fix: remove private customer artifacts

.github/workflows/ci.yml

@@ -144,7 +144,6 @@ jobs:
         working-directory: apps/homescreen
         run: |
           bun install --frozen-lockfile
-          bun run orchard:contract-check
           bun run build
 
   rigor:

.github/workflows/desktop-release.yml

@@ -90,6 +90,14 @@ jobs:
           npm ci
           bun install --cwd apps/homescreen --frozen-lockfile
 
+      - name: Scan the public release contents
+        if: inputs.mode == 'release'
+        env:
+          UNDERSTUDY_PUBLIC_SAFETY_PRIVATE_TERMS: ${{ secrets.UNDERSTUDY_PUBLIC_SAFETY_PRIVATE_TERMS }}
+        run: |
+          npm run skills:validate -- --release
+          npm run package:smoke -- --release
+
       - name: Validate release credentials
         env:
           APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}

AGENTS.md

@@ -101,6 +101,15 @@ OSS from the first commit.
   its data, spend, destination, or production-impact envelope.
 - No customer data, private traces, secrets, private repo names, or internal
   incident notes.
+- Do not put customer or partner names, aliases, workload identifiers, metrics,
+  or derived artifacts in tracked paths or content, branch or commit names, pull
+  request metadata, or review comments. Use clearly synthetic placeholders.
+- Before a public release, an authorized maintainer must provide the private,
+  newline-delimited `UNDERSTUDY_PUBLIC_SAFETY_PRIVATE_TERMS` value while running
+  `npm run skills:validate -- --release` and
+  `npm run package:smoke -- --release`. A term may be followed on the same line
+  by tab-separated exact safe enclosing tokens. Untrusted pull-request jobs use
+  synthetic matcher tests and do not receive this private value.
 - Examples must use synthetic data or small public fixtures.
 - The desktop connects to the production remote-training control plane
   (`train.understudylabs.com`) as its default. This is no longer experimental: