[Pavilion-devs]

What this ships

• opens GitHub authentication to any judge while keeping unknown users read-only
• splits the public product/docs surface from the authenticated console at app.glassboxhq.xyz
• adds a one-command, real seven-tool MCP verification path with fresh deterministic evidence
• documents judge access, architecture, demo, and both upstream DataHub contributions
• removes private planning files from the public repository while retaining them locally via .gitignore
• refreshes deterministic release evidence and production-edge tests

Verification

• 748/748 Python tests
• Ruff format + lint clean
• mypy clean
• console lint, typecheck, 6/6 tests, and production build clean
• repository preflight clean
• reproducible wheel/sdist and upstream packet verification clean
• deployed release archive hash matched commit e63a23f3edaab320430344348108f76eb0edb940

Judge quick test

uv run --extra mcp python -m examples.judge_mcp_quick_test

This creates fresh deterministic evidence and calls all seven GlassBox MCP tools against the actual MCP server; it does not replay a saved transcript or contact external DataHub services.