Cut Release Tag

Use the release scripts only. Do not run raw git tag, git push, gh api, or version-bump commands by hand for the normal release flow.

The release is one annotated semver tag on an already-merged origin/main commit. The GitHub workflow moves latest; release admins promote lkg manually after validation.

Hard Rules

• Tag only the commit captured in a generated release plan.
• Ask the maintainer to paste the exact confirmation phrase from the plan before cutting the tag.
• Push only the semver tag (vX.Y.Z) from the agent-controlled step.
• Never push latest or lkg from this skill.
• Never move, delete, or force-push an existing remote semver tag unless the maintainer explicitly starts protected-tag remediation.
• Draft release notes locally. Do not create the GitHub Discussion; the maintainer does that.

Workflow