This checklist governs releases of this specification repository. It does not publish an implementation package and does not substitute for implementation or adapter conformance evidence.
The repository release maintainer with repository-admin authority is responsible for completing this checklist and preserving the release controls it requires.
- Choose an exact reviewed commit on the appropriate branch and record its
full commit ID. Stable tags use the convention
vX.Y.Z. - Keep maintenance releases on their maintained release branch. Merge the
equivalent corrective change to
mainseparately when it is also needed by the next minor release; do not make a maintenance tag point at unrelated unreleasedmainwork. - Run the repository validation at that exact commit and confirm the required CI run for that commit is successful. A green run for a nearby commit is not sufficient.
- Gate a specification release on its normative artifacts, review, versioning, repository validation, and exact-commit CI. Adapter conformance and service-matrix evidence are downstream: they gate only an implementation's support or conformance claims and package releases against the exact specification commit and, once published, its release identifier. They do not gate specification publication.
- Confirm the changelog, versioning impact, and release notes describe only the included specification changes.
- Create and push
vX.Y.Zonly after the exact release commit has passed CI. Use the selected signed annotated-tag path where signing is available, or the selected protected-tag path restricted to release maintainers. Do not move or reuse a published tag. - Wait for the CI run in that exact tag context to succeed before creating or publishing the immutable GitHub release; a branch-commit CI result is not a substitute for the tag-context result.
- Create the GitHub release as a draft from that exact tag and verify the tag target, title, notes, links, and any release assets before publication.
- Before publishing, verify the repository immutable-releases setting is enabled. If that setting or the selected signed-or-protected tag path is unavailable, stop and restore the missing selected control before publishing.
- Publish the release only after those checks are confirmed.
- Verify GitHub reports immutable true for the published release and its tag as the intended full commit ID.
- Verify the tag-triggered CI run is successful and that the release notes are visible from the repository release page.
- Track implementation conformance and service-matrix work separately from specification release gates. Publishing a specification does not assert implementation conformance, and incomplete implementation evidence does not block specification publication.