release

Release procedure

Status: proposed LMA-PROC-005 lifecycle procedure; the existing implementation publishes a mock fixture. Owner role: release owner. Input: accepted candidate revision, version and reviewed evidence inventory.

1. Apply the versioning and signature standards.
2. Complete verification for the exact candidate and inspect qualification gaps.
3. Follow the release fixture runbook for artifacts, signatures and channel scope.
4. Use the existing protected workflow for authorized publication. Bind the published artifacts to the reviewed evidence and record publication receipts.

The release workflow starts on a published GitHub release. The process pilot cannot authorize it. Product distribution channels and allocator qualification remain subject to the distribution SDD and OpenSSF plan.

Acceptance and records: reviewed candidate identity, complete required results, authorized signing/publication, artifact inventory and retrievable receipts. Consult governance for decision authority.