# Public repository policy

This repository is a public release surface. Every reachable commit, branch,
tag, file, attachment, issue, pull request, and release note must be safe for
unrestricted public access.

Allowed material is limited to publication-ready software, data, metadata,
documentation, figures, reproducibility outputs, and release records.

Do not place private correspondence, assessment records, decision logs,
working notes, draft response material, credentials, local paths, or other
non-public project context in this repository.

Before every push, run `bash scripts/check_public_content.sh`. Install the
pre-push guard in every clone with `bash scripts/install_public_guard.sh`.

If non-public material enters a public ref, stop publication work immediately.
A later deletion does not make the prior object private. Replace the affected
public history or repository with a clean snapshot, then verify that the old
object URLs no longer resolve before publishing again.

Branch names, tags, commit messages, release titles, release notes, issue
titles, and pull-request titles follow the same rule as file contents.