RIPDPI: Skill for Codex

RIPDPI Release

Release one exact commit through the workflows declared in quality/release-gates/release-contract.json. Run python3 scripts/ci/check_release_contract.py before trusting this guidance; stop if the contract and current source disagree.

Resolve the release identity

Never carry a version snapshot in this skill. Derive and record:

• the user-requested target version and vX.Y.Z tag;
• the latest reachable stable tag as the changelog base;
• ripdpiVersionName and ripdpiVersionCode from app/build.gradle.kts;
• the exact origin/main and candidate SHAs;
• live remote tag, release, workflow, and asset state.

The target tag must match the requested version, and a Play version code must increase. Stop on ambiguity, divergence, or an existing target tag/release.

Authority boundary

Treat these as separate external operations:

1. Inspect and prepare — create a dedicated worktree, update source, validate, and commit locally.
2. Integrate candidate — rebase, fast-forward main, and push main; require explicit authorization under AGENTS.md.
3. Produce candidate — dispatch .github/workflows/release-candidate.yml for the exact remote main SHA and requested release_tag.
4. Publish — bind the successful candidate run, create and push the immutable tag, and verify the resulting release; require explicit authorization showing the exact SHA, tag, candidate run, assurance profile, and notes path.

A request to prepare does not authorize steps 2–4. Never print, copy, decode, or inspect signing secret values; they are consumed only by the signing environment.

Assurance profiles

Use the profile names and meanings from the release contract:

• artifact-publish is the automated release-blocking profile: exact-SHA main CI, secret-free release verification, immutable signed candidate, manifest, signatures, ELF checks, attestations, and tag-bound promotion;
• device-qualified adds separately recorded emulator, physical-device, or owner-lab evidence without silently changing artifact-publish results;
• owner-accepted records an explicit owner decision accepting named evidence gaps. It never turns FAIL, skipped, or missing evidence into PASS.