What problem does it solve? Publishing commits via push, release, or pull request can expose unreviewed content, credentials, or wrong destinations. This Skill enforces a review-then-execute workflow so every publication is bound to an exact reviewed commit and destination before it goes out. ## Core Features & Use Cases - Binding and review: The publish-bind script scans newly reachable commits, objects, and diffs, then binds one resolved push endpoint, branch, and reviewed commit to an immutable ID. - Controlled execution: publish-apply performs a single force-with-lease push per approved binding with normal hooks enabled, and publish-verify confirms the remote state via read-only ls-remote and repository verification targets. - CI rerun handling: Diagnoses failed CI jobs on the exact published commits and performs bounded gh run rerun retries without requiring a second approval. - Use Case: Before pushing a release branch to a shared remote, run the publish workflow to review every new commit, get one consolidated approval for the push set, execute each binding in order, and verify the remote state and CI results. ## Quick Start Ask the agent to run the publish skill to review and push the current HEAD to its tracked remote with full verification.
