28 lines
1.1 KiB
Markdown
28 lines
1.1 KiB
Markdown
<!-- SPDX-License-Identifier: AGPL-3.0-only -->
|
|
|
|
# Release policy
|
|
|
|
## Skill
|
|
|
|
`skill/v0.1.0` is a signed annotated tag from the reviewed canonical public
|
|
commit. Its release contains the deterministic skill ZIP and SHA-256. The ZIP
|
|
contains only the five exact files beneath `skills/sandwich-hime` and retains
|
|
the 0BSD license.
|
|
|
|
## VS Code preview
|
|
|
|
`vscode/v0.1.0-preview.1` is a signed annotated tag from the reviewed canonical
|
|
public commit. Its Gitea prerelease contains the exact VSIX, detached signature,
|
|
SHA-256, CycloneDX SBOM, and license/audit evidence. It requires compiler
|
|
`v1.0.0-beta.2` or newer and has been verified against `v1.0.0-rc.1`; it is not
|
|
published to Visual Studio Marketplace or Open VSX.
|
|
|
|
The first registry release is manual and may occur only after classroom and
|
|
community feedback covers installation, live diagnostics, component
|
|
completion/definition, workspace trust, and process cleanup. The exact same
|
|
VSIX bytes become `vscode/v0.1.0`. Stop for an ownership decision if publisher
|
|
`gamertan` is unavailable.
|
|
|
|
Tags and assets are immutable. Credentials never enter source, Git history,
|
|
logs, packages, SBOMs, or release manifests.
|