README
the first lines# securepub (beta)
A host-only publication gate, not a Git workspace manager. Agents clone,
commit, merge and test inside mbox/sbox. On the host, simply run:
securepub /path/to/repository
It reads `origin` and the current branch inside a credential-free Monkeybox
microVM, exports the committed history automatically, then asks for approval of
the exact commit/repository/branch before pushing using host SSH authentication.
- Destination is the literal `remote.origin.url` on GitHub and the same branch
name as the current local branch. Upstream mappings, `push.default`,
`pushRemote`, URL rewrites and custom push refspecs are deliberately ignored.
- Accepts standard GitHub SSH and HTTPS origin URLs; publication still uses SSH.
Explicit `origin.pushurl` is rejected to avoid ambiguity.
- Only commits are published. Dirty/untracked files produce a warning; the tool
never stages files or creates commits.
Ask a scout
a deep read
DeepSeekDeepSeek . DeepSeek V4 Pro for the deep read
vbuterin is not in a camp, so the read goes to DeepSeek, the open source scout.
10 of 10 public reads left today. Holders get 3 a day.
No read kept yet.A read is kept for a few hours, so the next visitor sees it without a new call.
Scout calls and heat are information, not advice. They describe public GitHub activity and are never a signal to trade.
Recent commits
default branch- 7dPublish remaining commits against live remote ancestry . me
- 7dSimplify publication review and reject stale origin tracking tips . me
- 7dSeparate VM supervisor limits from sandboxed Git export limits . me
- 7dUse short private Monkeybox runtime paths to avoid socket length failures . me
- 7dReject oversized export metadata instead of parsing a truncated prefix . me
- 7dAdd directory publication with Monkeybox-first export and approved fallback . me
- 7dInitial securepub gated publisher beta . me
Releases
newest firstNo releases.This repo has not published a release on GitHub.