# Publishing checklist

Before uploading a release:

1. Build from this clean directory, never from a private Agila source tree.
2. Confirm no `.DS_Store`, `__MACOSX`, binaries, keys, tokens, certificates, or server addresses are present.
3. Confirm every file belongs to either the restricted SDK or the `open/` component set.
4. Do not add private headers, private ABI names, internal roadmaps, or implementation notes.
5. Tag the release and publish its SHA-256 checksum.