ProPartial execution

Package Release

Package Release covers the local checks around npm distribution: build, package safety, tarball contents, and explicit proof about what would ship. It is designed to stop short of the publish button.

Current truth

PARTIAL_EXECUTION

Primary evidence

package.json, src/avorelo/dogfood/package-safety.ts

Runtime surface

Package checks, tarball validation, and blocked publish boundaries.

Tests

npm run package:check, npm pack --dry-run, package-safety dogfood

What exists today

Avorelo can verify bundled files, ensure test and artifact leakage stays out of the tarball, and produce a local report about package readiness.

Claim boundary

Package Release does not execute npm publish and does not change npm latest. Those steps remain human-approved, deliberate release actions.

What it does not do

It does not claim public distribution already happened, and it does not bypass publish approval, billing approval, or legal review gates.