task.md

Task Checklist

Planning

• Package, tests, configuration, deployment examples, docs, and Git metadata reviewed
• Security boundaries and release-sensitive data classes defined
• Public-release sanitization plan recorded
• No live Slack, scheduler, or private ledger action authorized or performed

Tests

• Outcome-based tests cover credentials, identity, pagination, completeness, storage, and redaction
• Public-release audit regression tests added before sanitization implementation
• Negative tests cover local profile paths, credential patterns, and non-example Slack identities
• Tests use temporary directories and fake network transports
• Expected public-release red state recorded

Implementation

• Runtime tenant/channel isolation retained through explicit validated configuration
• Synthetic examples replace tenant, channel, and user details
• Package/license attribution generalized
• Local paths and private operational evidence removed from docs
• Repeatable tracked-tree, history, and zipapp audit implemented
• No tests weakened and no gates bypassed

Verification

• Focused sanitization/config tests pass
• Full offline suite passes
• Python syntax compilation and import smoke pass
• Available lint/format/type gates pass or are marked unavailable
• Tracked tree, zipapp, Git metadata, and reachable history pass the audit
• Zipapp offline doctor and empty-ledger verification pass

Handoff

• One clean root commit remains with generic attribution
• Superseded local objects and reflogs are pruned
• Verification report contains sanitized evidence and remaining live gates
• Live Slack, schedule installation, publication, and push remain operator actions