Umbrella-only documentation and release-integrity patch.
- Corrects the public release state shown on npm.
- Adds a trusted Ubuntu preparation workflow for canonical Linux tarball identities.
- Keeps all eight leaf package versions unchanged; the protected publisher verified their exact registry hashes and provenance and skipped them.
- Supports Node.js 22 LTS, 24 LTS, and 26 Current.
- Published through npm Trusted Publishing with SLSA provenance.
Verified umbrella identity:
- Commit: dbc1605
- Tarball: productloop-os-0.2.3.tgz
- SHA-256: 34e99ed6ce53d5632e6043ddc31826c5d46ca22c37773803b49b58b67ef16a21
- npm integrity: sha512-p4GibES2i5RlaNn+iXi4v8JwM5o08ZjFNii1YKZw9KsiMV09gg0RFCjXJWhkf4Hz0D1wHa8KC4rYpWJbrKkVkA==
The protected run verified all nine package artifacts, both dependency audits, registry signatures, and a joint clean installation.