057-release-delivery

Releasing this repository's binaries is repository delivery: cargo-dist archives, installers, SBOM and build provenance

Lifecycle approvedImplementation completeVerification unknownQualification unknown

Specifies how this repository delivers its own binaries, under the F-02 narrowing of 2026-10-20: a tag the owner pushes builds macOS and Linux archives for aarch64 and x86_64 with cargo-dist at an exact version, a shell installer and a Homebrew formula, a CycloneDX SBOM per archive that refuses to ship empty, and a keyless build-provenance attestation per archive. It adds no verb, and no verb in this corpus publishes. The binary's name, the Homebrew tap and the version scheme are the owner's decisions.

Read the full pinned specification ↗

Relationships

depends on

amends

006-command-surface

Claimed units

establishes

{
  "kind": "file",
  "path": "scripts/release/check-config.sh"
}

establishes

{
  "kind": "file",
  "path": "scripts/release/install-dist.sh"
}

establishes

{
  "kind": "file",
  "path": "scripts/release/harden-installer.sh"
}

establishes

{
  "kind": "file",
  "path": "scripts/release/verify-set.sh"
}

Source headings

057: Release delivery
1. Purpose
2. Territory
3. Behavior
3.1 What starts a release
3.2 The archives
3.3 Installers
3.4 SBOM and provenance
3.5 What is not published
4. Out of scope
5. Resolved decisions
Verification

Frozen anchors

No frozen anchors declared.