refactor(ci): align product and release task boundaries

[f0rr0]

Summary

• give release products independent semantic compile, unit, package, and qualification tasks
• remove duplicate aliases and source-spelling assertions while retaining artifact and behavior proofs
• narrow affected CI and release-phase work to the contracts each phase owns
• harden release PR normalization, dependency synchronization, pacing, evidence retention, and environment policy
• record the CI, release, product-boundary, and repository-organization audits

Validation

• tools/dev/bun.sh tools/release/release-check.mjs
• bash tools/policy/check-workflows.sh
• Node Direct and WASIX N-API compile, unit, and package tasks
• Postmaster compile and unit/carrier tests
• xtask, performance harness, extension model, release metadata, policy syntax, repository tooling, docs, formatting, and pre-commit checks
• git diff --check

The audited baseline is exact origin/main commit 6b3e16aed489507cc9140c0dacb677785792da7d. Hosted macOS/iOS, Android-device, Windows, OIDC, protected-environment, and registry publication behavior remains for GitHub qualification.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
oliphaunt-docs	Ready	Preview	Sep 3, 2026 10:19am UTC