Public release audit

Visibility

private
The repository currently resolves as private/404 to unauthenticated users.

Secret scan

clean
No concrete API keys or private keys found in tracked files or strict history scan.

Gate

selected
Use a clean exported snapshot rather than publishing current git history.

Current State

gh repo view Theovia/eigen-reprod-atlas reports the build repository as private. The clean public source snapshot is available at github.com/Theovia/eigen-reprod-atlas-phase1a/releases/tag/v0.1.2-phase1a.

Secret Scan

No concrete API keys, private keys, GitHub tokens, Slack tokens, or Cloudflare tokens were found in tracked files by strict scan.
The same strict scan across all git history found no token/private-key matches.
Placeholder examples such as OPENAI_API_KEY=... appear in docs/runbooks.
Cloudflare Worker names, bucket names, route names, and one KV namespace id appear in Wrangler config.

Release Artifacts Added

LICENSE with MIT licence.
CITATION.cff for repository citation metadata.
.zenodo.json for archive metadata after public tag.
REPRODUCING.md with artifact/scoring and full-inference paths.
Score recomputation artifacts verifying 14 cards with zero lDDT/TM-score deltas.
SHA256 release checksum file.

History Sensitivity Blocker

The current working tree has sanitized historical outreach planning notes, but earlier private planning text exists in git history. This is not a token leak, but it is sensitivity context. The selected public-release path is a clean exported source snapshot that omits pre-release planning history.

Release Package Status

Clean public GitHub release: v0.1.2-phase1a.
Zenodo archive DOI: 10.5281/zenodo.20275055.
Cloudflare route/bucket/KV identifiers are acceptable public infrastructure metadata for this artifact.
Manuscript Data and Code Availability cites the release tag and DOI.

Source document: docs/41_public_release_audit.md.