docs: publish Tend Compose continuity evidence

Export the reviewed allowlisted snapshot from private source commit 07c1655921f21ee5e4fc4d85639d199e8867b17d. This records the Docker Compose activation, schema-compatible rollback, and stateful migration resource findings from Observatory Preview 19 dogfooding.

AI-Assisted: OpenAI Codex
Signed-off-by: Cole Speelman <crspeelman@gmail.com>

RELEASE.md

@@ -0,0 +1,50 @@
+# Preview release policy
+
+`v0.1.0-preview.2` may be published only after one identical candidate Tend
+binary has successfully completed maintenance releases for Gamertan and the
+Sandwich Hime website, including injected-failure restoration and explicit
+rollback proof. The August 14, 2026 campaign met that gate; the scoped,
+sanitized record is in `docs/DOGFOOD_EVIDENCE.md`.
+
+Before a preview tag:
+
+1. Run `./scripts/verify.sh` from a clean pushed private-development commit.
+2. Review dependency, license, race, filesystem, archive, and rollback evidence.
+3. Export the exact allowlisted public tree into a new root commit.
+4. Verify canonical Gitea and GitHub discovery trees are byte-identical.
+5. Sign the canonical Gitea tag and attach checksums and an SPDX SBOM.
+6. Verify a fresh public checkout before advertising installation.
+
+The release tag and attached candidate must be built from the final reviewed
+source commit. Documentation-only changes after the recorded campaign require
+one final identical-candidate maintenance pass before tagging.
+
+`v0.2.0-preview.1` is an immutable, additive release line. It requires schema 2,
+the restricted `push`/`receive` transport, root-owned environment-file
+references, host-wide activation serialization, and HTTPS public-origin smoke.
+Its exact released source remains unchanged.
+
+`v0.2.0-preview.2` adds bounded deployment-event JSONL, routed-origin
+activation continuity, rollback annotations, and the reviewed operational
+friction record. It must preserve every Preview 1 security and release gate.
+The exact same Preview 2 binary must deploy, roll back, and reactivate
+Gamertan, the Sandwich Hime website, and Gamertan Observatory before the tag is
+created. EQL is not part of this generic gate; its SQLite/catalog publication
+needs a dedicated adapter rather than arbitrary hooks.
+
+The operation-scoped lease compatibility candidate at private commit
+`789976ce766fd457ca10762540135e4e0e74cfe3` has completed the Gamertan and
+Sandwich Hime deployment, rollback, reactivation, and failure gates. It has not
+completed the Observatory gate because the live service now uses Docker
+Compose, outside the released strategy contract. Do not create the Preview 2
+tag from this candidate until that explicit topology decision is resolved.
+
+`v0.1.0-preview.1` is immutable but withdrawn: its source and module checksums
+are valid, while a fresh `go install` reports the development identity because
+the CLI did not yet adopt the tagged module version from Go build information.
+Preview 2 adds that identity path and its regression tests; preview 1 is never
+retagged or rewritten.
+
+The canonical public origin is `ssh://git@gitea.speelman.ca:2222/gamertan/tend.git`.
+GitHub is a read-only discovery snapshot. Private development history is not
+published or merged into either public history.