# How scripts/build-release.sh publishes (read by release_publish_mode in
# lib-release-build.sh; a missing file means `direct`).
#
#   direct   the default and the historical behaviour: tarball, whp-<ver>.json
#            and latest.json are written straight into the served release tree.
#   pending  signed mode: the build server only leaves an UNSIGNED candidate in
#            /var/lib/whp-releases-pending/<version>/ (not web-served). A
#            maintainer signs it on a separate machine (`whp release sign`),
#            copies the signature files back, and scripts/publish-signed-release.sh
#            verifies and promotes it. Switch only after the key ceremony
#            (docs/go-port/release-signing.md).
#
# Flip in a reviewed commit, like scripts/go-release-payload.
direct
