release-workflow
Skills Collection Release Workflow
Run the requested release stages with immutable source identity and observed verification facts. A local candidate, remote CI, installed source, publication and final attestation are distinct results.
Scope and authority
Resolve the repository, target version, requested stages and current baseline. For an existing tag audit use historical mode; a new release uses current mode. A fresh-install-only request does not authorize creating a tag or publishing.
Prepare and review the local candidate before asking for any missing publication authority. Before the first remote write, name the exact candidate, tag, package count and actions. Reuse already explicit authority within that scope; changed targets need a new decision. Never push, tag, publish, install globally or change Host configuration outside the authorized task.