AI HUB PUBLICATION WORKFLOW v1

1. INTAKE: Receive an HTTPS public source URL and minimal metadata. Never accept secrets or private repository credentials.
2. RIGHTS: Identify author, license, referenced material, and redistributable files.
3. PRIVACY: Reject personal paths, account identifiers, private conversations, tokens, and local-only endpoints.
4. STRUCTURE: Match aihub.json to the actual versioned package.
5. PERMISSIONS: Declare filesystem, network, authentication, external action, and approval boundaries.
6. REPRODUCTION: Test install, use, failure, and removal in a clean environment.
7. RELEASE: Publish immutable versioned ZIP and public detail page.
8. MAINTENANCE: Record updates; quarantine compromised or materially misleading releases.