Standards and releases

Engineering standards live under engineering-standards/. They define the agent development process, architecture invariants, protected-path boundaries, templates, and verification expectations for non-trivial work.

For Steelmoth, INV-021 makes engineering standards the first required agent read and the system wiki the repo orientation layer after standards. AGENTS.md is the root Codex/coding-agent entrypoint, AGENT_DEV_PROCESS.md carries the same standards-first step in the role pipeline, and CODEX_PROMPT.md includes it for Codex handoffs.

Release artifacts live under docs/releases/. The release directory includes versioned SBOMs, scorecards, rollback manifests, audit outputs, and follow-up inventories. The checker scripts in scripts/ provide deterministic release gates for version consistency and follow-up hygiene.

When To Read

Read this page and its sources before:

• touching protected paths, secret boundaries, migrations, auth, deployment, or agent instruction files;
• doing non-trivial user-facing feature work that may need PRD/RFC artifacts;
• preparing or validating release artifacts;
• changing system wiki rules or pages that summarize standards.
• preparing a Codex or other AI-agent handoff prompt.

Maintenance Notes

• Update this page when engineering standards, protected path rules, or release artifact conventions change.
• Do not duplicate whole standards documents here; this page is an orientation map.
• When release checks fail, fix the release source artifacts before adjusting wiki summaries.

Known Unknowns

• This page does not assert that the current worktree is release-ready.