# Release checklist

## Clean repo
- [ ] `git ls-files` scanned: no secrets or keys, no personal paths, no real people's names or footage, no large binaries (models, videos, installers).
- [ ] Git history checked too; if private material was ever committed, publish a fresh history.
- [ ] Internal notes and task files ignored (kept on disk, not published).

## Docs
- [ ] README: what it is, a screenshot, download, how it works, privacy, requirements, build from source, licences.
- [ ] LICENSE, CONTRIBUTING, SECURITY (private reporting), CODE_OF_CONDUCT, issue and PR templates.
- [ ] THIRD_PARTY up to date; GPL source note.

## Build
- [ ] Version number bumped everywhere (one source of truth).
- [ ] Release notes for this version: requirements, install steps, what's new.
- [ ] Built by CI from the tag on a clean machine; tests run in the same workflow.
- [ ] The installed app tested end to end.

## Release
- [ ] Installer + `SHA256SUMS.txt` + source/licence notes attached.
- [ ] A stable file name for "latest download" links.
- [ ] Draft reviewed, then published.

## Landing page
- [ ] Version, size, checksum updated (one config file).
- [ ] Download button in the first screen on laptop and phone; works with JS off.
- [ ] Lighthouse ≥ 95 on mobile; every link checked.
- [ ] No trackers; no real people in images.