@brik64/cli 0.1.0-beta.1 → 0.1.0-beta.3

package/docs/GITHUB_REPO_GOVERNANCE.md

@@ -0,0 +1,97 @@
+# GitHub Repository Governance
+
+This repository is public so developers can inspect BRIK64 CLI beta releases,
+read package metadata, download artifacts, and open issues.
+
+It is not an external contribution repository.
+
+## Ownership
+
+- Organization: `brik64`
+- Repository: `brik64/brik64-cli`
+- Maintainer team: `brik64/brik64-cli-maintainers`
+- Initial maintainers: `brik64-admin`, `carlosjperez`
+
+`CODEOWNERS` assigns the full repository to the maintainer team.
+
+## Public Interaction Policy
+
+Allowed:
+
+- Open issues.
+- Report reproducible CLI beta bugs.
+- Report docs, release, npm, checksum, or install metadata mismatches.
+- Report security concerns through the security policy.
+
+Not accepted:
+
+- External pull requests.
+- External direct commits.
+- Public changes to release evidence, license text, package metadata, or docs
+  claim surfaces.
+
+BRIK64 lands changes through authorized maintainers so release evidence,
+package metadata, public claims, licenses, checksums, and docs stay aligned.
+
+## Required Repository Settings
+
+Recommended public repo settings:
+
+- Issues: enabled.
+- Wiki: enabled.
+- Projects: disabled unless used for public release tracking.
+- Merge commit, squash merge, and rebase merge: disabled for public PR paths.
+- Auto merge: disabled.
+- Delete branch on merge: enabled.
+- Web commit signoff: enabled.
+- Homepage: `https://brik64.com`.
+- Repository topics: `brik64`, `brik`, `cli`, `pcd`, `evidence`,
+  `software-trust`, `developer-tools`, `public-beta`, `macos`, `command-line`.
+
+Recommended `main` branch protection:
+
+- Restrict pushes to `brik64-cli-maintainers`.
+- Require signed commits.
+- Require linear history.
+- Block force pushes.
+- Block deletions.
+- Require conversation resolution.
+
+## Security And Code Quality
+
+Repository security should include:
+
+- Secret scanning enabled.
+- Secret scanning push protection enabled.
+- Dependabot security updates enabled.
+- Dependabot version update config for npm and GitHub Actions.
+- CodeQL default setup for JavaScript analysis.
+- CI smoke and package checks.
+
+Dependabot PRs should be reviewed by `brik64-cli-maintainers` and merged only
+after protected branch checks pass. Dependency update PRs are maintenance
+signals, not release promotion evidence.
+
+Do not add a custom CodeQL advanced workflow while GitHub CodeQL default setup is
+enabled for this repository. GitHub rejects SARIF from advanced configuration
+when default setup is active.
+
+## Docs And Mintlify Changelog
+
+The publish workflow dispatches `brik64-cli-release` to
+`brik64/brik64-docs-site` when `BRIK64_DOCS_REPO_DISPATCH_TOKEN` is configured.
+
+Required secret:
+
+```text
+BRIK64_DOCS_REPO_DISPATCH_TOKEN
+```
+
+The token should be fine-grained and scoped to trigger repository dispatch or
+workflow dispatch in `brik64/brik64-docs-site`. The receiving docs repository
+should update `releases/changelog.mdx`, rebuild Mintlify output, and deploy docs.
+
+The GitHub App installation token rollout announced in May 2026 means any app or
+automation that creates installation tokens must treat `ghs_` tokens as opaque
+and avoid fixed-length token assumptions. This repo's workflows do not parse
+GitHub App installation tokens.

package/docs/LINUX_HETZNER_TESTING.md

@@ -1,27 +1,31 @@
 # Linux Hetzner Testing
 
-Hetzner is the Linux test surface for the CLI beta.
+Hetzner is the Linux validation surface for BRIK64 CLI beta packaging.
 
-Scope:
-- Debian x64 native artifact execution.
-- Ubuntu x64 native artifact execution.
-- Fedora x64 native artifact execution.
-- Alpine x64 musl only with a separate musl artifact or explicit unsupported
+## Scope
+
+- Debian x64 package and install checks.
+- Ubuntu x64 package and install checks.
+- Fedora x64 package and install checks when that lane opens.
+- Alpine x64 musl only with a musl-specific artifact or an explicit scope
   decision.
 
-Required evidence per supported distro:
+## Required Evidence Per Distro
+
 - distro identity (`/etc/os-release`);
 - architecture (`uname -m`);
 - native binary path;
-- no wrapper evidence;
 - `brik --version` output;
 - BRIK64 ASCII startup output;
 - command-contract smoke;
 - PCD/certify/emit workflow smoke;
 - behavior PASS report.
 
-Boundary:
-- No universal Linux claim.
-- No public release authorization.
-- No N5, fixpoint or release-readiness claim from a distro smoke alone.
-- Windows remains waiting for a real PC/runner.
+## Promotion Path
+
+Each distro lane should publish its own artifact, checksum, install smoke, and
+release manifest before it is promoted through GitHub Releases, curl/GCP, docs,
+or brik64.com. Linux wording should name the validated distro lane instead of
+collapsing all Linux distributions into one status.
+
+Windows remains a separate validation lane with its own runner and install smoke.

package/docs/MACOS_LOCAL_TESTING.md

@@ -6,19 +6,22 @@ Current local platform:
 - OS: macOS / Darwin
 - Architecture: arm64
 
-Scope:
-- local CLI execution;
-- local install path checks;
-- local command-contract checks;
-- no public release authorization.
-
-Out of scope:
-- macOS x64 runner evidence;
-- Windows evidence;
-- universal macOS artifact claims;
-- fixpoint, N5 or release claims.
-
-Required evidence before marking macOS local ready:
+## Scope
+
+- Local CLI execution.
+- Local install path checks.
+- Local command-contract checks.
+- Apple Silicon package smoke for the current beta lane.
+
+## Evidence Still Needed For Broader Promotion
+
+- macOS Intel runner or host evidence.
+- Windows evidence.
+- Per-artifact checksum and release manifest binding.
+- Release authorization from the active BRIK64 evidence process.
+
+## Required Evidence Before Marking macOS Local Ready
+
 - local binary path;
 - `brik --version` output;
 - BRIK64 ASCII startup output;

package/docs/PLATFORM_MATRIX.md

@@ -2,11 +2,16 @@
 
 | Platform | Status | Required Evidence |
 | --- | --- | --- |
-| macOS arm64 local | pending | local binary execution report |
-| Linux Debian x64 | pending | native binary, no wrapper, behavior PASS |
-| Linux Ubuntu x64 | pending | native binary, no wrapper, behavior PASS |
-| Linux Fedora x64 | pending | native binary, no wrapper, behavior PASS |
-| Linux Alpine x64 musl | pending | separate musl artifact or explicit unsupported decision |
-| Windows x64 | waiting | real PC/runner metadata and execution report |
+| macOS Apple Silicon | current beta lane | package smoke, checksum, release manifest |
+| macOS Intel | planned | Intel host or runner install smoke, checksum, release manifest |
+| Debian Linux x64 | planned | Debian package/install smoke, checksum, release manifest |
+| Ubuntu Linux x64 | planned | Ubuntu package/install smoke, checksum, release manifest |
+| Fedora Linux x64 | future lane | Fedora package/install smoke or explicit scope decision |
+| Alpine Linux x64 musl | future lane | musl-specific artifact or explicit scope decision |
+| Windows x64 | planned | Windows runner smoke, checksum, release manifest |
 
-Do not collapse these into "all Linux" or "all platforms" claims.
+## Public Wording Rule
+
+Describe each platform only at the evidence level it has reached. Linux package
+language should name the distro lane, and macOS language should distinguish
+Apple Silicon from Intel until both lanes have passed their own checks.

package/docs/RELEASE_COPY_MANUAL.md

@@ -8,11 +8,11 @@ and aligned with BRIK64 evidence boundaries.
 ## Authority
 
 - Product surface: BRIK64 CLI.
-- Current public beta: `0.1.0-beta.1`.
-- Public web surface: https://brik64.com/home-cli
+- Current public beta: `0.1.0-beta.3`.
+- Public web surface: https://brik64.com
 - Docs: https://docs.brik64.com/cli/install
 - Package: https://www.npmjs.com/package/@brik64/cli
-- Release: https://github.com/brik64/brik64-cli/releases/tag/v0.1.0-beta.1
+- Release: https://github.com/brik64/brik64-cli/releases/tag/v0.1.0-beta.3
 - Evidence authority: `brik64-prod` gates, manifests, checksums, and release
   reports.
 - Implementation surface: `brik64-cli` source, package metadata, tests, PCD seed
@@ -160,7 +160,7 @@ brik --version
 brik help
 ```
 
-Public web surface: https://brik64.com/home-cli
+Public web surface: https://brik64.com
 
 Docs: https://docs.brik64.com/cli/install
 
@@ -296,3 +296,63 @@ Copyright (c) 2026 BRIK64 INC. All rights reserved.
 
 Use this footer in package README, release notes, NOTICE, docs cards, and public
 repo descriptions where space allows.
+
+
+## License Standard
+
+BRIK64 CLI public beta releases use the `BRIK64 CLI Public Beta Evaluation License`.
+This is proprietary evaluation software from BRIK64 INC. Public package metadata
+should use:
+
+```json
+"license": "SEE LICENSE IN LICENSE"
+```
+
+Every beta package should include:
+
+- `LICENSE` with the full BRIK64 CLI Public Beta Evaluation License;
+- `NOTICE` with copyright, public links, and beta licensing summary;
+- README copyright section pointing to both files;
+- package metadata with `author.name` set to `BRIK64 INC`.
+
+Use positive scope language for maturity and support boundaries. Commercial,
+hosted, redistribution, partner, enterprise, regulated, or certification-oriented
+use should route to written commercial terms from BRIK64 INC.
+
+
+## ASCII Banner Standard
+
+Use this provisional ASCII banner in CLI README and release surfaces until the
+final cross-repo visual identity asset is ready:
+
+```text
+╔══════════════════════════════════════════════════════╗
+║                                                      ║
+║   ██████╗ ██████╗  ██╗██╗  ██╗ ██████╗ ██╗  ██╗    ║
+║   ██╔══██╗██╔══██╗ ██║██║ ██╔╝██╔════╝ ██║  ██║    ║
+║   ██████╔╝██████╔╝ ██║█████╔╝ ███████╗ ███████║    ║
+║   ██╔══██╗██╔══██╗ ██║██╔═██╗ ██╔═══██╗╚════██║    ║
+║   ██████╔╝██║  ██║ ██║██║  ██╗╚██████╔╝     ██║    ║
+║   ╚═════╝ ╚═╝  ╚═╝ ╚═╝╚═╝  ╚═╝ ╚═════╝      ╚═╝    ║
+║                                                      ║
+║        BRIK64 SYSTEM BOOT                            ║
+║        SOFTWARE LOGIC COMPILER                       ║
+║        MAKE SOFTWARE REVIEWABLE AGAIN                ║
+║                                                      ║
+╚══════════════════════════════════════════════════════╝
+```
+
+For beta copy, keep the claim-safe scope paragraph directly after the banner so
+the visual language stays anchored to current release evidence.
+
+## Release Asset Matrix Wording
+
+Use this wording for current and future platform packages:
+
+```text
+Current beta asset: macOS Apple Silicon package.
+Planned release lanes: macOS Intel, Debian/Ubuntu Linux packages, and Windows PC packages after platform-specific build and smoke gates pass.
+```
+
+Avoid presenting planned platform lanes as current support until the matching
+artifact, checksum, install smoke, and release gate exist.

package/docs/REPOSITORY_MAP.md

@@ -0,0 +1,100 @@
+# BRIK64 CLI Repository Map
+
+This map describes the public files and folders in `brik64/brik64-cli`.
+It is intended for package reviewers, beta users, security reporters, and
+maintainers who need to understand what each path is for.
+
+## Root Files
+
+| Path | Description |
+| --- | --- |
+| `README.md` | Primary public entry point for BRIK64 CLI install instructions, beta scope, official channels, repository map, release assets, and license summary. |
+| `package.json` | npm package manifest for `@brik64/cli`, including package version, description, binary mapping, scripts, keywords, publish config, and package file allowlist. |
+| `LICENSE` | Proprietary beta license for BRIK64 CLI. The package is public for evaluation and inspection, not open source redistribution. |
+| `NOTICE` | Copyright notice and third-party notice surface for the public beta package. |
+| `SECURITY.md` | Security reporting policy, supported beta version scope, and private reporting route. |
+| `CONTRIBUTING.md` | Public interaction policy. Issues are accepted for reproducible beta bugs and metadata mismatches; external pull requests are not accepted. |
+| `.gitignore` | Local Git ignore rules for generated files, dependency directories, package outputs, logs, and temporary artifacts. |
+| `.npmignore` | npm packaging exclusions for repository-only files that should not ship in the published package. |
+
+## Executable CLI
+
+| Path | Description |
+| --- | --- |
+| `src/` | Executable CLI source directory for the current beta. |
+| `src/brik.js` | Node.js command entry point exposed as `brik` by npm. It implements the current public beta command behavior. |
+
+## Tests
+
+| Path | Description |
+| --- | --- |
+| `tests/` | Local test directory for current beta smoke checks. |
+| `tests/smoke.sh` | Shell smoke test covering basic CLI execution, help/version output, project initialization behavior, `AGENTS.md` non-mutation policy, certify/emit behavior, target generation, and fail-closed unsupported targets. |
+
+## PCD Seed Material
+
+| Path | Description |
+| --- | --- |
+| `pcd/` | Candidate PCD seed material for moving CLI behavior toward a PCD-first BRIK64 methodology. These files are review material, not release certificates. |
+| `pcd/README.md` | Folder-level explanation of current PCD seed role, promotion path, and authority boundary. |
+| `pcd/cli_core.pcd` | Candidate command contract seed for core CLI behavior. |
+| `pcd/cli_init_policy.pcd` | Candidate command contract seed for initialization and agent-file consent policy. |
+| `pcd/cli_certify_emit.pcd` | Candidate command contract seed for bounded certification-output behavior. |
+| `pcd/cli_polymer.pcd` | Candidate composition contract that binds the CLI command PCD seeds before a future compile route. |
+
+## Evidence And Packaging
+
+| Path | Description |
+| --- | --- |
+| `evidence/` | Public beta evidence area for package inspection and generated-review material. |
+| `evidence/pcd-seed/` | Generated PCD seed review material used to keep methodology work inspectable without presenting it as certification. |
+| `evidence/pcd-seed/README.md` | Explanation of how seed evidence should be read and what must happen before stronger release language is allowed. |
+| `packaging/` | Packaging notes and release-lane material for platform-specific package work. |
+| `packaging/macos-local/` | macOS local package review material for the current beta lane. |
+| `packaging/macos-local/README.md` | macOS local packaging scope, package review expectations, and promotion requirements. |
+
+## Documentation
+
+| Path | Description |
+| --- | --- |
+| `docs/REPOSITORY_MAP.md` | This file-by-file public repository map. |
+| `docs/BRIK_METHODOLOGY_TRANSITION.md` | Methodology transition plan for moving the CLI from executable beta source toward PCD-first implementation and evidence-backed promotion. |
+| `docs/DISTRIBUTION_ROADMAP.md` | Distribution roadmap for npm, GitHub Releases, GitHub Packages, curl/GCP, Homebrew, macOS Intel, Linux, and Windows lanes. |
+| `docs/GITHUB_NPM_PUBLISHING.md` | npm publishing workflow notes for the public beta package. |
+| `docs/GITHUB_PACKAGES_PUBLISHING.md` | GitHub Packages mirror workflow notes and verification boundary. |
+| `docs/GITHUB_REPO_GOVERNANCE.md` | Repository governance policy for branch protection, maintainer ownership, issue flow, package publication, and public interaction controls. |
+| `docs/LINUX_HETZNER_TESTING.md` | Linux test plan and operator guidance for Debian/Ubuntu lanes using remote execution infrastructure. |
+| `docs/MACOS_LOCAL_TESTING.md` | macOS local test plan and operator guidance for current Apple Silicon package validation. |
+| `docs/PLATFORM_MATRIX.md` | Platform support matrix for current beta support and planned release lanes. |
+| `docs/RELEASE_COPY_MANUAL.md` | Standardized release-copy guide for npm, GitHub Releases, package descriptions, changelog entries, and public keywords. |
+| `docs/REPO_BOUNDARY.md` | Public repository boundary: what this repo owns, what `brik64-prod` owns, and what must not be claimed from this repo alone. |
+| `docs/WIKI_HOME.md` | Versioned wiki-home content while GitHub Wiki remote access remains under operational review. |
+
+## GitHub Governance
+
+| Path | Description |
+| --- | --- |
+| `.github/CODEOWNERS` | Maintainer ownership rules for protected files and review-required changes. |
+| `.github/PULL_REQUEST_TEMPLATE.md` | Internal maintainer checklist for protected changes, claim-safety review, package impact, and evidence updates. |
+| `.github/dependabot.yml` | Dependabot grouping and review configuration for GitHub Actions and npm ecosystem updates. |
+| `.github/ISSUE_TEMPLATE/` | Public issue templates for beta bugs, docs/package metadata mismatches, and security-report routing. |
+| `.github/workflows/ci.yml` | Main CI workflow for smoke tests and package-content checks. |
+| `.github/workflows/codeql.yml` | CodeQL workflow configuration where custom analysis is needed. |
+| `.github/workflows/publish-npm-beta.yml` | Manual npm beta publication workflow for authorized maintainers. |
+| `.github/workflows/publish-github-packages-beta.yml` | Manual GitHub Packages beta mirror workflow for authorized maintainers. |
+
+## BRIK64 Traceability
+
+| Path | Description |
+| --- | --- |
+| `.brik/` | BRIK64 local project metadata directory. |
+| `.brik/manifest.json` | Local traceability manifest for the CLI repo. It is operational metadata and is not a formal certificate. |
+
+## Authority Boundary
+
+This repository owns the public CLI package surface, local beta source, package
+metadata, package smoke checks, public repo governance, and beta documentation.
+
+`brik64-prod` remains the authority for release gates, certificate boundaries,
+compiler evidence, promotion decisions, and any stronger public claim
+authorization.

package/docs/REPO_BOUNDARY.md

@@ -2,29 +2,28 @@
 
 ## Lives Here
 
-- CLI source code.
-- CLI tests and fixtures.
-- Platform packaging scripts.
-- Local beta artifacts.
-- Per-version changelogs.
+- Public beta CLI source code.
+- CLI smoke tests and fixtures.
+- Platform packaging scripts and wrappers.
+- Local beta artifacts and package metadata.
+- Per-version release notes, runbooks, and distribution docs.
 
-## Does Not Live Here
+## Authority Boundary
 
-- Private engines.
-- Claim-bearing certification authority.
-- Public release authorization.
-- N-level claims.
-- Prod evidence source of truth.
+- `brik64-cli` owns implementation, public package metadata, distribution
+  workflows, issue templates, and release-surface documentation for the CLI beta.
+- `brik64-prod` owns methodology gates, evidence authority, release decision,
+  compiler evidence, certificate boundaries, and public claim authorization.
 
-## Authority Split
+## Public Surface Rule
 
-- `brik64-cli`: implementation and packaging iteration.
-- `brik64-prod`: gates, evidence, methodology, release decision and claim
-  boundary.
+The public repository should help developers inspect, install, and report on the
+CLI beta without exposing private engines, internal gates, private evidence
+stores, raw credentials, or unsupported certification language.
 
 ## Platform Scope
 
 - macOS local testing can run on the current development machine.
 - Linux testing should run on the Hetzner runner and must be split by distro
-  family rather than claimed as universal Linux support.
+  family.
 - Windows testing remains pending until a real Windows PC/runner is available.

package/docs/WIKI_HOME.md

@@ -0,0 +1,50 @@
+# BRIK64 CLI Public Beta
+
+BRIK64 CLI is the public beta command-line surface for local BRIK64 project
+workflows, PCD-oriented structure, bounded evidence review, and claim-safe
+project scaffolding.
+
+## Official Links
+
+- Website: https://brik64.com
+- Docs: https://docs.brik64.com
+- npm: https://www.npmjs.com/package/@brik64/cli
+- GitHub release: https://github.com/brik64/brik64-cli/releases
+
+## Public Interaction
+
+This repository is public for inspection, installation, issue reporting, release
+review, and package transparency.
+
+Allowed:
+
+- Open issues for reproducible CLI beta bugs.
+- Open issues for docs, npm, release, checksum, or install metadata mismatches.
+- Report security concerns using the repository security policy.
+
+Not accepted:
+
+- External pull requests.
+- External direct commits.
+- Public edits to release evidence, license text, package metadata, or public
+  claim surfaces.
+
+BRIK64 lands changes through authorized maintainers.
+
+## Current Beta
+
+Current beta: `0.1.0-beta.3`
+
+Install:
+
+```sh
+npm install -g @brik64/cli@beta
+brik --version
+brik help
+```
+
+## Evidence Boundary
+
+`brik64-prod` remains the authority for methodology, release gates, evidence
+contracts, certification boundaries, compiler claim authorization, and release
+approval.

package/evidence/pcd-certificates/cli_certify_emit.pcd.cert.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": "brik64.cli_local_candidate_certificate.v1",
-  "generatedAt": "2026-06-03T05:06:50Z",
+  "generatedAt": "2026-06-03T20:12:17Z",
   "pcd": {
     "path": "pcd/cli_certify_emit.pcd",
     "sha256": "1d73245ebee8592a4eeacdb4b99398baf7c5ddfa3c88c5927f924a871eee7147"

package/evidence/pcd-certificates/cli_core.pcd.cert.json

@@ -1,9 +1,9 @@
 {
   "schemaVersion": "brik64.cli_local_candidate_certificate.v1",
-  "generatedAt": "2026-06-03T05:06:50Z",
+  "generatedAt": "2026-06-03T20:12:17Z",
   "pcd": {
     "path": "pcd/cli_core.pcd",
-    "sha256": "c1d3167109d842c5b321ed541604bdcff2c7be7865b2aac8116f1db03b557944"
+    "sha256": "a2337d9d359061d5c655320ad5fb64c2acbea0ed077840bc61c049dbf387419e"
   },
   "certificate": {
     "kind": "local_candidate_certificate",

package/evidence/pcd-certificates/cli_init_policy.pcd.cert.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": "brik64.cli_local_candidate_certificate.v1",
-  "generatedAt": "2026-06-03T05:06:50Z",
+  "generatedAt": "2026-06-03T20:12:17Z",
   "pcd": {
     "path": "pcd/cli_init_policy.pcd",
     "sha256": "fae8cf2f18ba00b337236a46ee7d212b1437c7b4eae812ca1e3506651ffdb31d"

package/evidence/pcd-certificates/cli_polymer.pcd.cert.json

@@ -1,9 +1,9 @@
 {
   "schemaVersion": "brik64.cli_local_candidate_certificate.v1",
-  "generatedAt": "2026-06-03T05:06:50Z",
+  "generatedAt": "2026-06-03T20:12:17Z",
   "pcd": {
     "path": "pcd/cli_polymer.pcd",
-    "sha256": "776bbd5a15357bf47350a81011f1d12bdf4a04fb843cd035c39f9b3985cb9196"
+    "sha256": "db285a12918a9fe4d50f80054e66d240d71d4ff0dd3031e495201a7dee936f71"
   },
   "certificate": {
     "kind": "local_candidate_certificate",

package/evidence/pcd-seed/README.md

@@ -1,7 +1,18 @@
-# PCD Seed Evidence Boundary
+# PCD Seed Evidence
 
-This directory is reserved for future reports generated from the candidate PCD
-source in `pcd/`.
+This directory is reserved for reports generated from the candidate PCD source
+in `pcd/`.
 
-No report in this directory currently authorizes a public beta, fixpoint claim,
-N5 claim, formal certification claim, or Rust-independence claim.
+## Current Role
+
+- Holds future evidence generated from PCD seed review.
+- Keeps PCD methodology evidence separate from executable CLI source.
+- Provides a stable location for future gate outputs, manifests, and review
+  notes tied to the PCD seed material.
+
+## Evidence Boundary
+
+Public beta install and package metadata are supported by the release artifacts
+and workflows documented in this repository. Stronger compiler, fixpoint,
+platform, or certification language belongs to fresh evidence from the relevant
+BRIK64 gates before it is promoted publicly.

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@brik64/cli",
-  "version": "0.1.0-beta.1",
+  "version": "0.1.0-beta.3",
   "private": false,
   "description": "BRIK64 CLI public beta for local PCD workflows, bounded evidence review, and claim-safe project scaffolding.",
-  "homepage": "https://brik64.com/home-cli",
+  "homepage": "https://brik64.com",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/brik64/brik64-cli.git"
@@ -49,6 +49,8 @@
     "README.md",
     "LICENSE",
     "NOTICE",
+    "SECURITY.md",
+    "CONTRIBUTING.md",
     ".brik/manifest.json"
   ]
 }

package/packaging/macos-local/README.md

@@ -1,15 +1,22 @@
 # macOS Local Bootstrap Wrapper
 
-This directory contains a local macOS bootstrap wrapper for testing:
+This directory contains the local macOS wrapper used to exercise the public beta
+CLI during package and command smoke testing.
 
 ```bash
 export PATH="/Users/carlosjperez/Documents/GitHub/brik64-cli/packaging/macos-local:$PATH"
 brik --version
 ```
 
-Boundary:
-- bootstrap wrapper only;
-- depends on local Node.js;
-- not a native final artifact;
-- not public release evidence;
-- not post-beta `.brik`/PCD semantic source.
+## Current Role
+
+- Provides a local `brik` command wrapper for macOS testing.
+- Depends on the local Node.js runtime.
+- Supports install-path and command-contract checks before platform packages are
+  promoted.
+
+## Promotion Path
+
+Native macOS release assets should ship with platform-specific checksum,
+install-smoke, and release-manifest evidence before they are promoted through
+GitHub Releases, curl/GCP, Homebrew, docs, or brik64.com.