Publish the exact sanitized Agent Skill and VS Code preview source tree with independent license boundaries, deterministic provenance manifests, and no private development history. Material design and implementation assistance was provided by OpenAI Codex. Signed-off-by: Cole Speelman <crspeelman@gmail.com>
1.1 KiB
Release policy
Skill
skill/v0.1.0 is a signed annotated tag from the reviewed canonical public
commit. Its release contains the deterministic skill ZIP and SHA-256. The ZIP
contains only the five exact files beneath skills/sandwich-hime and retains
the 0BSD license.
VS Code preview
vscode/v0.1.0-preview.1 is a signed annotated tag from the reviewed canonical
public commit. Its Gitea prerelease contains the exact VSIX, detached signature,
SHA-256, CycloneDX SBOM, and license/audit evidence. It requires compiler
v1.0.0-beta.2; it is not published to Visual Studio Marketplace or Open VSX.
The first registry release is manual and may occur only after classroom and
community feedback covers installation, live diagnostics, component
completion/definition, workspace trust, and process cleanup. The exact same
VSIX bytes become vscode/v0.1.0. Stop for an ownership decision if publisher
gamertan is unavailable.
Tags and assets are immutable. Credentials never enter source, Git history, logs, packages, SBOMs, or release manifests.