# Release Checklist

## Version

- [ ] Version number updated.
- [ ] Changelog updated.
- [ ] README regenerated if blueprint files changed.

## Quality

- [ ] Working tree is clean.
- [ ] Lightweight local validation passes without installing dependencies or creating build artifacts.
- [ ] Lint/type checks pass on a Gitea Ubuntu runner.
- [ ] Tests pass on a Gitea Ubuntu runner or missing tests are documented.
- [ ] Build succeeds in CI on `ubuntu-latest`, `ubuntu-24.04`, or `ubuntu-22.04`.
- [ ] No project build, test, audit, package, installer, dependency setup, or release command was run on the local machine.

## Security

- [ ] Security review is current.
- [ ] Dependency audit is clean or documented.
- [ ] No secrets are committed.
- [ ] Release artifacts do not contain local config files.

## Artifacts

- [ ] Artifacts are uploaded.
- [ ] User-facing artifacts exclude Codex kit metadata such as `AGENTS.md`, `.codex/`, `blueprint.md`, `blueprint.json`, template workflows, and agent handoff notes unless explicitly requested.
- [ ] Download links work.
- [ ] Package registry links work if used.
- [ ] Installer/portable/archive naming is clear.

## Release

- [ ] Git tag created.
- [ ] Release notes written.
- [ ] Release published from Gitea Actions or through the Gitea API, not by running local release tooling.
- [ ] Post-release download smoke test completed.