falsiflow 0.1.2__tar.gz

falsiflow-0.1.2/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,58 @@
+name: Bug report
+description: Report a reproducible Falsiflow failure or regression.
+title: "[Bug]: "
+labels: ["bug", "needs-triage"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for reporting a concrete failure. Please include commands and generated artifacts when you can.
+  - type: textarea
+    id: command
+    attributes:
+      label: Command or workflow
+      description: Paste the exact command, Make target, CI job, or browser workflow that failed.
+      placeholder: falsiflow release-check --out-dir data/falsiflow/release_check --force
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected result
+      description: What status, artifact, report, or behavior did you expect?
+      placeholder: release_ready with package_ready, dist_ready, and release_validation_ready.
+    validations:
+      required: true
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual result
+      description: Include the first failing status, traceback, report excerpt, or CI link.
+      placeholder: release_blocked because sdist_required_files failed.
+    validations:
+      required: true
+  - type: textarea
+    id: environment
+    attributes:
+      label: Environment
+      description: Include OS, Python version, install method, and whether this was local, pipx, or CI.
+      placeholder: macOS 15, Python 3.12, editable install with python3 -m pip install -e .
+    validations:
+      required: true
+  - type: textarea
+    id: artifacts
+    attributes:
+      label: Relevant artifacts
+      description: Link or paste paths for release_check.json, adoption_check.json, claim_check.json, bundle verification, or template verification reports.
+      placeholder: data/falsiflow/release_check/release_check.json
+    validations:
+      required: false
+  - type: checkboxes
+    id: boundaries
+    attributes:
+      label: Checks before filing
+      options:
+        - label: I checked that this is not a claim that Falsiflow should treat as scientific proof, safety proof, regulatory approval, or clinical validation.
+          required: true
+        - label: I removed secrets, private raw data, and credentials from shared logs or artifacts.
+          required: true

falsiflow-0.1.2/.github/ISSUE_TEMPLATE/claim_gate_request.yml

@@ -0,0 +1,58 @@
+name: Claim gate or template request
+description: Request a new evidence-gated workflow, starter template, or template review.
+title: "[Claim gate]: "
+labels: ["template", "evidence-gate", "needs-triage"]
+body:
+  - type: textarea
+    id: decision
+    attributes:
+      label: Decision to gate
+      description: What claim, handoff, or project decision should Falsiflow block until evidence is ready?
+      placeholder: Advance a coating candidate only when adhesion, cytotoxicity, impedance drift, and source provenance pass configured thresholds.
+    validations:
+      required: true
+  - type: textarea
+    id: evidence
+    attributes:
+      label: Required evidence
+      description: List the evidence rows, metadata, source files, and derived metrics this gate needs.
+      placeholder: adhesion_mpa with raw test export, cytotoxicity_percent with lab report source, impedance_drift_percent derived from day 0 and day 30 measurements.
+    validations:
+      required: true
+  - type: textarea
+    id: thresholds
+    attributes:
+      label: Acceptance rules
+      description: Describe the thresholds or review rules that should control claim_ready.
+      placeholder: adhesion_mpa >= 2.0, cytotoxicity_percent <= 10, impedance_drift_percent <= 15, every required source file present.
+    validations:
+      required: true
+  - type: dropdown
+    id: stage
+    attributes:
+      label: Current stage
+      options:
+        - Idea only
+        - Draft project.json exists
+        - Template files exist
+        - Template pack exists
+        - Template release bundle exists
+    validations:
+      required: true
+  - type: textarea
+    id: artifacts
+    attributes:
+      label: Existing artifacts
+      description: Link or describe any project.json, evidence CSV, raw source file, template pack, lockfile, attestation, policy, release bundle, or verification report.
+      placeholder: examples/falsiflow/my_template/project.json and evidence_pass_demo.csv
+    validations:
+      required: false
+  - type: checkboxes
+    id: boundaries
+    attributes:
+      label: Responsible-use boundary
+      options:
+        - label: I understand `claim_ready` means supplied evidence passed configured gates, not that the underlying scientific or commercial claim is independently true.
+          required: true
+        - label: I can provide non-sensitive sample evidence or sanitized fixtures for tests.
+          required: false

falsiflow-0.1.2/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,8 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Responsible-use boundary
+    url: https://github.com/AzurLiu/falsiflow/blob/main/RESPONSIBLE_USE.md
+    about: Read how to interpret Falsiflow readiness before relying on a claim.
+  - name: Security and integrity reports
+    url: https://github.com/AzurLiu/falsiflow/blob/main/SECURITY.md
+    about: Report provenance, bundle verification, path handling, or supply-chain issues privately.

falsiflow-0.1.2/.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,52 @@
+name: Feature request
+description: Propose a CLI, template, documentation, or workflow improvement.
+title: "[Feature]: "
+labels: ["enhancement", "needs-triage"]
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: What adoption, review, template-authoring, or evidence-gate problem should this solve?
+      placeholder: New users can run the quickstart, but template authors need a clearer install verification path.
+    validations:
+      required: true
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed change
+      description: Describe the command, report, template, documentation, or CI behavior you want.
+      placeholder: Add a command that verifies a template release bundle and writes a Markdown review card.
+    validations:
+      required: true
+  - type: dropdown
+    id: area
+    attributes:
+      label: Area
+      options:
+        - First-run experience
+        - Audit reports
+        - Starter templates
+        - Release and packaging
+        - Local browser app
+        - Documentation
+        - Security or provenance
+    validations:
+      required: true
+  - type: textarea
+    id: success
+    attributes:
+      label: Success criteria
+      description: What command, artifact, status, or documentation would show the feature is complete?
+      placeholder: adoption-check reports adoption_ready and release-check still reports release_ready.
+    validations:
+      required: true
+  - type: checkboxes
+    id: contribution
+    attributes:
+      label: Contribution path
+      options:
+        - label: I can help test this with `falsiflow quickstart`, `falsiflow doctor`, `falsiflow adoption-check`, or `falsiflow release-check`.
+          required: false
+        - label: I can open a pull request using `.github/PULL_REQUEST_TEMPLATE.md`.
+          required: false

falsiflow-0.1.2/.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,27 @@
+## What Changed
+
+Describe the user-visible behavior, command, report, template, packaging, or documentation change.
+
+## Verification
+
+Paste the commands you ran and the final status:
+
+```bash
+python3 -m py_compile falsiflow/core.py falsiflow/cli.py falsiflow/adapters.py falsiflow/casebook_check.py scripts/falsiflow.py scripts/falsiflow_tests/regress_falsiflow_core.py
+python3 scripts/falsiflow_tests/regress_falsiflow_core.py
+falsiflow adoption-check --out-dir data/falsiflow/adoption_check --force
+falsiflow release-check --out-dir data/falsiflow/release_check --force
+```
+
+## Evidence Boundary
+
+- [ ] This change does not make `claim_ready` bypass missing provenance, placeholder evidence, malformed configuration, or failed gates.
+- [ ] New public commands or JSON fields are documented and covered by tests or release-check expectations.
+- [ ] Template distribution changes were checked with `template-check`, `template-pack`, `verify-template-pack`, `template-release`, `verify-template-release`, and `template-install` where applicable.
+- [ ] Security-sensitive changes preserve bundle verification, SHA-256 integrity, path handling, and source-file provenance.
+- [ ] Responsible use remains clear: Falsiflow readiness is not proof of safety, efficacy, regulatory compliance, or experimental truth.
+
+## Release Impact
+
+- [ ] `CHANGELOG.md`, `README.md`, `RELEASE.md`, `SECURITY.md`, or `RESPONSIBLE_USE.md` were updated when relevant.
+- [ ] `adoption-check` and `release-check` pass, or this PR explains why they cannot run in the current environment.

falsiflow-0.1.2/.github/dependabot.yml

@@ -0,0 +1,17 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "dependencies"
+      - "github-actions"
+
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "dependencies"
+      - "python"

falsiflow-0.1.2/.github/workflows/falsiflow-cross-platform.yml

@@ -0,0 +1,69 @@
+name: Falsiflow Cross Platform
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+      - master
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  smoke:
+    name: ${{ matrix.os }}
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os:
+          - ubuntu-latest
+          - macos-latest
+          - windows-latest
+
+    steps:
+      - name: Checkout public repository
+        shell: bash
+        run: |
+          git init .
+          git remote add origin "https://github.com/${GITHUB_REPOSITORY}.git"
+          git fetch --no-tags --depth=1 origin "+${GITHUB_REF}:${GITHUB_REF}"
+          git checkout --detach "${GITHUB_SHA}"
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - name: Compile
+        run: |
+          python -m py_compile falsiflow/core.py falsiflow/cli.py falsiflow/adapters.py falsiflow/release.py falsiflow/adoption.py falsiflow/casebook_check.py falsiflow/bundle.py falsiflow/browser_demo.py falsiflow/demo.py falsiflow/discovery.py falsiflow/local_server.py falsiflow/public_release.py falsiflow/claim_check.py falsiflow/doctor.py falsiflow/quickstart.py falsiflow/scaffold.py falsiflow/template_discovery.py falsiflow/template_gallery.py falsiflow/template_check.py falsiflow/template_pack.py falsiflow/template_registry.py falsiflow/template_provenance.py falsiflow/template_release.py falsiflow/template_install.py scripts/falsiflow.py scripts/falsiflow_tests/regress_falsiflow_core.py
+      - name: Local installer smoke (Unix)
+        if: runner.os != 'Windows'
+        shell: bash
+        run: |
+          scripts/install_local.sh --from-local . --prefix "$RUNNER_TEMP/falsiflow_install" --check
+      - name: Local installer smoke (Windows)
+        if: runner.os == 'Windows'
+        shell: pwsh
+        run: |
+          ./scripts/install_local.ps1 -FromLocal . -Prefix "$env:RUNNER_TEMP/falsiflow_install" -Check
+      - name: pipx smoke
+        shell: bash
+        run: |
+          python -m pip install --user pipx
+          python -m pipx install --force .
+          python -m pipx run --spec . falsiflow selftest --json > "$RUNNER_TEMP/falsiflow_pipx_selftest.json"
+      - name: Browser entry smoke
+        shell: bash
+        run: |
+          python scripts/falsiflow.py start --out-dir "$RUNNER_TEMP/falsiflow_start" --check --json
+          python scripts/falsiflow.py demo-package --out-dir "$RUNNER_TEMP/falsiflow_public_demo" --force --json
+      - name: External readiness smoke
+        shell: bash
+        env:
+          FALSIFLOW_REPO_URL: https://github.com/${{ github.repository }}
+          FALSIFLOW_PUBLIC_DEMO_URL: https://${{ github.repository_owner }}.github.io/${{ github.event.repository.name }}/
+          FALSIFLOW_PIPX_VALIDATED: "1"
+          FALSIFLOW_WINDOWS_VALIDATED: ${{ runner.os == 'Windows' && '1' || '0' }}
+        run: |
+          python scripts/falsiflow.py external-check --out-dir "$RUNNER_TEMP/falsiflow_external_check" --force --json

falsiflow-0.1.2/.github/workflows/falsiflow-external-evidence.yml

@@ -0,0 +1,269 @@
+name: Falsiflow External Evidence
+
+on:
+  workflow_dispatch:
+    inputs:
+      public_demo_url:
+        description: "Hosted public demo URL to verify, for example https://OWNER.github.io/falsiflow/"
+        required: true
+        type: string
+      repo_url:
+        description: "Public repository URL. Defaults to the current GitHub repository."
+        required: false
+        type: string
+      pypi_package_url:
+        description: "Published PyPI project URL, for example https://pypi.org/project/falsiflow/"
+        required: true
+        type: string
+      expected_version:
+        description: "Expected PyPI package version, for example 0.1.2. Defaults to pyproject.toml."
+        required: false
+        type: string
+
+permissions:
+  contents: read
+
+jobs:
+  pipx-smoke:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout public repository
+        shell: bash
+        run: |
+          git init .
+          git remote add origin "https://github.com/${GITHUB_REPOSITORY}.git"
+          git fetch --no-tags --depth=1 origin "+${GITHUB_REF}:${GITHUB_REF}"
+          git checkout --detach "${GITHUB_SHA}"
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - name: pipx install and browser-entry smoke
+        shell: bash
+        run: |
+          python -m pip install --user pipx
+          python -m pipx install --force .
+          python -m pipx run --spec . falsiflow start --out-dir "$RUNNER_TEMP/falsiflow_start" --check --json > "$RUNNER_TEMP/falsiflow_pipx_start.json"
+      - name: Upload pipx smoke artifact
+        uses: actions/upload-artifact@v7
+        with:
+          name: falsiflow-pipx-smoke
+          path: ${{ runner.temp }}/falsiflow_pipx_start.json
+
+  pipx-public-package:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - name: pipx public package smoke
+        shell: bash
+        run: |
+          python -m pip install --user pipx
+          python -m pipx run --spec falsiflow falsiflow start --out-dir "$RUNNER_TEMP/falsiflow_public_package_start" --check --json > "$RUNNER_TEMP/falsiflow_public_package_start.json"
+      - name: Upload public package pipx smoke artifact
+        uses: actions/upload-artifact@v7
+        with:
+          name: falsiflow-pipx-public-package-smoke
+          path: ${{ runner.temp }}/falsiflow_public_package_start.json
+
+  windows-powershell:
+    runs-on: windows-latest
+    steps:
+      - name: Checkout public repository
+        shell: bash
+        run: |
+          git init .
+          git remote add origin "https://github.com/${GITHUB_REPOSITORY}.git"
+          git fetch --no-tags --depth=1 origin "+${GITHUB_REF}:${GITHUB_REF}"
+          git checkout --detach "${GITHUB_SHA}"
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - name: PowerShell installer smoke
+        shell: pwsh
+        run: |
+          ./scripts/install_local.ps1 -FromLocal . -Prefix "$env:RUNNER_TEMP/falsiflow_install" -Check
+
+  evidence-summary:
+    needs:
+      - pipx-smoke
+      - pipx-public-package
+      - windows-powershell
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout public repository
+        shell: bash
+        run: |
+          git init .
+          git remote add origin "https://github.com/${GITHUB_REPOSITORY}.git"
+          git fetch --no-tags --depth=1 origin "+${GITHUB_REF}:${GITHUB_REF}"
+          git checkout --detach "${GITHUB_SHA}"
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - name: Verify hosted demo URL
+        shell: bash
+        env:
+          FALSIFLOW_PUBLIC_DEMO_URL: ${{ inputs.public_demo_url }}
+        run: |
+          test -n "$FALSIFLOW_PUBLIC_DEMO_URL"
+          curl -fsSL "$FALSIFLOW_PUBLIC_DEMO_URL" -o "$RUNNER_TEMP/falsiflow_public_demo_index.html"
+          grep -E "Falsiflow|Launchpad|Try" "$RUNNER_TEMP/falsiflow_public_demo_index.html"
+      - name: Verify PyPI project URL
+        shell: bash
+        env:
+          FALSIFLOW_PYPI_PACKAGE_URL: ${{ inputs.pypi_package_url }}
+          FALSIFLOW_EXPECTED_VERSION: ${{ inputs.expected_version }}
+        run: |
+          test -n "$FALSIFLOW_PYPI_PACKAGE_URL"
+          python - <<'PY'
+          import os
+          from urllib.parse import urlparse
+
+          url = os.environ["FALSIFLOW_PYPI_PACKAGE_URL"].strip()
+          parsed = urlparse(url)
+          expected_path = "/project/falsiflow/"
+          if parsed.scheme != "https" or parsed.netloc != "pypi.org" or parsed.path.rstrip("/") + "/" != expected_path:
+              raise SystemExit(f"Expected https://pypi.org/project/falsiflow/, got {url}")
+          PY
+          curl -fsSL "https://pypi.org/pypi/falsiflow/json" -o "$RUNNER_TEMP/falsiflow_pypi_project.json"
+          python - <<'PY'
+          import json
+          import os
+          import pathlib
+          import tomllib
+
+          root = pathlib.Path.cwd()
+          expected_version = os.environ.get("FALSIFLOW_EXPECTED_VERSION", "").strip()
+          if not expected_version:
+              with (root / "pyproject.toml").open("rb") as handle:
+                  expected_version = str(tomllib.load(handle).get("project", {}).get("version", "")).strip()
+          if not expected_version:
+              raise SystemExit("Expected PyPI package version was empty")
+
+          runner_temp = pathlib.Path(os.environ["RUNNER_TEMP"])
+          payload = json.loads((runner_temp / "falsiflow_pypi_project.json").read_text(encoding="utf-8"))
+          info = payload.get("info", {})
+          if str(info.get("name", "")).lower() != "falsiflow":
+              raise SystemExit("PyPI JSON did not describe the falsiflow package")
+          published_version = str(info.get("version", "")).strip()
+          if not published_version:
+              raise SystemExit("PyPI JSON did not include a released version")
+          if published_version != expected_version:
+              raise SystemExit(f"Expected PyPI version {expected_version}, got {published_version}")
+          (runner_temp / "falsiflow_expected_version.txt").write_text(expected_version, encoding="utf-8")
+          (runner_temp / "falsiflow_pypi_version.txt").write_text(published_version, encoding="utf-8")
+          PY
+      - name: Write structured external evidence
+        shell: bash
+        env:
+          FALSIFLOW_REPO_URL_INPUT: ${{ inputs.repo_url }}
+          FALSIFLOW_PUBLIC_DEMO_URL: ${{ inputs.public_demo_url }}
+          FALSIFLOW_PYPI_PACKAGE_URL: ${{ inputs.pypi_package_url }}
+          FALSIFLOW_EXPECTED_VERSION: ${{ inputs.expected_version }}
+          FALSIFLOW_WORKFLOW_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
+          FALSIFLOW_REPOSITORY: ${{ github.repository }}
+        run: |
+          python - <<'PY'
+          import json
+          import os
+          import pathlib
+          import tomllib
+
+          runner_temp = pathlib.Path(os.environ["RUNNER_TEMP"])
+
+          def text_file_or_empty(name: str) -> str:
+              path = runner_temp / name
+              return path.read_text(encoding="utf-8").strip() if path.exists() else ""
+
+          expected_version = text_file_or_empty("falsiflow_expected_version.txt") or os.environ.get("FALSIFLOW_EXPECTED_VERSION", "").strip()
+          if not expected_version:
+              with pathlib.Path("pyproject.toml").open("rb") as handle:
+                  expected_version = str(tomllib.load(handle).get("project", {}).get("version", "")).strip()
+          published_version = text_file_or_empty("falsiflow_pypi_version.txt")
+          if not published_version:
+              payload = json.loads((runner_temp / "falsiflow_pypi_project.json").read_text(encoding="utf-8"))
+              published_version = str(payload.get("info", {}).get("version", "")).strip()
+
+          repo_url = os.environ.get("FALSIFLOW_REPO_URL_INPUT") or f"https://github.com/{os.environ['FALSIFLOW_REPOSITORY']}"
+          demo_url = os.environ["FALSIFLOW_PUBLIC_DEMO_URL"]
+          pypi_url = os.environ["FALSIFLOW_PYPI_PACKAGE_URL"]
+          workflow_url = os.environ["FALSIFLOW_WORKFLOW_URL"]
+          evidence = {
+              "status": "external_evidence_ready",
+              "version": 1,
+              "instructions": "Generated by the Falsiflow External Evidence workflow after public demo, PyPI package, checkout pipx, public-package pipx, and Windows smoke checks passed.",
+              "checks": {
+                  "public_repo_url": {
+                      "status": "passed",
+                      "url": repo_url,
+                      "evidence_url": workflow_url,
+                      "notes": "Workflow ran from the public GitHub repository.",
+                  },
+                  "public_demo_url": {
+                      "status": "passed",
+                      "url": demo_url,
+                      "evidence_url": workflow_url,
+                      "artifact": "falsiflow_public_demo_index.html",
+                      "notes": "curl fetched the hosted static demo and found Falsiflow launch text.",
+                  },
+                  "pypi_package_url": {
+                      "status": "passed",
+                      "url": pypi_url,
+                      "evidence_url": workflow_url,
+                      "artifact": "falsiflow_pypi_project.json",
+                      "verification_url": "https://pypi.org/pypi/falsiflow/json",
+                      "expected_version": expected_version,
+                      "published_version": published_version,
+                      "notes": "curl fetched the PyPI JSON API and confirmed the published package name and version matched the expected release.",
+                  },
+                  "pipx_smoke": {
+                      "status": "passed",
+                      "command": "python -m pipx install --force . && python -m pipx run --spec . falsiflow start --check --json",
+                      "workflow_url": workflow_url,
+                      "artifact": "falsiflow_pipx_start.json",
+                      "notes": "Ubuntu checkout-based pipx install and browser-entry smoke passed.",
+                  },
+                  "pipx_public_package": {
+                      "status": "passed",
+                      "command": "python -m pipx run --spec falsiflow falsiflow start --check --json",
+                      "workflow_url": workflow_url,
+                      "artifact": "falsiflow_public_package_start.json",
+                      "notes": "Ubuntu pipx run from the published package passed.",
+                  },
+                  "windows_powershell": {
+                      "status": "passed",
+                      "command": ".\\scripts\\install_local.ps1 -FromLocal . -Check",
+                      "workflow_url": workflow_url,
+                      "notes": "Windows PowerShell installer smoke passed.",
+                  },
+              },
+          }
+          pathlib.Path("falsiflow_external_evidence.json").write_text(json.dumps(evidence, indent=2, sort_keys=True), encoding="utf-8")
+          PY
+      - name: Verify external readiness with structured evidence
+        shell: bash
+        env:
+          FALSIFLOW_REPO_URL: ${{ inputs.repo_url || format('https://github.com/{0}', github.repository) }}
+          FALSIFLOW_PUBLIC_DEMO_URL: ${{ inputs.public_demo_url }}
+          FALSIFLOW_PYPI_PACKAGE_URL: ${{ inputs.pypi_package_url }}
+        run: |
+          python scripts/falsiflow.py external-check \
+            --out-dir falsiflow_external_check \
+            --evidence falsiflow_external_evidence.json \
+            --force \
+            --strict \
+            --json > falsiflow_external_readiness.stdout.json
+      - name: Upload external evidence artifact
+        uses: actions/upload-artifact@v7
+        with:
+          name: falsiflow-external-evidence
+          path: |
+            falsiflow_external_evidence.json
+            falsiflow_external_readiness.stdout.json
+            falsiflow_external_check/external_readiness.json
+            falsiflow_external_check/external_readiness.md
+            ${{ runner.temp }}/falsiflow_public_demo_index.html
+            ${{ runner.temp }}/falsiflow_pypi_project.json
+            ${{ runner.temp }}/falsiflow_expected_version.txt
+            ${{ runner.temp }}/falsiflow_pypi_version.txt

falsiflow-0.1.2/.github/workflows/falsiflow-pages.yml

@@ -0,0 +1,54 @@
+name: Falsiflow Pages Demo
+
+on:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+concurrency:
+  group: pages
+  cancel-in-progress: true
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout public repository
+        shell: bash
+        run: |
+          git init .
+          git remote add origin "https://github.com/${GITHUB_REPOSITORY}.git"
+          git fetch --no-tags --depth=1 origin "+${GITHUB_REF}:${GITHUB_REF}"
+          git checkout --detach "${GITHUB_SHA}"
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - name: Configure Pages
+        uses: actions/configure-pages@v6
+        with:
+          enablement: true
+      - name: Build public demo package
+        run: |
+          python scripts/falsiflow.py demo-package \
+            --out-dir public_demo \
+            --force \
+            --json > /tmp/falsiflow_demo_package.json
+          cp /tmp/falsiflow_demo_package.json public_demo/demo_package_summary.stdout.json
+      - name: Upload Pages artifact
+        uses: actions/upload-pages-artifact@v5
+        with:
+          path: public_demo
+
+  deploy:
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@v5

falsiflow-0.1.2/.github/workflows/falsiflow-publish.yml

@@ -0,0 +1,57 @@
+name: Falsiflow Publish
+
+on:
+  workflow_dispatch:
+  release:
+    types:
+      - published
+
+permissions:
+  contents: read
+  id-token: write
+
+jobs:
+  build-dist:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout public repository
+        shell: bash
+        run: |
+          git init .
+          git remote add origin "https://github.com/${GITHUB_REPOSITORY}.git"
+          git fetch --no-tags --depth=1 origin "+${GITHUB_REF}:${GITHUB_REF}"
+          git checkout --detach "${GITHUB_SHA}"
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - name: Build and check distributions
+        run: |
+          python -m pip install --upgrade build twine
+          python -m build
+          python -m twine check dist/*
+      - name: Release check
+        run: |
+          python scripts/falsiflow.py release-check \
+            --out-dir /tmp/falsiflow_release_check \
+            --json > /tmp/falsiflow_release_check.json
+      - name: Upload distribution artifact
+        uses: actions/upload-artifact@v7
+        with:
+          name: falsiflow-dist
+          path: dist/*
+
+  publish-pypi:
+    if: github.event_name == 'release'
+    needs: build-dist
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/project/falsiflow/
+    steps:
+      - name: Download distribution artifact
+        uses: actions/download-artifact@v8
+        with:
+          name: falsiflow-dist
+          path: dist
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1