Summary

• rename the manual/callable workflow to qa-profile-evidence.yml / QA Profile Evidence
• add a required qa_profile input so callers can generate evidence for any taxonomy-backed QA profile, with manual dispatch still defaulting to release
• rename the artifact and manifest to generic qa-profile-evidence-* names and expose qa_profile, artifact_name, target_sha, trusted_reason, and qa_evidence_path for reusable workflow consumers
• expose qa_exit_code and qa_passed so consumers can use uploaded evidence even when the QA profile records failed scenarios
• keep manual dispatch as a gate: manual runs still fail when the QA profile command exits non-zero; reusable callers can opt into that with fail_on_qa_failure: true
• validate the requested profile against the parsed QA scorecard taxonomy before running the private QA runtime

Verification

• go run github.com/rhysd/actionlint/cmd/[email protected] .github/workflows/qa-profile-evidence.yml
• git diff --check origin/main...HEAD
• .agents/skills/autoreview/scripts/autoreview --mode branch --base origin/main --parallel-tests "go run github.com/rhysd/actionlint/cmd/[email protected] .github/workflows/qa-profile-evidence.yml && git diff --check origin/main...HEAD"

Run follow-up

• Watched https://github.com/openclaw/openclaw/actions/runs/27989312235 after the previous workflow merged.
• The workflow infrastructure succeeded through ref validation, private QA runtime build, evidence validation, and artifact upload.
• The uploaded artifact is release-qa-profile-evidence-89de454f822cac98505651fe3ee8340a054f3e37 with artifact ID 7807415546.
• The run failed only after upload because the release QA profile returned exit code 1: 94 scenarios passed and 13 failed.
• This PR keeps that manual gate behavior, but makes reusable workflow consumers receive qa_exit_code / qa_passed outputs and a valid uploaded evidence artifact by default.