Establish public verified release boundary

README.md

@@ -1,3 +1,37 @@
-# ink-releases
+# Ink Releases
 
-Public verified static release assets for Ink and Ink Toolset
+Public, source-free distribution for private `ink` and `ink-toolset` repositories.
+
+## Install
+
+Inspect the installer, then run it. A noninteractive invocation installs Ink
+only. With a terminal it offers a compact native set menu.
+
+```sh
+curl -fsSL https://git.tmk241.com/tmk241/ink-releases/raw/branch/main/install.sh | less
+curl -fsSL https://git.tmk241.com/tmk241/ink-releases/raw/branch/main/install.sh | sh
+curl -fsSL https://git.tmk241.com/tmk241/ink-releases/raw/branch/main/install.sh | sh -s -- --set text --set web -y
+```
+
+The installer verifies SHA-256 before installing. It writes executable files
+under `~/.ink/bin` only and never edits PATH, shell configuration, Ink policy,
+or credentials.
+
+## Layout
+
+```text
+install.sh
+channels/main/ink/
+channels/main/toolset/
+releases/VERSION/ink/
+releases/VERSION/toolset/
+```
+
+Each executable is an individual static x86_64 Linux-musl asset. There are no
+bundles: selecting one tool downloads one tool.
+
+## Provenance
+
+The private source workflows build, test, inspect, run on Void Linux musl, and
+then publish only artifacts, checksums, and manifests. Each source owns its own
+subtree. This repository contains no private source or publisher credential.