Rust Release

Rule

Validate before publishing and require explicit approval for irreversible operations.

Hard Stops

Stop before:

• Tagging, publishing to crates.io, pushing release pages, signing artifacts, uploading binaries, publishing containers, or using credentials.
• Releasing from a dirty tree or with failing validation unless explicitly approved.
• Adding release-plz, cargo-dist, signing, SBOM, or provenance automation without approval.
• Publishing public crates without checking SemVer and package contents.

Defaults