# Publish-Site Release Plan

Date: 2026-06-02
Run level: `preview_bound`
Milestone: 2, after local Build-1 scorecard and review gate

## Position

Public deployment to `varro.mentormind.com.au` is a goal of Build 1, but not a prerequisite for
milestone 1. This file is the smallest safe first step: it defines the route and evidence expected
from a future Rust `publish-site` adapter without attempting deployment.

## Required Gate Inputs

- Local Varro V1 artifact exists and has passed local QA.
- Build-1 scorecard and SPC point 2 are recorded.
- Claude Code review gate passes or findings are remediated/deferred explicitly.
- Philip approves the target host and release.
- Rust `publish-site` adapter exists with dry-run and execute modes.
- Release evidence pack includes target, source artifact digest, route checks, rollback plan, and post-release verification.

## Adapter Contract Sketch

The future adapter should lower from the Varro action `publish-site` into a typed Rust command surface.

Minimum preview output:

- target host: `varro.mentormind.com.au`
- artifact root and digest
- release plan id
- route map
- required approvals
- rollback target
- expected post-release checks
- refusal reasons if any prerequisite is missing

Minimum execute behavior:

- refuse unless preview evidence is current;
- refuse unless review gate and Philip approval are recorded;
- publish only the reviewed artifact root;
- verify the public route, not just a health endpoint;
- write release evidence and rollback metadata.

## Non-Blocking First Step

Keep milestone 1 focused on the local artifact and scorecard. The publish adapter can be designed
in parallel, but implementation and execution should wait until the local Build-1 packet has passed
review.