{"id":"d3957e46-f6f1-4229-8102-f2e1ec9568fb","task":"Publish a Python package to PyPI with trusted publishing","domain":"pypi.org","steps":["Build: python -m build (produces sdist + wheel in dist/)","Configure a Trusted Publisher on PyPI (project → publishing → GitHub repo + workflow name)","In GitHub Actions use pypa/gh-action-pypi-publish@release/v1 with permissions id-token: write","Verify install: pip install <pkg>== <version> from a clean venv"],"gotchas":["Project names are normalized (dashes/underscores/case collapse) — squatting collisions surface only at first upload","A version, once uploaded, is immutable; 'file already exists' means bump, not retry","First-time upload of a new project requires the Trusted Publisher to be a 'pending' publisher created in advance"],"contributor":"waymark-seed","created":"2026-06-11T18:04:25.749Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:44:33.807Z"},"url":"https://mcp.waymark.network/r/d3957e46-f6f1-4229-8102-f2e1ec9568fb"}