Release Agent Code Guard 0.1.0

[stef-k]

Summary

• set the canonical pyproject.toml version to 0.1.0
• replace temporary pre-publication installation wording with the canonical published route
• preserve the version-matched bundled skill architecture and all runtime semantics
• prepare Phase A only; no merge, tag, GitHub Release, or PyPI publication

Part of #88

Release wording audit

Match	File	Classification	Action
0.1.0.dev0; Pre-release; not yet published; checkout-only install	README.md	Current-facing	Changed: removed banner and made pipx install agent-code-guard primary
Current pre-release installation; 0.1.0.dev0; not published to PyPI; checkout-only install	docs/usage.md	Current-facing	Changed: published pipx/pip/uv routes are primary; source installs explicitly labeled
not yet published on PyPI; local built artifacts or the repository	docs/skill-distribution.md	Current-facing	Changed: pip/pipx/uv receive command, runtime, and exact version-matched skill payload
0.1.0.dev0	pyproject.toml	Current-facing canonical metadata	Changed to 0.1.0
pre-release; 0.1.0.dev0	docs/default-threshold-calibration.md	Historical/evidence	Retained: records the maturity context for a past default-threshold behavior change, not current installation or release state
latest available release	SECURITY.md	Current-facing, version-agnostic	Retained: remains accurate for 0.1.0 and later releases

No other tracked-text matches were found for the requested stale-release phrase set.

Local validation

• python -m unittest discover -s tests: PASS, 270 tests
• python -m compileall -q src skills research tests: PASS
• git diff --check origin/main...HEAD: PASS
• Code Guard over origin/main...HEAD: PASS, no REVIEW findings
• python -m build: PASS
• python -m twine check dist/*: PASS for wheel and sdist
• clean wheel install outside checkout: help PASS; metadata 0.1.0; skill path PASS; export marker 0.1.0; parser fixture overall PASS
• clean sdist install outside checkout: help PASS; metadata 0.1.0; skill path PASS; export marker 0.1.0; parser fixture overall PASS

Artifacts:

• agent_code_guard-0.1.0-py3-none-any.whl — SHA-256 fef0d585a7006e1c1f5c35982d7ee90b213f686bbc31197d6f82ba9e3ae02841
• agent_code_guard-0.1.0.tar.gz — SHA-256 4e8a5ffe96abe25b7f8e90c4402b162a238479a80ee0d1d1717df84e53ebbff3

Publication readiness

The PyPI project does not exist yet (live JSON endpoint: 404). The repository workflow already uses the approved OIDC architecture: .github/workflows/release.yml, publish environment pypi, job-level id-token: write, and no PyPI token/password secret.

Before Phase B publication, an authenticated PyPI owner must register a pending GitHub Trusted Publisher under the PyPI account Publishing page with:

• PyPI project: agent-code-guard
• Owner: stef-k
• Repository: agent-code-guard
• Workflow: release.yml
• Environment: pypi

Prepared v0.1.0 release notes

Agent Code Guard 0.1.0

First public release of deterministic guardrails for agent-assisted software development.

Highlights:

• deterministic PASS / REVIEW / FAIL model;
• six default guards;
• Git changed-work, PR/base-ref, no-VCS, and full-audit workflows;
• parser-backed support for the documented language set;
• .md documentation guards;
• version-matched bundled agent skill;
• CPython 3.10–3.14;
• documented Windows/macOS/Linux binary envelope;
• fail-closed parser/configuration behavior.

Installation:

pipx install agent-code-guard

Quick start:

code-guard . --changed-only

Phase boundary

Do not merge this PR until architecture approval. Phase A created no v0.1.0 tag, no GitHub Release, and no PyPI publication. On this PR, Release / Build and validate must pass and Release / Publish to PyPI must remain skipped.

Exact-head CI results

Head 3b09aa3401288d2febf71b1281026a05a10826cf:

• analyzer (windows-latest): PASS
• analyzer (ubuntu-latest): PASS
• analyzer (macos-latest): PASS
• Python 3.10 compatibility: PASS
• Python 3.11 compatibility: PASS
• Python 3.12 compatibility: PASS
• Python 3.13 compatibility: PASS
• Python 3.14 compatibility: PASS
• Python compatibility aggregate: PASS
• Release / Build and validate: PASS
• Release / Publish to PyPI: SKIPPED
• CodeQL Analyze (actions): PASS
• CodeQL Analyze (python): PASS

[stef-k]

Architecture/release review complete at exact head 3b09aa3. READY TO MERGE. Version is 0.1.0, release wording is current-facing, runtime/dependencies/workflows are unchanged, Production Analysis is green across Windows/Ubuntu/macOS and Python 3.10-3.14 + aggregate, Release Build and validate passed, Publish to PyPI remained skipped, and there are no unresolved review threads. PyPI pending Trusted Publisher has now been configured by the maintainer, satisfying the Phase B prerequisite.