Release lifecycle

Release lifecycle — contract and behavior

• Release identity ties the catalog and policy snapshot to a durable version.
• Promotion requires the expected validation state and records the operator action.
• Rollback selects a known prior release rather than reconstructing one from the current working tree.
• Tama reports runtime adoption separately from release publication.