# Release policy ## Skill `skill/v0.1.0` is a signed annotated tag from the reviewed canonical public commit. Its release contains the deterministic skill ZIP and SHA-256. The ZIP contains only the five exact files beneath `skills/sandwich-hime` and retains the 0BSD license. ## VS Code preview `vscode/v0.1.0-preview.1` is a signed annotated tag from the reviewed canonical public commit. Its Gitea prerelease contains the exact VSIX, detached signature, SHA-256, CycloneDX SBOM, and license/audit evidence. It requires compiler `v1.0.0-beta.2`; it is not published to Visual Studio Marketplace or Open VSX. The first registry release is manual and may occur only after classroom and community feedback covers installation, live diagnostics, component completion/definition, workspace trust, and process cleanup. The exact same VSIX bytes become `vscode/v0.1.0`. Stop for an ownership decision if publisher `gamertan` is unavailable. Tags and assets are immutable. Credentials never enter source, Git history, logs, packages, SBOMs, or release manifests.