- Own repository-hosted automation and GitHub presentation assets.
REPOSITORY_METADATA.mdrecords the intended GitHub About settings.- GitHub Actions configuration, future issue templates, and repository presentation resources belong here.
- Workflows use least-privilege permissions and immutable, explicit release gates.
- Production publication requires an explicit manual workflow dispatch from a version-matched annotated tag. Automation
must run the complete release gate before staging a hidden release draft, then use the protected
pypienvironment and OIDC trusted publishing for the exact checked artifacts. The release becomes public only after PyPI verification; pushes and tags alone must not publish. - README presentation assets use plain developer language and emphasize runtime installation and multiversion imports.
- Keep hosted automation aligned with the supported Python, platform, architecture, and uv matrices in
pyproject.tomland the public docs.
- Validate workflow YAML and exercise equivalent local commands before changing a gate.
workflows/AGENTS.md— CI, TestPyPI, and PyPI workflows.