# AGENTS.md

`ink-releases` is the public, source-free distribution boundary for private Ink repositories.

## Authority

- `SPEC.md` is the sole current-state authority; generated artifacts and private source repositories are evidence, not parallel canon.
- Read applicable records and update `SPEC.md` before changing durable installer, publication, integrity, or platform behavior.
- Keep strict Redgate proof current. `req:` is traceability; only accepted local `test` edges satisfy coverage. Exceptions expose debt and do not make strict checks pass.

## Boundaries

- Never copy private source, credentials, deploy keys, policy, profiles, or configuration here.
- `ink` publication owns only `install.sh`, `channels/*/ink`, and `releases/*/ink`.
- `ink-toolset` publication owns only `channels/*/toolset` and `releases/*/toolset`.
- Published executables are individual static x86_64 Linux-musl assets; do not add bundles.
- Installation writes executable files only. Never edit PATH, shell configuration, policy, or credentials.

## Work tracking

Work is tracked in Gitea Issues for `tmk241/ink-releases`. Do not mirror issues into local files. Do not create, close, or relabel issues without explicit user authority.

## Verification

```sh
bash -n install.sh
uv run test/installer_e2e.py
bash test/repository_e2e.sh
redgate list
redgate refs
redgate lint
redgate check
```

Final reports must name updated record IDs or exactly `SPECIFICATION IMPACT: none - <specific reason>`.