/workflows/aes-sec-001-distributed.yml@main
-    with:
-      include_dangerous_primitives: true
-      strict: true
+    runs-on: ubuntu-24.04
+    steps:
+      - name: Check out governed repository
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.x"
+
+      - name: Install Clang-Tidy
+        run: |
+          sudo apt-get update
+          sudo apt-get install --yes clang-tidy
+
+      # The prime/C++ codebase owns this policy. Keeping its configuration in
+      # the suite preserves the repository contract that README.md is the only
+      # loose file at the root while retaining the same governance validation.
+      - name: Validate prime-suite Clang-Tidy policy
+        run: clang-tidy --verify-config --config-file=prime-number-suite/.clang-tidy
+
+      - name: Run distributed AES-SEC-001 governance scan
+        uses: dlworrell/AEMS/.github/actions/aes-sec-001@main
+        with:
+          include-dangerous-primitives: true
+          strict: true
+          strict-review-ratchet: true
+
+      - name: Upload governance evidence
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: aes-sec-001-governance-${{ github.run_id }}
+          path: build/aems/aes-sec-001/
+          if-no-files-found: error
+          retention-days: 30

.github/workflows/prime-number-suite.yml

@@ -0,0 +1,64 @@
+name: Prime Number Suite
+
+on:
+  workflow_dispatch:
+  push:
+    paths:
+      - "prime-number-suite/**"
+      - ".github/workflows/prime-number-suite.yml"
+      - "README.md"
+  pull_request:
+    paths:
+      - "prime-number-suite/**"
+      - ".github/workflows/prime-number-suite.yml"
+      - "README.md"
+
+permissions:
+  contents: read
+
+concurrency:
+  group: prime-number-suite-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  portable-build-and-test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out Code Noodling
+        uses: actions/checkout@v4
+
+      - name: Configure portable targets
+        run: >-
+          cmake
+          -S prime-number-suite
+          -B prime-number-suite/build
+          -DCMAKE_BUILD_TYPE=Debug
+          -DCMAKE_C_FLAGS=-Werror
+          -DCMAKE_CXX_FLAGS=-Werror
+          -DBUILD_CUDA_SIEVE_MGPU=OFF
+          -DBUILD_PHYSX_DICE=OFF
+
+      - name: Build portable targets
+        run: cmake --build prime-number-suite/build --parallel
+
+      - name: Run integration tests
+        run: ctest --test-dir prime-number-suite/build --output-on-failure
+
+      - name: Check Maya prototype syntax
+        run: python -m py_compile prime-number-suite/dice/maya_dice.py
+
+      - name: Configure sanitizer build
+        run: >-
+          cmake
+          -S prime-number-suite
+          -B prime-number-suite/build-sanitized
+          -DCMAKE_BUILD_TYPE=Debug
+          -DCMAKE_C_FLAGS=-fsanitize=address,undefined
+          -DCMAKE_CXX_FLAGS=-fsanitize=address,undefined
+          -DBUILD_CUDA_SIEVE_MGPU=OFF
+          -DBUILD_PHYSX_DICE=OFF
+
+      - name: Build and test with sanitizers
+        run: |
+          cmake --build prime-number-suite/build-sanitized --parallel
+          ctest --test-dir prime-number-suite/build-sanitized --output-on-failure