---
# verify.yaml — Deploy Goss, run baseline assertions, fetch TAP results.
# Exit code mirrors Goss: 0 = all pass, non-zero = failures.
#
# Usage:
#   ansible-playbook ansible/playbooks/verify.yaml -u admin
#   make verify

- hosts: all
  become: true
  gather_facts: true
  # Same declaration the bootstrap play converges from. Without this the
  # firewall assertions render empty and silently assert nothing.
  vars_files:
    - ../inventory/group_vars/all.yaml
  roles:
    - role: goss