Git and releases

Repositories live in the xvii-network group of the project's GitLab, owned by a person's account (never root), and push-mirrored to github.com/xvii-network/<repo>.
Commits: conventional, lowercase, imperative, scope only when it helps (feat: add node quotas, fix(cli): keep the token on refresh). Never a Co-Authored-By or any attribution trailer.
main is always deployable. Short-lived branches and merge requests for larger work; small fixes can go straight to main.
CI on every push: gofmt, go vet, go test, panel lint and build, binaries as artifacts.
Releases: tags vMAJOR.MINOR.PATCH per repository. The tag pipeline builds binaries for every target, writes SHA256SUMS, signs it, and publishes to the GitLab package registry; the instance release index (/releases/* on home) points at them.
Repositories get an AGENTS.md (with CLAUDE.md as a symlink) describing layout, commands and conventions specific to that service, and pointing here for the rest.