Publishing checklist

Before uploading a release:

Build from this clean directory, never from a private Agila source tree.
Confirm no .DS_Store, __MACOSX, binaries, keys, tokens, certificates, or server addresses are present.
Confirm every file belongs to either the restricted SDK or the open/ component set.
Do not add private headers, private ABI names, internal roadmaps, or implementation notes.
Tag the release and publish its SHA-256 checksum.