V1 Release Prep
Final preparation for publishing `anatomia-cli@1.0.0` to npm. Package metadata, release workflow, community files, repo cleanup, version bump. This is the third of three V1 scopes — docs and code changes must be merged first. After this scope ships and merges, the publish ceremony is: tag, push, verify.
verdict PASSscore 33 / 33findings 4 (0 risk · 2 debt · 2 obs)duration 1h 36mrejection cycles 0shipped May 3, 2026surface cli
Pipeline timeline
Intent to proven code in 1h 36m across Think, Plan, Build, and Verify.
Think1m
Plan7m
Build81m
Verify7m
Assertion ledger
33 claims, each independently verified. Showing 8 — show all →
| ID | Says | Matcher | |
|---|---|---|---|
| A001 | Package version is set to 1.0.0 for the first public release | verified | ok |
| A002 | Package description tells strangers what the tool does | verified | ok |
| A003 | Keywords include terms that differentiate Anatomia in npm search | verified | ok |
| A004 | Keywords include proof-chain as a unique Anatomia term | verified | ok |
| A005 | The generic ai-assistant keyword is removed | verified | ok |
| A006 | Package homepage points to the product website | verified | ok |
| A007 | Author includes the company URL for npm display | verified | ok |
| A008 | Only compiled code ships to npm users | verified | ok |
Findings 4 total
obspackages/cli/package.json→ closed
npm pack dry-run doesn't include README.md or CHANGELOG.md — prepublishOnly required first
debtpackage.json→ closed
Release script 'cd packages/cli && npm version' requires a semver argument — no guard or help text
debt.github/workflows/release.yml→ closed
release.yml copies README/CHANGELOG separately from prepublishOnly — two sources of truth for doc copying
obs→ closed
No dedicated tests for v1-release-prep contract — assertions verified by source inspection only
Integrity seal
scopesha256:dbb4d22085db7...
contractsha256:74b1e3043bda3...
plansha256:4f57f958e93b9...
specsha256:109df2916a743...
build-reportsha256:7c3af181dd461...
build-datasha256:6e009836742f4...
verify-reportsha256:4bba45ccd8759...
verify-datasha256:9b797df5c41ec...
audit cmd$ ana proof audit v1-release-prep → all hashes match