Minimum release posture
Contracts must already exist or be easy to state precisely.
Public proof needs to be inspectable outside the repo owner's claims.
Docs, release flow, and ownership need to be synchronized.
The surface must make the control-plane story clearer, not noisier.