soak
Installation
SKILL.md
The soak window
One rule: a release must be at least SOAK_DAYS old before this repo adopts it. The delay gives the ecosystem time to catch a malicious or yanked release before we ever install it. The window is defined exactly once — read the current value from scripts/soak/constants.mts and never hardcode it elsewhere. Every surface derives from or is parity-checked against it:
| Surface | Key | Units |
|---|---|---|
.cargo/config.toml |
global-min-publish-age |
"N days" |
tools/pnpm-workspace.yaml |
minimumReleaseAge |
minutes |
.npmrc |
min-release-age |
days |
tools/taze.config.mts |
maturityPeriod |
imports SOAK_DAYS |
external-tools.json |
soakBypass annotations |
days |
.github/renovate.json |
minimumReleaseAge (explicit — an extends: preset doesn't count) |
"N days" |