# HASP packaged release

Included artifacts:

- `bin/hasp`
- `LICENSE`
- `RELEASE_MANIFEST`
- `QUICKSTART.md`
- `OPERATOR_GUIDE.md`
- `PRODUCTION_GUIDE.md`
- `agent-profiles/`
- `profiles/`
- `scripts/`

Day-zero release files next to the tarball:

- `SHA256SUMS`
- `SHA256SUMS.asc`
- `hasp-release-public-key.asc`
- `<artifact>.tar.gz.asc`
- `<artifact>_bin.asc`
- `Formula/hasp.rb`
- `sbom.spdx.json`
- `slsa-provenance.json`
- `CODE_SIGNING_STATUS.json`
- `REPRODUCIBLE_BUILD.json`

Start with:

1. verify the tarball with `./scripts/hasp-verify-release.sh <tarball>`
2. run `./bin/hasp version`
3. read `QUICKSTART.md`
4. read `PRODUCTION_GUIDE.md` if you are testing V1 on a real machine
5. use `./scripts/hasp-upgrade-release.sh` and `./scripts/hasp-uninstall-release.sh` for lifecycle work
