gamertan
6df87bc958
Publish the exact sanitized Agent Skill and VS Code preview source tree with independent license boundaries, deterministic provenance manifests, and no private development history. Material design and implementation assistance was provided by OpenAI Codex. Signed-off-by: Cole Speelman <crspeelman@gmail.com>
27 lines
1.1 KiB
Markdown
27 lines
1.1 KiB
Markdown
<!-- SPDX-License-Identifier: AGPL-3.0-only -->
|
|
|
|
# Release policy
|
|
|
|
## Skill
|
|
|
|
`skill/v0.1.0` is a signed annotated tag from the reviewed canonical public
|
|
commit. Its release contains the deterministic skill ZIP and SHA-256. The ZIP
|
|
contains only the five exact files beneath `skills/sandwich-hime` and retains
|
|
the 0BSD license.
|
|
|
|
## VS Code preview
|
|
|
|
`vscode/v0.1.0-preview.1` is a signed annotated tag from the reviewed canonical
|
|
public commit. Its Gitea prerelease contains the exact VSIX, detached signature,
|
|
SHA-256, CycloneDX SBOM, and license/audit evidence. It requires compiler
|
|
`v1.0.0-beta.2`; it is not published to Visual Studio Marketplace or Open VSX.
|
|
|
|
The first registry release is manual and may occur only after classroom and
|
|
community feedback covers installation, live diagnostics, component
|
|
completion/definition, workspace trust, and process cleanup. The exact same
|
|
VSIX bytes become `vscode/v0.1.0`. Stop for an ownership decision if publisher
|
|
`gamertan` is unavailable.
|
|
|
|
Tags and assets are immutable. Credentials never enter source, Git history,
|
|
logs, packages, SBOMs, or release manifests.
|