Skip to content

Record public release settings #3

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
davidf9999 merged 1 commit into from
Jul 22, 2026
Merged

Record public release settings #3

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 2 additions & 4 deletions SECURITY.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,10 +3,8 @@
## Reporting

Do not open a public issue for a suspected vulnerability or accidental private
data disclosure. Use GitHub private vulnerability reporting when it is enabled
for this repository. Until then, contact the repository owner privately through
their GitHub profile and include only the minimum information needed to arrange
a secure report.
data disclosure. Use GitHub private vulnerability reporting for this repository
and include only the minimum information needed for a secure report.

Ordinary validation bugs that do not expose private data or create a security
risk may be reported through GitHub Issues.
Expand Down
12 changes: 5 additions & 7 deletions STATUS.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,10 +8,10 @@ leave material plans only in chat history.

## Current state

- Repository visibility: private; the reviewed public developer-preview
candidate was merged into `main` through PR #1. The final privacy,
clean-clone, package, and documentation audit passed on 2026-07-22.
Visibility remains unchanged pending explicit publication authorization.
- Repository visibility: public since 2026-07-22. The reviewed developer-preview
candidate was merged through PR #1, and the final privacy, clean-clone,
package, and documentation audit passed before publication. GitHub private
vulnerability reporting and protected-branch CI are enabled.
- Package and CLI: `geometry-validated-layout` version `0.1.0`.
- Python import: `geometry_validated_layout`.
- Test baseline: 12 tests, with CI coverage for Python 3.10 through 3.14.
Expand Down Expand Up @@ -58,9 +58,7 @@ leave material plans only in chat history.

## Deferred publication work

- Change visibility only after explicit repository-owner authorization.
- After the visibility change, enable the public-repository security settings
and create the tagged GitHub prerelease described in
- Create the tagged `v0.1.0` GitHub prerelease described in
`docs/RELEASE_READINESS.md`.
- Optional later PyPI publication; the package name was unclaimed when checked
on 2026-07-22.
Expand Down
6 changes: 3 additions & 3 deletions docs/RELEASE_READINESS.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,13 +36,13 @@ privacy review.
- [x] Merge `release/public-preview` into `main` through reviewed PR #1.
- [x] Re-run the privacy, clean-clone, package, and documentation-link audit
against the merged `main` branch.
- [ ] Change repository visibility only after all preceding items pass.
- [x] Change repository visibility only after all preceding items pass.

## Immediately after visibility changes

- [ ] Enable GitHub private vulnerability reporting and verify the reporting
- [x] Enable GitHub private vulnerability reporting and verify the reporting
language in `SECURITY.md`.
- [ ] Protect `main` against force pushes and require the CI checks supported by
- [x] Protect `main` against force pushes and require the CI checks supported by
the repository plan.
- [ ] Create a `v0.1.0` GitHub prerelease with the developer-preview boundary
and known limitations from `STATUS.md`.
Expand Down