harden release workflow: musl builds, --locked, version check, portable sed

1 files changed, 4 insertions, 0 deletions

diff --git a/AGENTS.md b/AGENTS.md
index f65fa0ef..575192bd 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -29,3 +29,7 @@ Integration tests are markdown specs in `tests/integration/specs/`. A pi agent e
 - Rust: no `unwrap()` in production code. `tracing` for logging. `#[allow]` only with a comment explaining why.
 - Don't bypass checks. If tests fail, fix them before committing.
 - Don't add dependencies without a reason. Check if the existing deps cover it first.
+
+## Releases
+
+`just release 0.x.y` — bumps Cargo.toml, runs tests, commits, tags, pushes. GitHub Actions builds binaries.