fix(release): use canonical Tambo owner and retain repository guard

.github/workflows/ci.yml

@@ -61,6 +61,8 @@ jobs:
         run: scripts/test-release-install.sh
       - name: Bootstrap legacy and renamed release controls
         run: python3 scripts/test-install-bootstrap.py
+      - name: Canonical release repository refusal controls
+        run: python3 scripts/test-release-repository.py
       - name: Registry visibility refusal controls
         run: python3 scripts/test-crate-version.py
 

.github/workflows/release.yml

@@ -150,7 +150,7 @@ jobs:
         shell: bash
         run: |
           set -euo pipefail
-          test "$GITHUB_REPOSITORY" = scbrown/tambo
+          test "$GITHUB_REPOSITORY" = intigraph/tambo
           version=$(cargo metadata --no-deps --format-version 1 | jq -r '.packages[] | select(.name == "tambo") | .version')
           test "$VERSION" = "v$version"
           echo "TAMBO_PUBLISH_VERSION=$version" >> "$GITHUB_ENV"

Cargo.toml

@@ -4,7 +4,7 @@ version = "0.5.0"
 edition = "2021"
 description = "Install and prove the whole AI knowledge-tool kit"
 license = "Apache-2.0"
-repository = "https://github.com/scbrown/tambo"
+repository = "https://github.com/intigraph/tambo"
 rust-version = "1.80"
 # Tambo is the renamed installer. The legacy executable remains supported.
 # Publication runs through the official release workflow after name/owner checks.

README.md

@@ -10,15 +10,15 @@ The compatibility command `caboodle` remains available.
 ## Install
 
 ```bash
-curl -fsSL https://raw.githubusercontent.com/scbrown/tambo/main/install.sh | sh
+curl -fsSL https://raw.githubusercontent.com/intigraph/tambo/main/install.sh | sh
 ```
 
 Downloads the latest release, verifies its SHA-256 and version, and installs
 `tambo` and `caboodle` in `${CARGO_HOME:-$HOME/.cargo}/bin`. Requires `curl`,
 `tar`, Python 3 and `sha256sum` or `shasum`. Add that directory to `PATH`.
 Published archives support Linux x86_64 and macOS arm64/x86_64; **Linux arm64
 has no published archive**. Source builds, pinned versions, removal and the
-Homebrew alternative are in the [installation reference](https://scbrown.github.io/caboodle/installation-reference.html).
+Homebrew alternative are in the [installation reference](https://intigraph.github.io/tambo/installation-reference.html).
 
 ## First success: local, single-user
 
@@ -40,7 +40,7 @@ tambo verify
 ### Advanced: shared services and agents
 
 For issued credentials, remote stores and registering Bobbin with your agent,
-use the [agent and installation reference](https://scbrown.github.io/caboodle/installation-reference.html).
+use the [agent and installation reference](https://intigraph.github.io/tambo/installation-reference.html).
 The default quickstart is local and needs no account or remote server.
 
 From the code repository you want searchable, initialize and index it before
@@ -54,12 +54,12 @@ claude mcp add bobbin -- "$(command -v bobbin)" serve "$PWD"
 
 ## Where to go next
 
-- [Choose a profile](https://scbrown.github.io/caboodle/profiles.html) or use `tambo init --guided`.
+- [Choose a profile](https://intigraph.github.io/tambo/profiles.html) or use `tambo init --guided`.
 - [Camayoc](https://github.com/scbrown/camayoc): vocabulary, shapes and governed agent memory.
-- [Getting started](https://scbrown.github.io/caboodle/getting-started.html) and [command reference](https://scbrown.github.io/caboodle/reference.html).
+- [Getting started](https://intigraph.github.io/tambo/getting-started.html) and [command reference](https://intigraph.github.io/tambo/reference.html).
 - **Load this repository's graph:** repository-pendant publication is pending.
   When a release provides the archive, checksum and provenance, follow Quipu's
-  [verified import workflow](https://scbrown.github.io/quipu/sharing/index.html).
+  [verified import workflow](https://intigraph.github.io/quipu/sharing/index.html).
   Import stages knowledge; it does not promote it into ROOT automatically.
 
 ## The stack
@@ -73,7 +73,7 @@ when.
 
 | tool | what it gives your agents |
 |---|---|
-| [tambo](https://github.com/scbrown/tambo) | 🧰 Agent Platform Toolkit - installs and configures the quipu stack |
+| [tambo](https://github.com/intigraph/tambo) | 🧰 Agent Platform Toolkit - installs and configures the quipu stack |
 | [quipu](https://github.com/scbrown/quipu) | stores shared facts with provenance and history; can check writes against your rules |
 | [camayoc](https://github.com/scbrown/camayoc) | prepares knowledge and vocabulary for Quipu, with checks before it is admitted |
 | [quechua](https://github.com/scbrown/quechua) | shared vocabulary and shapes for interoperable knowledge |

docs/book/book.toml

@@ -9,8 +9,8 @@ src = "src"
 default-theme = "coal"
 preferred-dark-theme = "coal"
 # Keep working GitHub alias links until the repository rename is verified.
-git-repository-url = "https://github.com/scbrown/caboodle"
-edit-url-template = "https://github.com/scbrown/caboodle/edit/main/docs/book/{path}"
+git-repository-url = "https://github.com/intigraph/tambo"
+edit-url-template = "https://github.com/intigraph/tambo/edit/main/docs/book/{path}"
 additional-css = ["custom/css/custom.css"]
 site-url = "/tambo/"
 

docs/book/src/agents.md

@@ -1,7 +1,7 @@
 # Using it with agents
 
 Caboodle is a CLI that an agent can run with the
-[Tambo skill](https://github.com/scbrown/tambo/blob/main/skills/tambo/SKILL.md).
+[Tambo skill](https://github.com/intigraph/tambo/blob/main/skills/tambo/SKILL.md).
 It does not expose its own MCP server. MCP (Model Context Protocol) lets an
 agent call servers supplied by the installed tools.
 

docs/book/src/docs-map.md

@@ -28,7 +28,7 @@
 These links point to the source repository so they work on both GitHub and the
 published book. Every loose document under `docs/` is listed here.
 
-- [Stack README standard](https://github.com/scbrown/caboodle/blob/main/docs/stack/README-STANDARD.md): section order, theme, shared stack block and review checklist.
-- [README template](https://github.com/scbrown/caboodle/blob/main/docs/stack/README-TEMPLATE.md): fill-in template implementing the standard.
-- [Design vision](https://github.com/scbrown/caboodle/blob/main/docs/design/vision.md): **Historical** design proposal; use the reference for shipped commands.
-- [txtai gap analysis](https://github.com/scbrown/caboodle/blob/main/docs/design/txtai-gap-analysis.md): **Historical** comparison and design opportunities, not a current capability guarantee.
+- [Stack README standard](https://github.com/intigraph/tambo/blob/main/docs/stack/README-STANDARD.md): section order, theme, shared stack block and review checklist.
+- [README template](https://github.com/intigraph/tambo/blob/main/docs/stack/README-TEMPLATE.md): fill-in template implementing the standard.
+- [Design vision](https://github.com/intigraph/tambo/blob/main/docs/design/vision.md): **Historical** design proposal; use the reference for shipped commands.
+- [txtai gap analysis](https://github.com/intigraph/tambo/blob/main/docs/design/txtai-gap-analysis.md): **Historical** comparison and design opportunities, not a current capability guarantee.

docs/book/src/installation-reference.md

@@ -9,13 +9,13 @@ Checksummed releases: Linux x86_64, macOS arm64 and macOS x86_64.
 The installer verifies SHA256 before placing the binary in `~/.cargo/bin`.
 
 ```bash
-curl -fsSL https://raw.githubusercontent.com/scbrown/caboodle/main/scripts/install.sh | bash
+curl -fsSL https://raw.githubusercontent.com/intigraph/tambo/main/scripts/install.sh | bash
 ```
 
 To pin a release, pass the version to the receiving shell:
 
 ```bash
-curl -fsSL https://raw.githubusercontent.com/scbrown/caboodle/main/scripts/install.sh | CABOODLE_VERSION=vX.Y.Z bash
+curl -fsSL https://raw.githubusercontent.com/intigraph/tambo/main/scripts/install.sh | CABOODLE_VERSION=vX.Y.Z bash
 ```
 
 Add the install directory to this shell's PATH:
@@ -37,7 +37,7 @@ not read that file, which is why the agent step below registers servers by
 absolute path.
 
 Or build the latest release from source with Rust (`cargo install --git
-https://github.com/scbrown/caboodle --tag vX.Y.Z --locked`). Either way,
+https://github.com/intigraph/tambo --tag vX.Y.Z --locked`). Either way,
 `caboodle --version` prints `caboodle X.Y.Z` for the release you installed.
 
 ### macOS with Homebrew
@@ -102,7 +102,7 @@ remains remote until you remove that configuration deliberately.
 To customize the tools and intended-use contract instead, use
 `tambo init --guided` or `tambo plan --profile retrieval --intent caboodle-intent.toml`,
 review the resulting plan, then run `tambo install`. See the
-[walkthrough](https://scbrown.github.io/caboodle/getting-started.html).
+[walkthrough](https://intigraph.github.io/tambo/getting-started.html).
 
 ## On your own code
 
@@ -114,11 +114,11 @@ review the resulting plan, then run `tambo install`. See the
 | Recheck the selected tools | `caboodle verify` |
 | Compare against this build's reviewed versions | `caboodle check-updates` |
 
-[Full command and configuration reference](https://scbrown.github.io/caboodle/reference.html).
+[Full command and configuration reference](https://intigraph.github.io/tambo/reference.html).
 
 ## Wire it into your agent
 
-Tambo is a CLI, with an [agent skill](https://github.com/scbrown/tambo/blob/main/skills/tambo/SKILL.md), not an MCP
+Tambo is a CLI, with an [agent skill](https://github.com/intigraph/tambo/blob/main/skills/tambo/SKILL.md), not an MCP
 server. Bobbin, which the `retrieval` profile installed above, is one. It
 searches one repository: the code you want your agent to work on, such as your
 own project's git checkout. Do not use `~/caboodle`, which holds only the plan.
@@ -146,7 +146,7 @@ serve` exits with `Bobbin not initialized` and Claude Code reports the server as
 failed to connect.
 
 MCP (Model Context Protocol) lets your agent call the installed server.
-[Agent setup](https://scbrown.github.io/caboodle/agents.html) covers indexing, Yupana, other clients
+[Agent setup](https://intigraph.github.io/tambo/agents.html) covers indexing, Yupana, other clients
 and managed crew registration through `caboodle project-settings`.
 
 ## Before you start
@@ -160,12 +160,12 @@ and managed crew registration through `caboodle project-settings`.
 Have `curl`, `tar`, `git`, `bash`, `python3` and `sha256sum` on PATH
 (`brew install coreutils` supplies `sha256sum` on macOS).
 The `everything` profile also needs Go. No account or remote server is needed.
-[Installation details](https://scbrown.github.io/caboodle/installing.html) cover source builds,
+[Installation details](https://intigraph.github.io/tambo/installing.html) cover source builds,
 installed files and removal; `caboodle doctor` names missing prerequisites.
 
 ## What's next
 
-- [Read the book](https://scbrown.github.io/caboodle/introduction.html)
-- [Find a topic in the docs map](https://scbrown.github.io/caboodle/docs-map.html)
-- [Choose your profile](https://scbrown.github.io/caboodle/profiles.html)
+- [Read the book](https://intigraph.github.io/tambo/introduction.html)
+- [Find a topic in the docs map](https://intigraph.github.io/tambo/docs-map.html)
+- [Choose your profile](https://intigraph.github.io/tambo/profiles.html)
 

docs/book/src/installing.md

@@ -52,17 +52,17 @@ embedded release pins; it does not refresh package metadata.
 Run the checksummed release installer in one line:
 
 ```bash
-curl -fsSL https://raw.githubusercontent.com/scbrown/caboodle/main/scripts/install.sh | bash
+curl -fsSL https://raw.githubusercontent.com/intigraph/tambo/main/scripts/install.sh | bash
 ```
 
 Pin a release by setting the version on the receiving shell:
 
 ```bash
-curl -fsSL https://raw.githubusercontent.com/scbrown/caboodle/main/scripts/install.sh | CABOODLE_VERSION=vX.Y.Z bash
+curl -fsSL https://raw.githubusercontent.com/intigraph/tambo/main/scripts/install.sh | CABOODLE_VERSION=vX.Y.Z bash
 ```
 
 The script still verifies the release archive's SHA256 checksum before replacing
-the binary. Read the [installer source](https://github.com/scbrown/caboodle/blob/main/scripts/install.sh)
+the binary. Read the [installer source](https://github.com/intigraph/tambo/blob/main/scripts/install.sh)
 when inspecting the bootstrap. After installation, `caboodle --version` reads
 back the installed release.
 
@@ -89,7 +89,7 @@ reorder PATH.
 A Rust toolchain can install the reviewed revision directly:
 
 ```bash
-cargo install --git https://github.com/scbrown/caboodle \
+cargo install --git https://github.com/intigraph/tambo \
   --rev <reviewed-commit-sha> --locked
 caboodle --version
 ```

docs/book/src/introduction.md

@@ -7,7 +7,7 @@ when. *Bitemporal* means keeping both when a fact was recorded and, when supplie
 when it was true.
 
 **Caboodle installs and configures this stack**, then proves the selected tools
-work. [Quipu](https://scbrown.github.io/quipu/) holds the knowledge. Camayoc
+work. [Quipu](https://intigraph.github.io/quipu/) holds the knowledge. Camayoc
 prepares knowledge and vocabulary for it. Bobbin searches code and can include
 knowledge from Quipu; Yupana shows code impact and can read policies from Quipu.
 Desire Path turns agent mistakes into feature requests and also works on its
@@ -16,7 +16,7 @@ separately or connect them around the same store.
 
 Write refusal is configurable, not automatic in every installation: enable
 Quipu's write checks for the rules you want enforced. See
-[Quipu's configuration reference](https://scbrown.github.io/quipu/getting-started/configuration.html)
+[Quipu's configuration reference](https://intigraph.github.io/quipu/getting-started/configuration.html)
 for the settings and their defaults.
 
 ![The quipu stack loop: agents send activity to Camayoc, which sends tagged, quarantined episodes to Quipu. Quipu supplies knowledge to Bobbin, which feeds the next agent turn. Yupana enforces code policies and contributes committed structure to Quipu and code context to Bobbin. Desire Path turns hallucinations into feature requests. Seeds tracks work items in the Quipu knowledge base. Caboodle installs, proves, and observes the tools.](images/stack-loop.svg)
@@ -25,7 +25,7 @@ for the settings and their defaults.
 
 ### 1. Try it in your browser
 
-**[Open Quipu Explore — no installation](https://scbrown.github.io/quipu/explore/).**
+**[Open Quipu Explore — no installation](https://intigraph.github.io/quipu/explore/).**
 The real store runs as WebAssembly in your browser. Use the SPARQL box, edit
 a fact, and export a knowledge pack.
 

docs/book/src/pendant-autoload.md

@@ -21,7 +21,7 @@ graphs that are not loaded yet.
   Different shape bundles need an explicit `--shapes-from`. A nonconforming
   union stays in quarantine, and nothing is promoted to ROOT. A local
   retraction survives a reload of the same snapshot. See quipu's
-  [pack composition](https://scbrown.github.io/quipu/concepts/pack-composition.html).
+  [pack composition](https://intigraph.github.io/quipu/concepts/pack-composition.html).
 - **Manual loading.** `install-stack.sh --pendant PATH` loads a pack by hand, and
   `scripts/setup-environment.sh` stages and verifies packs in cloud
   environments.

docs/book/src/reference.md

@@ -6,7 +6,7 @@ records:
 
 ```bash
 # Build caboodle from source instead of the release installer.
-cargo install --git https://github.com/scbrown/caboodle --locked
+cargo install --git https://github.com/intigraph/tambo --locked
 
 # Report what would block an install here. Changes nothing; exits nonzero on a blocker.
 caboodle doctor

docs/book/src/stack-standard.md

@@ -4,10 +4,10 @@ Every public repo in the stack (caboodle, quipu, camayoc, bobbin, yupana,
 desire-path) follows one README shape and one theme, so a reader who knows one
 can find their way around the others: try it first, then this book for depth.
 
-- [The standard](https://github.com/scbrown/caboodle/blob/main/docs/stack/README-STANDARD.md):
+- [The standard](https://github.com/intigraph/tambo/blob/main/docs/stack/README-STANDARD.md):
   section order, theme, the shared stack block, the rules, the mdBook
   skeleton, and the review checklist.
-- [The README template](https://github.com/scbrown/caboodle/blob/main/docs/stack/README-TEMPLATE.md):
+- [The README template](https://github.com/intigraph/tambo/blob/main/docs/stack/README-TEMPLATE.md):
   a fill-in-the-blanks README that already meets it.
 
 Status: draft, under review with the yupana pilot before the other repos adopt it.

docs/book/src/stack.md

@@ -29,7 +29,7 @@ the tool demonstrate its own job, through three proofs:
 
 Install and verification outcomes are also queued as quipu episodes, so a fresh
 box's first knowledge is a record of the box itself. The agent-facing version of
-this workflow is the [`tambo` skill](https://github.com/scbrown/tambo/blob/main/skills/tambo/SKILL.md), and the full
+this workflow is the [`tambo` skill](https://github.com/intigraph/tambo/blob/main/skills/tambo/SKILL.md), and the full
 design is in the [book](introduction.md).
 
 ## Related projects

docs/book/src/using.md

@@ -4,7 +4,7 @@ Caboodle ships a resumable interview and the plan/apply/verify engine with
 adapters for Quipu, Camayoc, Bobbin, Yupana, and Desire Path.
 
 ```bash
-cargo install --git https://github.com/scbrown/caboodle --locked
+cargo install --git https://github.com/intigraph/tambo --locked
 
 # Guided: use, crew themes, and anticipated graph questions are checkpointed.
 caboodle init --guided

docs/demos/bootstrap-compat/run.py

@@ -21,7 +21,7 @@
         source = subprocess.check_output(['git', 'show', f'{revision}:scripts/install.sh'], cwd=REPO)
         (root / 'scripts/install.sh').write_bytes(source)
         Bootstrap.run_installer.__globals__['ROOT'] = root
-        case = Bootstrap('test_default_uses_compatibility_repository_and_legacy_release')
+        case = Bootstrap('test_default_uses_canonical_repository_and_legacy_release')
         case.setUp()
         try:
             case.routes['https://api.github.com/repos/scbrown/caboodle/releases/latest'] = {

docs/knowledge/repository-knowledge.json

@@ -8,7 +8,7 @@
       "source": "README.md",
       "subject": "http://aegis.gastown.local/ontology/doc/tambo/README.md",
       "summary": "Tambo installs and verifies the knowledge-tool stack from a reviewable plan. The transition retains the caboodle command and existing plan/state paths; publication and installed verification remain separate.",
-      "source_sha256": "de96246f8a6f898be1d21d0b1f8cf21c142cb0e22db9830e26648ba7ddb13a9f",
+      "source_sha256": "f990353237f5e1a9c895a72bfe3fef0957f73d9db70fd0761d6f09b123518b93",
       "type": "Concept"
     },
     {
@@ -60,7 +60,7 @@
       "source": "Cargo.toml",
       "subject": "http://aegis.gastown.local/ontology/code/tambo/Cargo.toml",
       "summary": "The package and primary command are tambo, while the Rust library import name remains caboodle and a legacy caboodle binary is explicitly declared for compatibility.",
-      "source_sha256": "79c08b5213243be342e58e23c1ae53091c1fce03e3e347d9fd121fba8ae799ba",
+      "source_sha256": "d1fbb60bb8460f96413ef15235be4b98e54dbd513793c66e339e99f286641bbc",
       "type": "DecisionRecord",
       "properties": {
         "status": "active",
@@ -72,7 +72,7 @@
       "source": "README.md",
       "subject": "http://aegis.gastown.local/ontology/doc/tambo/README.md",
       "summary": "Start with the local single-user quickstart and its verified-tool success checks before selecting remote service mode.",
-      "source_sha256": "de96246f8a6f898be1d21d0b1f8cf21c142cb0e22db9830e26648ba7ddb13a9f",
+      "source_sha256": "f990353237f5e1a9c895a72bfe3fef0957f73d9db70fd0761d6f09b123518b93",
       "properties": {
         "startHereOrder": 1,
         "glossaryTerm": "https://scbrown.github.io/quechua/ns#Tool"
@@ -93,7 +93,7 @@
       "source": "Cargo.toml",
       "subject": "http://aegis.gastown.local/ontology/code/tambo/Cargo.toml",
       "summary": "Read the declared library and binary names before integrating the crate or changing compatibility assumptions.",
-      "source_sha256": "79c08b5213243be342e58e23c1ae53091c1fce03e3e347d9fd121fba8ae799ba",
+      "source_sha256": "d1fbb60bb8460f96413ef15235be4b98e54dbd513793c66e339e99f286641bbc",
       "properties": {
         "startHereOrder": 3
       }