Organization/repository admin task required before 0.3 publication: create protected release-testpypi and release-pypi GitHub environments with appropriate reviewers, register the exact trusted publishers in TestPyPI/PyPI for the release-publish.yml workflow and environments, protect v* tags, and perform the documented rehearsal. No long-lived publishing token should be added. The agent-built workflows validate source run, repository, commit, tag, artifacts, prerelease policy, and use OIDC.
Organization/repository admin task required before 0.3 publication: create protected release-testpypi and release-pypi GitHub environments with appropriate reviewers, register the exact trusted publishers in TestPyPI/PyPI for the release-publish.yml workflow and environments, protect v* tags, and perform the documented rehearsal. No long-lived publishing token should be added. The agent-built workflows validate source run, repository, commit, tag, artifacts, prerelease policy, and use OIDC.