flatline 0.1.1__tar.gz

flatline-0.1.1/.clang-format

@@ -0,0 +1,4 @@
+BasedOnStyle: Google
+Standard: c++20
+ColumnLimit: 99
+IndentWidth: 4

flatline-0.1.1/.gitignore

@@ -0,0 +1,56 @@
+# Byte-compiled / optimized / DLL cache
+__pycache__/
+*.py[cod]
+*$py.class
+
+# C extensions and shared libraries
+*.so
+*.o
+*.a
+*.dylib
+
+# Distribution / packaging
+build/
+dist/
+*.egg-info/
+*.egg
+wheels/
+
+# Virtual environments
+.venv/
+venv/
+ENV/
+
+# pytest
+.pytest_cache/
+
+# Coverage
+htmlcov/
+.coverage
+.coverage.*
+coverage.xml
+
+# mypy / type checkers
+.mypy_cache/
+.pytype/
+
+# Ruff
+.ruff_cache/
+
+# Tox
+.tox/
+
+# Claude Code
+.claude/settings.local.json
+docs/tasks/
+
+# IDE
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+
+# OS
+.DS_Store
+Thumbs.db

flatline-0.1.1/.gitmodules

@@ -0,0 +1,3 @@
+[submodule "third_party/ghidra"]
+	path = third_party/ghidra
+	url = https://github.com/NationalSecurityAgency/ghidra

flatline-0.1.1/CHANGELOG.md

@@ -0,0 +1,106 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.1.1] - 2026-03-28
+
+### Added
+- Opt-in enriched output via `DecompileRequest.include_enriched_output` and
+  `DecompileResult.enriched_output`, exposing post-simplification pcode ops and
+  varnode use-def graphs as frozen value types
+
+### Changed
+- `VersionInfo` now exposes `decompiler_version` (Ghidra engine version) instead
+  of `upstream_tag` and `upstream_commit`
+- `ghidra-sleigh` dependency is no longer pinned to an exact version
+- Compliance attribution references the vendored decompiler source via the
+  `third_party/ghidra` git submodule instead of hardcoded tag/commit constants
+- `metadata["decompiler_version"]` in `DecompileResult` now always reflects the
+  Ghidra decompiler engine version, not the flatline package version
+- Manual TestPyPI release dispatches now require a unique package version
+  instead of silently skipping duplicate uploads
+- The supported runtime-host contract now includes macOS arm64 and Windows
+  x86_64; Linux aarch64 and macOS x86_64 remain published-wheel-only targets
+  pending dedicated equivalent-contract lanes
+- The Tier-1 wheel matrix is now validated end to end on TestPyPI ahead of the
+  first production PyPI publish
+- Release readiness tooling and docs now audit the staged `0.1.1` production
+  publish path after collapsing the prior `0.1.1.dev1` TestPyPI candidate, and
+  they keep the GitHub-release trigger to PyPI explicit
+- The public `0.1.x` release-line policy now explicitly allows
+  backward-compatible support expansion and opt-in capabilities to ship as
+  documented patch releases while flatline remains pre-1.0
+
+### Removed
+- `UPSTREAM_TAG` and `UPSTREAM_COMMIT` constants from `flatline._version`
+- Runtime pin-drift warning when `ghidra-sleigh` version differs from a
+  hardcoded baseline
+
+## [0.1.0] - 2026-03-15
+
+### Added
+- Native C++ decompiler bridge via nanobind (session lifecycle, target selection,
+  decompile pipeline)
+- End-to-end decompilation verified: x86_64 produces correct structured C output
+- Ghidra decompiler library compilation and native startup/pair enumeration
+- Runtime-data bridge enumeration with fallback for malformed `.ldefs`
+- `ghidra-sleigh` package design for compiled Sleigh runtime data (ADR-010)
+- `.sla` assets compiled for priority ISAs (DATA, x86, AARCH64, RISCV, MIPS)
+- Meson build system with C++20, nanobind, debug/release/debugoptimized build types
+- Python data models and `FlatlineError` error hierarchy
+- `AnalysisBudget` frozen value type with per-request `max_instructions` default
+  of 100,000 instructions (ADR-005)
+- Structured `WarningItem` / `ErrorItem` diagnostics with full filesystem paths
+  for debuggability (ADR-006)
+- `configuration_error` category for user-fixable install, startup, and
+  runtime-data failures (ADR-011)
+- Compliance process: `LICENSE` + `NOTICE` shipped in wheels/sdists, pinned-source
+  manifest in `docs/compliance.md`, and `python tools/compliance.py` audit (ADR-007)
+- Auto-discovery of `ghidra-sleigh` runtime data when `runtime_data_dir` is omitted,
+  with a runtime warning on upstream pin drift (ADR-004)
+- Default-install footprint measurement via `python tools/footprint.py` with
+  baseline recorded in `docs/footprint.md`
+- Built artifact audit for wheel/sdist validation via `python tools/artifacts.py`
+- Committed native memory fixtures for x86_64, x86_32, AArch64, RISC-V 64, and
+  MIPS32 under `tests/fixtures/*.hex`
+- Fixture source snippets and regeneration script under `tests/fixtures/sources/`
+- Warm-session p95 regression budgets across priority-ISA add fixtures and
+  the switch fixture
+- Switch-site regression baseline asserting recovered site `0x1009` and 9 targets
+- GitHub Actions CI with lint/build on `ubuntu-latest`, test/regression lanes
+  pinned to `ubuntu-24.04`, and Python 3.13/3.14 matrix
+- Tox configuration for multi-version Python testing (py313, py314, dev, lint)
+- Code style guide enforcing ASCII-only source files via ruff
+- ADR-009 decided: ISA variant scope (x86 32+64, ARM64, RISC-V 64, MIPS32)
+- ADR-010 decided: separate `ghidra-sleigh` pip package for runtime data
+- Initial public release notes documenting contract guarantees, support tiers,
+  known-variant limits, and upgrade policy
+- Public artifact review checklist documenting the final human sign-off gate
+  for the initial public release
+- Initial public release workflow documentation and a release-readiness audit
+  that keeps the `0.1.0` first-public-tag recommendation explicit
+
+### Changed
+- Renamed project from ghidralib to flatline repo-wide
+- Repository agent instructions now live in `AGENTS.md` / `CLAUDE.md`
+- Upstream pin bumped to `Ghidra_12.0.4_build` (`e40ed13014`)
+- `third_party/ghidra` tracked as a git submodule instead of a plain checkout
+- Tox `py313`/`py314` envs now build and test installed wheel artifacts
+  instead of the source tree
+- Dev-only release helpers moved from `src/flatline` to `tools/flatline_dev/`,
+  excluded from wheel and sdist distribution artifacts
+- Version strings normalized to PEP 440 form `0.1.0.dev0`
+- Initial public release workflow now keeps the manual artifact checklist
+  source-controlled while the review notes stay outside the repo
+
+### Fixed
+- Size-aware `std::string` construction for `nb::bytes` to preserve embedded
+  null bytes
+- Editable native rebuild nanobind paths
+- Tolerance for malformed `.ldefs` during runtime-data enumeration
+- Dist script reference guarded for sdist-to-wheel builds

flatline-0.1.1/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

flatline-0.1.1/NOTICE

@@ -0,0 +1,15 @@
+flatline redistribution notice
+
+flatline itself is licensed under Apache-2.0. See LICENSE.
+
+This package compiles and links against the Ghidra decompiler engine. The
+decompiler source is vendored under third_party/ghidra as a git submodule
+from the NSA/ghidra repository. The upstream Ghidra project is licensed
+under Apache-2.0; see third_party/ghidra/LICENSE and third_party/ghidra/NOTICE
+for upstream attribution.
+
+Default runtime data is provided by the separate ghidra-sleigh dependency.
+
+Test-fixture redistribution note: tests/fixtures/README.md documents that the
+committed fixture bytes are synthetic machine code authored in-repo and are
+redistributable.

flatline-0.1.1/PKG-INFO

@@ -0,0 +1,23 @@
+Metadata-Version: 2.4
+Name: flatline
+Version: 0.1.1
+Summary: Python wrapper around the Ghidra decompiler
+License-Expression: Apache-2.0
+License-File: LICENSE
+License-File: NOTICE
+Requires-Python: >=3.13
+Requires-Dist: ghidra-sleigh
+Provides-Extra: test
+Requires-Dist: pytest>=8.0; extra == "test"
+Requires-Dist: PyYAML>=6.0; extra == "test"
+Provides-Extra: lint
+Requires-Dist: ruff>=0.9; extra == "lint"
+Provides-Extra: docs
+Requires-Dist: mkdocs-material>=9.0; extra == "docs"
+Requires-Dist: mkdocstrings[python]>=0.24; extra == "docs"
+Requires-Dist: mike>=2.0; extra == "docs"
+Provides-Extra: dev
+Requires-Dist: flatline[lint,test]; extra == "dev"
+Requires-Dist: build>=1.2; extra == "dev"
+Requires-Dist: tox>=4.0; extra == "dev"
+

flatline-0.1.1/README.md

@@ -0,0 +1,215 @@
+# flatline
+
+Python wrapper around the Ghidra decompiler. Provides a stable, pip-installable
+interface for single-function decompilation with structured output -- no Ghidra
+installation required.
+
+Named after Dixie Flatline from William Gibson's *Neuromancer* (1984) -- a dead
+hacker's ROM construct, a consciousness extracted from hardware. A fitting
+metaphor for decompilation: extracting meaning from dead code.
+
+## Features
+
+- **Single-function decompilation** -- pass a memory image, base address, and
+  function entry point; get back structured C output with diagnostics.
+- **Multi-ISA** -- supports any Ghidra-supported target architecture. Priority
+  fixture-backed confidence for x86 (32/64), ARM64, RISC-V 64, and MIPS32;
+  other bundled ISAs remain best-effort.
+- **Packaged runtime data** -- compiled Sleigh runtime assets come from the
+  companion `ghidra-sleigh` package, so production installs do not depend on a
+  vendored `third_party/ghidra` tree.
+- **Deterministic** -- repeated decompiles of the same input produce
+  structurally equivalent output.
+
+## Requirements
+
+- Python 3.13+
+- Supported runtime host contract: Linux x86_64, macOS arm64, Windows x86_64
+- Published wheels: Linux x86_64/aarch64, Windows x86_64, macOS x86_64/arm64
+
+Building from source (platforms without pre-built wheels, or forced native
+builds) requires a C++20 compiler, Ninja, and zlib headers:
+
+| Platform | Install command |
+|----------|----------------|
+| Ubuntu/Debian | `sudo apt-get install g++ ninja-build zlib1g-dev` |
+| Fedora/RHEL | `sudo dnf install gcc-c++ ninja-build zlib-devel` |
+| macOS | `brew install ninja zlib` (Xcode provides the C++ compiler) |
+| Windows | Visual Studio with C++ workload; `pip install ninja`; `vcpkg install zlib:x64-windows` |
+
+## Installation
+
+```bash
+pip install flatline
+```
+
+`pip install flatline` uses pre-built wheels on Linux x86_64/aarch64, Windows
+x86_64, and macOS x86_64/arm64, so those installs work without a local
+compiler. The supported runtime-host contract currently covers Linux x86_64,
+macOS arm64, and Windows x86_64. Linux aarch64 and macOS x86_64 remain
+published-wheel targets until they gain dedicated equivalent-contract lanes.
+Platforms outside that wheel matrix fall back to source builds and therefore
+need a C++20 compiler plus Ninja.
+
+For development:
+
+```bash
+python -m venv .venv
+source .venv/bin/activate
+pip install -e ".[dev]"
+```
+
+`flatline` depends on `ghidra-sleigh` for its default runtime-data path, so
+`DecompilerSession` and the one-shot wrappers auto-discover runtime data when
+`runtime_data_dir` is omitted. `runtime_data_dir` remains available as an
+explicit override for custom or reduced runtime-data roots.
+
+### Native bridge
+
+Real decompilation requires the native bridge -- a compiled C++ extension
+(`flatline._flatline_native`) that links against the Ghidra decompiler library.
+Without it the Python API is fully importable, but every `decompile_function`
+call returns a `configuration_error` result.  `list_language_compilers` still
+returns runtime-data pairs discovered from the installed `ghidra-sleigh`
+package.
+
+The build has three modes, controlled by the `native_bridge` Meson option:
+
+| Mode | How to set | Behaviour |
+|------|------------|-----------|
+| `auto` (default) | omit the flag | Builds the extension when a C++20 compiler and Ninja are found; silently falls back to the pure-Python stub otherwise. |
+| `enabled` | `-Dnative_bridge=enabled` | Forces the native build; fails at install time if prerequisites are missing. Use this to validate the full decompilation stack. |
+| `disabled` | `-Dnative_bridge=disabled` | Skips the native build entirely. All decompilation calls return `configuration_error`. |
+
+Force the native build explicitly (requires a C++20 compiler and Ninja):
+
+```bash
+pip install -e ".[dev]" -Csetup-args=-Dnative_bridge=enabled
+```
+
+Disable the native build explicitly (pure-Python stub only):
+
+```bash
+pip install -e ".[dev]" -Csetup-args=-Dnative_bridge=disabled
+```
+
+Tests that require the native extension are marked `requires_native` and
+auto-skip with an actionable reason when `flatline._flatline_native` is not
+importable.
+
+## Quick start
+
+```python
+from flatline import DecompileRequest, decompile_function
+
+result = decompile_function(DecompileRequest(
+    memory_image=raw_bytes,
+    base_address=0x400000,
+    function_address=0x401000,
+    language_id="x86:LE:64:default",
+    compiler_spec="gcc",
+))
+
+print(result.c_code)
+```
+
+Pass `runtime_data_dir=...` only when you need to override the dependency-backed
+default runtime-data root.
+
+## Development
+
+```bash
+# Activate the venv (required for all commands)
+source .venv/bin/activate
+
+# Run tests + lint across configured environments
+tox
+
+# Run lint only
+tox -e lint
+
+# Run unit tests only
+tox -e py313,py314 -- -m unit
+
+# Run native-dependent tests (skipped automatically when the extension is absent)
+tox -e py313,py314 -- -m requires_native
+```
+
+`tox` test envs build and install `flatline[test]` wheels inside `.tox/`, so
+the suite exercises the packaged artifact rather than `PYTHONPATH=src`.
+Repo-only release and diagnostic helpers live under `tools/` and are
+intentionally absent from wheel and sdist artifacts.
+
+## Documentation
+
+Install the docs dependencies:
+
+```bash
+pip install -e ".[docs]"
+```
+
+**Local preview:**
+
+```bash
+PYTHONPATH=src mkdocs serve
+```
+
+Then open http://127.0.0.1:8000.
+
+**Build static site:**
+
+```bash
+PYTHONPATH=src mkdocs build
+```
+
+Output goes to `site/`.
+
+`PYTHONPATH=src` lets mkdocstrings import the pure-Python modules for API
+reference generation without requiring a native build.
+
+## Release Notes
+
+Project history lives in [CHANGELOG.md](CHANGELOG.md). Update it for every
+release using the Keep a Changelog structure already in the file.
+The release-facing contract guarantees, support tiers, known-variant limits,
+and upgrade policy for the public `0.1.x` line live in
+[docs/release_notes.md](docs/release_notes.md).
+The public artifact review checklist and manual approval hold point live in
+[docs/release_review.md](docs/release_review.md).
+The current production release workflow and the active `.devN` to public-version
+recommendation live in [docs/release_workflow.md](docs/release_workflow.md).
+GitHub Actions release publishing lives in
+[.github/workflows/release.yml](.github/workflows/release.yml): published
+GitHub releases go to PyPI, while manual dispatch uploads to TestPyPI.
+Manual TestPyPI dispatches require a unique version and now fail on duplicate
+uploads instead of reusing an older TestPyPI artifact.
+Redistribution/compliance guidance lives in [NOTICE](NOTICE) and
+[docs/compliance.md](docs/compliance.md). The current default-install footprint
+baseline and size-policy note live in [docs/footprint.md](docs/footprint.md).
+The current P6 host-expansion feasibility record lives in
+[docs/host_feasibility.md](docs/host_feasibility.md).
+
+## Project status
+
+The `0.1.0` MVP release is available. P5 initial public release is complete,
+with release-facing guarantees and support-policy notes captured in
+[docs/release_notes.md](docs/release_notes.md). The current production publish
+workflow for the staged `0.1.1` release is recorded in
+[docs/release_workflow.md](docs/release_workflow.md), and the human approval
+gate remains documented in [docs/release_review.md](docs/release_review.md).
+P6 host-feasibility work now promotes macOS arm64 and Windows x86_64 alongside
+Linux x86_64 in the supported runtime-host tier. The remaining P6.5 step is
+the first production PyPI publish of the Tier-1 wheel set. `python tools/release.py`
+audits the current release candidate, while
+[docs/wheel_matrix.md](docs/wheel_matrix.md),
+[docs/host_feasibility.md](docs/host_feasibility.md), and
+[docs/roadmap.md](docs/roadmap.md) remain the source-of-truth phase documents.
+
+## Acknowledgments
+
+This project was developed with the support of [Quarkslab](https://github.com/quarkslab).
+
+## License
+
+Apache-2.0. See [LICENSE](LICENSE) for the project license and [NOTICE](NOTICE)
+for redistribution-time attribution.