release git:20260901.484ab7dA

Immutable. This exact content is served forever at /api/v1/blob/4f9eeaa1110ed5f4.

---
name: release
description: Qualify and publish a mempalace-code release through the canonical runbook
disable-model-invocation: true
---

# Release

Use for `release`, `publish`, or `ship` after release preparation is complete.

## Canonical owner

Read `AGENTS.md` and `docs/RELEASING.md` in full. Execute that runbook in order.
Do not restate or improvise its branch, tag, admission, publication, or recovery
procedure here.

## Guards

- Bind qualification to one reviewed 40-hex candidate SHA.
- Run `autopilot doctor --json`; require `safe_to_edit=true` before local edits.
- Never invoke Codex, Claude, Gemini, another model/provider, or an authenticated
  client as a release check.
- Never read, copy, inspect, require, or transmit API keys, OAuth tokens,
  keychains, client auth files, paid-account state, or ambient credentials.
- Candidate push, `main` update, tag push, candidate deletion, commit, and every
  other remote mutation each require fresh explicit authority.
- Never force-push, move a published tag, bypass protection, or repair a remote
  ruleset from this skill.
- Stop on a dirty candidate, SHA drift, artifact mismatch, red gate, ambiguous
  partial publication, or missing authority. Preserve current state.

## Local qualification

Use the repository owners; do not add another gate:

```bash
python scripts/release_readiness_gate.py --check --candidate-sha "$CANDIDATE_SHA" --json
python scripts/release_preflight.py --tag "v$VERSION" --require-clean --expect-sha "$CANDIDATE_SHA"
```

The readiness gate must build and inspect the artifacts and exercise the exact
installed wheel without credentials. Hosted CI must report `release-required`
for the same SHA before the next authorized mutation.

## Output

Report:

- version and candidate SHA;
- local qualification result;
- hosted required-check result;
- artifact filenames and hashes;
- publication state: `not_started`, `partial`, or `complete`;
- the single next command, or the exact blocker.

Never call a partial publication complete. Use only the recovery command emitted
by `release_status_gate.py` for the observed state.