Releasing a New Version

Operator contract: docs/guides/active/releasing.md. Enforcement lives in scripts/ and BUMP=minor make release (or RELEASE_VERSION=vX.Y.Z make release for an explicit version). Prefer the one-shot command over replaying this checklist by hand.

Prerequisites

• Go matching go.mod
• Clean working tree; main identical to live origin/main
• Tests and Go CI green on the commit you will tag (tests and lint) — check-release-state.sh now checks this itself via gh run list --workflow=go-ci.yml and fails closed if it's red/running/missing, so you don't have to remember to look
• GitHub CLI authenticated with push access to marcus/homebrew-tap
• No replace directives in go.mod
• HOMEBREW_TAP_TOKEN secret present in the GitHub repo (CI tap job)