Publishing Policy | PermeantOS

Understand the current no-publishing gate for GitHub Releases, signed assets, crates.io, and Python packages.

PermeantOS is currently in pre-publication mode. The project can build and validate release artifacts, but it does not yet create GitHub Releases, sign assets, publish crates, publish Python packages, or upload package-registry artifacts.

Current policy schema: permeantos-publishing-policy-v0.

What Is Allowed Now

Build checksummed binary archives.
Validate release artifacts and changelog state.
Upload GitHub Actions workflow artifacts.
Verify package metadata while keeping publishing disabled.
Create lightweight roadmap tags after changelog promotion.

What Is Still Gated

GitHub Release creation.
Signed release assets.
cargo publish.
twine upload.
Container or package-registry publication.
Publishing credentials outside the intended secret store.

Opening The Gate

A future real-release PR must document ownership, credentials, signing format, verification instructions, rollback ownership, and registry publish order before any publishing command is enabled.

The source-of-truth policy is docs/publishing-policy.md.