This repository owns the reviewed policy and public keys for the static native package repository at https://pkgs.componere.dev. Allowlisted producer GitHub Releases are the authoritative package source. Publication runs through one serialized writer in this repository.
Policy lives in .config/package-repository.yaml.
Public keys live beside it under .config/keys/.