From 3fbdc8ef62fbff7ad94441771a9a65faecc18bbd Mon Sep 17 00:00:00 2001
From: Oliver Kieselbach <oliver.kieselbach@outlook.com>
Date: Thu, 13 Aug 2026 09:44:40 +0200
Subject: [PATCH] build: freeze .NET builds at zero warnings
 (warnings-as-errors)

Repo-wide Directory.Build.props: TreatWarningsAsErrors +
MSBuildTreatWarningsAsErrors. Applies to compiler, MSBuild and NuGet
restore warnings including audit advisories (NU1901-NU1904) - a newly
published CVE fails the build until addressed (fail-closed).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 Directory.Build.props | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 Directory.Build.props

diff --git a/Directory.Build.props b/Directory.Build.props
new file mode 100644
index 00000000..41fe96ac
--- /dev/null
+++ b/Directory.Build.props
@@ -0,0 +1,11 @@
+<Project>
+  <!-- Warning freeze (2026-08-13, backlog cleared to zero): every .NET build in this repo
+       must stay warning-free. Compiler, MSBuild and NuGet restore warnings are all fatal.
+       Deliberately includes NuGet audit advisories (NU1901-NU1904): a newly published CVE
+       against a referenced package fails the build until it is bumped or mitigated
+       (fail-closed, same philosophy as the ops alert chain). -->
+  <PropertyGroup>
+    <TreatWarningsAsErrors>true</TreatWarningsAsErrors>
+    <MSBuildTreatWarningsAsErrors>true</MSBuildTreatWarningsAsErrors>
+  </PropertyGroup>
+</Project>