typesafe-gates 0.2.0 → 0.2.1

package/README.md

@@ -195,15 +195,24 @@ latency.
 1. Bump `version` in `package.json` and add a `CHANGELOG.md` entry.
 2. Commit, then publish a GitHub release whose tag is `vX.Y.Z` (a bare
    `X.Y.Z` also works) targeting `main`. The release workflow checks the tag
-   against the version, re-runs lint, typecheck, tests and the build, and
-   publishes to npm with provenance through trusted publishing (no token
-   stored anywhere). A release saved as a draft creates no tag and runs
-   nothing.
-
-The first version of a package cannot be published by trusted publishing,
-so 0.1.0 was published by hand with `npm publish --access public` and the
-trusted publisher (owner `mpointer`, repository `typesafe-gates`, workflow
-`release.yml`) was configured on npmjs.com afterwards.
+   against the version and re-runs lint, typecheck, tests and the build. A
+   release saved as a draft creates no tag and runs nothing.
+3. Publish to npm by hand from a clean checkout of the tagged commit, in a
+   real terminal:
+
+   ```sh
+   npm publish --access public
+   ```
+
+   npm asks for an MFA step with a passkey; approve it in the browser while
+   the command waits. The registry can take a few minutes to show the new
+   version.
+
+The workflow's own publish step (trusted publishing, owner `mpointer`,
+repository `typesafe-gates`, workflow `release.yml`) fails with
+`403 OIDC permission denied`, because the package requires that passkey
+step and CI cannot complete it. Releases published by hand carry no
+provenance attestation.
 
 ## License
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "typesafe-gates",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Probabilistic decision gates for LLM pipelines on TypeSafe AI's System One (Jev): typed Score, Choice and yes/no judgments with explicit thresholds, a stated fail-open or fail-closed policy per gate, all-or-nothing batches, time budgets, and usage accounting. Ships six reference gates from production.",
   "license": "MIT",
   "author": "Mike Pointer <mpointer@gmail.com>",