Prepare EMUAdvisor for public portfolio release

.github/workflows/ci.yml

@@ -12,10 +12,18 @@ jobs:
       - uses: actions/setup-python@v5
         with:
           python-version: "3.12"
-      - name: Install dependencies
+          cache: pip
+          cache-dependency-path: requirements-lock.txt
+      - name: Install pinned dependencies
         run: |
           python -m pip install --upgrade pip
-          python -m pip install -r requirements-dev.txt
+          python -m pip install -r requirements-lock.txt
+      - name: Publication guard
+        run: python tools/publication_guard.py
+      - name: Dependency audit
+        run: |
+          python -m pip install pip-audit
+          pip-audit -r requirements-lock.txt
       - name: Syntax scan
         run: |
           python - <<'PY'
@@ -43,21 +51,24 @@ jobs:
           python -m emu_advisor.evaluation eval_sets/v1_gold.jsonl
           python -m emu_advisor.evaluation eval_sets/v1_hard.jsonl
           python -m emu_advisor.evaluation eval_sets/emu_gold_seed.jsonl
-      - name: Review status check
-        run: python -m emu_advisor.eval_review status eval_sets/v1_gold.jsonl eval_sets/v1_hard.jsonl eval_sets/emu_gold_seed.jsonl
+      - name: Verified gold review status
+        run: python -m emu_advisor.eval_review status eval_sets/v1_gold.jsonl
+      - name: Auxiliary evaluation status
+        run: python -m emu_advisor.eval_review status eval_sets/v1_hard.jsonl eval_sets/emu_gold_seed.jsonl
 
   browser-smoke:
     runs-on: ubuntu-latest
-    continue-on-error: true
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v5
         with:
           python-version: "3.12"
-      - name: Install dependencies
+          cache: pip
+          cache-dependency-path: requirements-lock.txt
+      - name: Install pinned dependencies
         run: |
           python -m pip install --upgrade pip
-          python -m pip install -r requirements-dev.txt
-          python -m playwright install chromium
-      - name: Optional browser smoke
-        run: python tools/browser_smoke.py --start-server --skip-if-unavailable
+          python -m pip install -r requirements-lock.txt
+          python -m playwright install --with-deps chromium
+      - name: Browser smoke
+        run: python tools/browser_smoke.py --start-server

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ali Farrokhnejad
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

PUBLICATION.md

@@ -0,0 +1,28 @@
+# Publication Readiness
+
+EMUAdvisor may be published by the repository owner. The source code is released under the MIT License. The project remains independent research/software work and is not an official Eastern Mediterranean University administrative service.
+
+## Release checklist
+
+- [x] Publishing rights confirmed by the repository owner.
+- [x] MIT license added.
+- [x] `eval_sets/v1_gold.jsonl` has been reviewed and verified by the project author and university staff.
+- [x] Browser/admin authentication no longer accepts credentials from URL query parameters; protected requests use headers and the browser UI stores credentials only in tab-scoped session storage.
+- [x] `eval_sets/emu_gold_seed.jsonl` remains explicitly described as provisional unless it completes the same review process.
+- [x] Generated crawl, index, audit, review, and conversation artifacts remain outside the committed public-release workflow.
+- [x] Pinned Python dependencies and a dependency audit are part of CI.
+- [ ] Confirm no secrets or non-public university material exist in Git history before changing repository visibility.
+- [ ] Run the required GitHub Actions core and browser-smoke jobs successfully on the final publication branch.
+- [x] Keep the README disclaimer that this is independent research software, not an official EMU administrative service.
+
+## Evaluation terminology
+
+`eval_sets/v1_gold.jsonl` is the verified human-reviewed gold evaluation set. Its cases were reviewed by the project author and university staff. Public metrics reported for `v1_gold` should still be described as local evaluation results for this fixed corpus and implementation, not production-service guarantees or evidence of universal model quality.
+
+`eval_sets/v1_hard.jsonl` is a hard regression suite focused on difficult table, grouped-query, and refusal behavior. It is not presented as a second gold benchmark unless separately reviewed and documented as such.
+
+`eval_sets/emu_gold_seed.jsonl` remains a provisional seed set until its source bindings and labels complete the same review process. The historical filename is retained for compatibility; public documentation should call it a provisional evaluation seed rather than a verified gold benchmark.
+
+## Public-release principle
+
+The public repository should demonstrate retrieval, citation, refusal, evaluation, local-generation, and operational safeguards without implying institutional endorsement or production deployment. Claims should distinguish verified benchmark results from regression results, provisional evaluation material, and runtime/deployment limitations.