[edithatogo]

Summary

• add a manual-only, protected-environment disposable publication lifecycle canary
• enforce dedicated-origin, production-denylist, exact-confirmation, unique-marker, cleanup, redaction, and uncertain-outcome guards
• add Node 20/22/24/26 and Ubuntu/Windows/macOS compatibility evidence for CLI, clients, and npm packaging
• separate repository canary, production-observed, and client-support maturity
• align Claude, Codex, Copilot, Gemini, and VS Code launch manifests with @edithatogo/substack-publisher

Validation

• npm run ci
• npm run typecheck
• npm test: 917 passed
• npm run test:disposable-canary:unit: 4 passed
• npm run test:live-canary:unit: 5 passed
• npm run test:smoke: 6 passed
• npm run integrations:validate
• npm run contracts:check
• npm run governance:github-programme
• npm pack --dry-run
• npm audit --omit=dev: 0 vulnerabilities
• Prettier checks

Evidence boundary

The repository implementation is complete. A live disposable-publication receipt remains owner-gated by the dedicated publication, protected GitHub environment, reviewed endpoint contract, and tester cookie, so parent #397 remains open.

Closes #398
Closes #399
Closes #400
Closes #401

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!