[scbrown]

The trusted-publishing step still requires scbrown/tambo, so it refuses the moved canonical repository. Require exactly intigraph/tambo; foreign owners, the old owner, near-miss names and missing repository metadata still refuse. The matching-version guard is unchanged.

Point bootstrap defaults, setup/README commands and current documentation links at intigraph/tambo, retaining both TAMBO_* and CABOODLE_* overrides. Extend local docs remaps to the new owner while continuing to validate legacy URLs. Re-pin affected knowledge witnesses. Five unrelated-but-blocking old Quipu Pages URLs returned404 during the required docs check; their current-owner replacements all return200 and are corrected without exclusions.

Validation: just check passes (288 Rust tests pass, 12 ignored; all-feature clippy clean plus shell/Python controls). Canonical release-step controls3PASS, bootstrap12PASS, real-lychee controls6PASS, repository-knowledge9run/1skip, historical bootstrap replayPASS. Docs link check849/849PASS; HOME guards157paths+5resources clean. Optional README end-to-end is UNKNOWN: stopped its owned Bobbin child after more than3minutes while fixture setup was pending; this is not counted as a pass, and hosted readme CI remains required. Guard controls replay the actual release step with fixture cargo metadata and include wrong-tag refusal. Removing the guard in an owned workflow fixture produces four intended failures. Bootstrap controls cover canonical default, legacy override, override precedence, checksums, archive fallback and both commands. Docs controls cover canonical/legacy remaps, missing files/anchors and unrelated remote failure.

Demo transcript (actual repository guard only; no release or host install):

Repository	Base exit	Candidate exit
intigraph/tambo	1	0
foreign/tambo	1	1
scbrown/tambo	0	1

Repeat by extracting the test "$GITHUB_REPOSITORY" = ... line from each revision's .github/workflows/release.yml and executing it with each table value. The complete matching-tag step is separately tested with owned metadata. This is a readable shell transcript, not proof of an actual release run.

Malcolm consulted. The caboodle command, .caboodle state, namespaces, sealed provenance and legacy URL compatibility stay intact. Releases remain HELD under aegis-q8t: no tag or publish is authorized. This is separate from the crates.io ownership decision (aegis-t4p).

Recommended order recorded on aegis-1c1: this guard/default fix first, installation docs #163 next, then draft branding/compat #173 when ready. Tim owns actual base currency and reviewed landing; resolve overlapping URL hunks by normal merge.

Retained old-owner URL/identity matches (historical demos, compatibility tests, sealed provenance and namespaces; matching-line counts):

• CHANGELOG.md (14)
• docs/demos/bootstrap-compat/run.py (1)
• docs/demos/local-doc-links/output.log (2)
• docs/demos/local-doc-links/run.sh (1)
• docs/knowledge/alignment-status.json (1)
• packs/src/stack-map.ttl (1)
• packs/src/stack-operations.ttl (1)
• packs/stack-map/pendant/export.nt (1)
• packs/stack-operations/pendant/export.nt (1)
• scripts/build-repository-knowledge.py (1)
• scripts/build-repository-share.py (1)
• scripts/publish_repository_share.py (1)
• scripts/test-doc-links.py (9)
• scripts/test-install-bootstrap.py (4)
• scripts/test-repository-share-publication.py (1)
• scripts/verify-repository-share.py (2)

Refs: aegis-1c1, aegis-m5s. One non-author review after complete green; Tim lands. No release/install action.

Demo/source head: a19e137e005fff0d9e45dc4accc79d98925bd558; base: 9d590f2d7639b4c90522d123e1e2d2032f7ffec3.

Native risk: T3 available, record b68a7a6c5088eeffe507e268ec9aac4b4bde6835929e3f2386cd6e65854da1c7. Hosted README-first-success and book-and-links jobs pass at this head; complete hosted CI remains pending. The local README cancellation remains UNKNOWN.