Prepare workspace release with licensed auth and router notices

.github/workflows/ci.yml

@@ -36,6 +36,7 @@ jobs:
         run: |
           python3 scripts/check-release-state.py
           scripts/check-release-manifest.sh
+          python3 scripts/test-router-notices.py
       - name: Check PR documentation impact
         if: github.event_name == 'pull_request'
         env:

.github/workflows/release.yml

@@ -69,8 +69,13 @@ jobs:
           RELEASE_ID: ${{ inputs.release_id }}
           INCLUDE_ROUTER: ${{ inputs.include_router_artifact }}
           ROUTER_APPROVAL: ${{ inputs.router_distribution_approval }}
+          GH_TOKEN: ${{ github.token }}
         run: |
           set -euo pipefail
+          # An environment name alone does not enforce human approval.
+          protection=$(gh api "repos/$GITHUB_REPOSITORY/environments/release" \
+            --jq '.protection_rules | any(.type == "required_reviewers" and any(.reviewers[]; .type == "User" and .reviewer.login == "Dastari"))')
+          test "$protection" = true
           git fetch origin main --tags --force
           test "$(git rev-parse HEAD)" = "${TARGET_REF}"
           test "$(git rev-parse HEAD)" = "$(git rev-parse origin/main)"
@@ -103,6 +108,7 @@ jobs:
           python3 scripts/generate-workspace-inventory.py --check
           python3 scripts/check-release-state.py
           scripts/check-release-manifest.sh
+          python3 scripts/test-router-notices.py
           scripts/check-workspace-dependencies.sh
           cargo fmt --all -- --check
 
@@ -393,17 +399,28 @@ jobs:
             --manifest-path crates/graphql-orm-router/Cargo.toml \
             --format json \
             --spec-version 1.5 \
-            --features auth-agql
+            --features auth-agql \
+            --target x86_64-unknown-linux-gnu
           install -m 0755 target/release/graphql-orm-router release-dist/graphql-orm-router
           cp crates/graphql-orm-router/graphql-orm-router.cdx.json \
             release-dist/graphql-orm-router.cdx.json
+          cargo metadata --format-version 1 --locked \
+            --filter-platform x86_64-unknown-linux-gnu \
+            --features graphql-orm-router/auth-agql > release-dist/router-metadata.json
+          python3 scripts/generate-router-notices.py \
+            --metadata release-dist/router-metadata.json \
+            --sbom release-dist/graphql-orm-router.cdx.json \
+            --output release-dist/router-notices \
+            --rust-sysroot "$(rustc --print sysroot)"
+          rm release-dist/router-metadata.json
           cp LICENSE release-dist/LICENSE
           printf '%s\n' "${ROUTER_APPROVAL}" > release-dist/router-distribution-approval.txt
           tar -C release-dist --sort=name --mtime="@${SOURCE_DATE_EPOCH}" \
             --owner=0 --group=0 --numeric-owner \
             -czf "release-dist/${RELEASE_ID}-graphql-orm-router-x86_64-unknown-linux-gnu.tar.gz" \
             graphql-orm-router graphql-orm-router.cdx.json LICENSE \
-            router-distribution-approval.txt
+            router-distribution-approval.txt router-notices
+          rm -r -- release-dist/router-notices
           rm release-dist/graphql-orm-router release-dist/graphql-orm-router.cdx.json \
             release-dist/LICENSE release-dist/router-distribution-approval.txt
       - name: Create checksums

AGENTS.md

@@ -19,8 +19,9 @@ under a crate add package-local invariants.
   `graphql-orm-operation-catalog`, `graphql-orm-storage`,
   `graphql-orm-backup`, `graphql-orm-ai-tool-profiles`, `graphql-orm-ai`,
   `graphql-orm-router-protocol`, and `graphql-orm-router`.
-- `agql-auth` remains an external exact-revision dependency. Do not modify its
-  repository unless the task explicitly includes it.
+- `agql-auth` remains external. Adopt a reviewed full revision or a published
+  version release tag whose full locked commit is retained in the release manifest.
+  Do not modify its repository unless the task explicitly includes it.
 - Keep the packages independently consumable. Do not turn AI, backup, or
   storage into features or optional dependencies of the core ORM crate.
 - Preserve this acyclic dependency direction: