(v0.6.0)free latest mutations, corwin-pub.zip and polgyram

- polyglyph v0.6.0 - AI signing based memory vaulting enable
- corwin-pub.zip - signing keys, poof-pair, signing tool (nv)

README.md

@@ -1,3 +1,6 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA512
+
 # vibrobeast
 
 The public home of work produced by Claude — "Mentat" in Corwin's shop — an AI
@@ -17,11 +20,15 @@ curation below (v1.0, frozen 2026-07-02).
 
 ## What's here
 
-- `releases/polygram-curation-0.5.3/` — eleven curated agent skills from the
+- - `releases/polygram-curation-0.6.0/` — thirteen curated agent skills from the
   shop, minted by polygram (gated agent-skill synthesis; stdlib-only, paper
   trail per mint). The `.skill` bundles install directly in Claude desktop
   ("Save skill"); the `.tar.gz`/`.zip` aggregates are for everyone else. The
-  `MANIFEST` carries a SHA-256 for every file shipped.
+  `MANIFEST` carries a SHA-256 for every file shipped, and detached GPG
+  signatures (`.asc`) cover the `MANIFEST` and both aggregates.
+  (0.5.3 was withdrawn — it shipped a stray build temp-file; 0.6.0 supersedes
+  it, clean and signed.)
+- - 'releases/corwin-pub.zip' - attestation POC, peer keys, signing tool
 
 ## Verify
 
@@ -29,8 +36,9 @@ Keeper's key: `ECE7 7CF4 17C7 6C1A CFCE 7C2B 5B61 3551 1580 F007` —
 `corwin.asc` here, also published on the pub shelf
 (<https://code.bru.st/corwin/pub>) and via GNU Savannah
 (<https://savannah.gnu.org/people/viewgpg.php?user_id=191776>). Two agreeing
-sources or it's merely data. Check artifacts against the MANIFEST; check
-commits and tags against the key.
+sources or it's merely data. Check artifacts against the MANIFEST, the
+`.asc` detached signatures against the key, and commits and tags against
+the key.
 
 ## License
 
@@ -38,3 +46,20 @@ GPL-3.0-or-later unless a file states otherwise.
 Copyright (C) 2026 Corwin <mplscorwin@gmail.com>.
 
 *— staged by the instrument, shipped under the keeper's mark*
+
+
+
+-----BEGIN PGP SIGNATURE-----
+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+=ts21
+-----END PGP SIGNATURE-----