altugank · Oct 31, 2026 · Oct 31, 2026
diff --git a/AGENTS.md b/AGENTS.md
@@ -75,6 +75,8 @@ not depend on the speed of the machine they run on.
   what it is for, and the person you work for in the description. Changes under
   `.github/workflows` need a maintainer to merge them. Never skip or disable a test to get
   green.
+- **Releases:** follow [docs/RELEASING.md](docs/RELEASING.md) step by step. Never create a
+  tag or a GitHub release without a maintainer's go-ahead.
 
 ## Reading the docs as an agent
 

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,6 +2,66 @@
 
 Notable changes to Diffinery. Diffinery is deployed continuously from `main`; versions mark
 points worth naming. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
+How a release is made is in [docs/RELEASING.md](docs/RELEASING.md).
+
+## [Unreleased]
+
+## [0.2.0] - 2026-10-31
+
+Development moved to [GitHub](https://github.com/codician-team/diffinery). GitHub
+repositories can run their jobs on Diffinery's hosted runners, and Diffinery runs on celld
+and with an SMTP server as well as on Cloudflare's own services.
+
+### Actions (CI/CD)
+
+- **GitHub runners.** Keep your code on GitHub, install your instance's GitHub App from
+  **Settings → GitHub runners** and set a job's `runs-on` to `diffinery`: GitHub's own
+  runner runs the job in a fresh hosted runner container, one job per container, paid from
+  the linked account's hosted minutes.
+- Jobs keep running when GitHub is down: Diffinery keeps a copy of every public action
+  jobs download and uses it when GitHub can't be reached.
+- Hosted runners have KVM, so the Android emulator runs in a job.
+- Runs, jobs and workflows have numeric ids, so `gh run` and `gh workflow` work, and `gh`
+  works inside workflows with the job token.
+- **Settings → Environments** sets deployment branches and environment secrets in the
+  web UI.
+
+### Git hosting and collaboration
+
+- release-please works: GraphQL commit history, associated pull requests and releases.
+- `gh issue` commands work over GraphQL.
+- Merged pull requests keep their commits and files, and compare takes revisions such as
+  `main~1`.
+- **Delete closed pull requests** in **Settings → General → Danger zone** starts a
+  repository over with fresh history while keeping its issues and settings.
+
+### AI agents and integrations
+
+- The Claude Code and Codex plugins, `diffinery setup`, the MCP configuration and the
+  VS Code and JetBrains extensions work with any Diffinery instance, not only
+  diffinery.com. Plugins install from GitHub:
+  `claude plugin marketplace add codician-team/diffinery`.
+- MCP tool results link to what they made or read.
+- Instances serve the MCP Registry's domain proof at `/.well-known/mcp-registry-auth`.
+
+### Self-hosting
+
+- Runs on [celld](https://diffinery.com/docs/self-hosting/celld), the open-source Workers
+  runtime, as well as on Cloudflare.
+- Email through any SMTP server (`SMTP_URL`, `SMTP_PASSWORD`) instead of Cloudflare Email
+  Sending.
+- Rate limits without Cloudflare's rate limiting bindings: `RATE_LIMITS=durable` counts in a
+  Durable Object.
+- A public contact form at `/contact`, with Turnstile, email confirmation and review by
+  site administrators.
+- The Deploy workflow deploys every push to `main` once CI passes, on GitHub Actions too,
+  takes the GitHub App's IDs from repository variables, and runs on the label in
+  `DIFFINERY_RUNS_ON`.
+
+### Changed
+
+- Development happens at https://github.com/codician-team/diffinery. The copy at
+  diffinery.com/codician/diffinery is no longer updated and its Actions are off.
 
 ## [0.1.0] - 2026-10-25
 
@@ -52,4 +112,6 @@ The first open-source release, under the Apache License 2.0.
 - Documentation at https://diffinery.com/docs, also as Markdown, `llms.txt` and
   `llms-full.txt`.
 
-[0.1.0]: https://diffinery.com/codician/diffinery/releases/tag/v0.1.0
+[Unreleased]: https://github.com/codician-team/diffinery/compare/v0.2.0...HEAD
+[0.2.0]: https://github.com/codician-team/diffinery/compare/v0.1.0...v0.2.0
+[0.1.0]: https://github.com/codician-team/diffinery/releases/tag/v0.1.0
diff --git a/CITATION.cff b/CITATION.cff
@@ -12,8 +12,8 @@ abstract: >-
   or Codex in sandboxes, a built-in MCP server and plugins for Claude Code and Codex.
 authors:
   - name: "Codician Team"
-version: "0.1.0"
-date-released: "2026-10-25"
+version: "0.2.0"
+date-released: "2026-10-31"
 license: Apache-2.0
 url: "https://diffinery.com"
 repository-code: "https://github.com/codician-team/diffinery"

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -91,6 +91,7 @@ they run on.
 - Changes to files under `.github/workflows` always need a maintainer to merge them, on
   purpose: agents can't land workflow changes.
 - Pull requests are squash-merged.
+- Maintainers cut releases with [docs/RELEASING.md](docs/RELEASING.md).
 
 ## AI agents
 

diff --git a/README.md b/README.md
@@ -45,15 +45,15 @@ If Diffinery is useful to you, [a star on GitHub](https://github.com/codician-te
 
 - **Teams looking for a GitHub Actions alternative** that keeps their workflow YAML: Diffinery reads `.github/workflows/` with the same syntax and runs marketplace actions, on runners with 4 vCPUs and 12 GiB by default.
 - **Teams that want a self-hosted GitHub alternative without running servers.** Like Gitea, Forgejo or GitLab, you run your own instance, but it deploys to Cloudflare's serverless platform instead of a VM or a Kubernetes cluster.
-- **Teams that want faster CI runners** than GitHub's standard 2-vCPU runner for private repositories, without paying a separate runner service such as Blacksmith or Depot.
+- **Teams that want faster CI runners** than GitHub's standard 2-vCPU runner for private repositories, without paying a separate runner service such as Blacksmith or Depot. Your code can stay on GitHub: [GitHub runners](https://diffinery.com/docs/actions/github-runners) run its jobs on Diffinery.
 - **Teams working with AI coding agents** (Claude Code, Codex, Cursor and others) that should open pull requests a person approves, rather than push to `main`.
 - **Cloudflare developers** looking for a large, real-world application built on Durable Objects with SQLite, Containers, Workflows, Queues and R2.
 
 ## Why Diffinery
 
 - **Git hosting, pull requests and CI in one serverless app.** One Cloudflare Worker serves the web UI, git over HTTPS, a GitHub-compatible REST and GraphQL API, and an MCP server. Each repository is its own Durable Object with its own SQLite database, so repositories scale out instead of sharing one database server.
 - **Your GitHub Actions workflows run unchanged.** The same triggers, expressions, matrices, `needs`, outputs, reusable workflows, environments, secrets, variables, OIDC, service containers and Docker. Marketplace actions (`uses: owner/repo@ref`) are downloaded and run. Every known difference is listed in [Compatibility with GitHub Actions](https://diffinery.com/docs/actions/compatibility).
-- **Runners that exist only while a job runs.** Each job gets a fresh Ubuntu 24.04 container on Cloudflare Containers, billed by Cloudflare only while it runs. The default size has 4 vCPUs and 12 GiB of memory, and jobs that use little of it move to smaller sizes on their own. Self-hosted runners cover macOS, Windows, Arm and GPUs.
+- **Runners that exist only while a job runs.** Each job gets a fresh Ubuntu 24.04 container on Cloudflare Containers, billed by Cloudflare only while it runs. The default size has 4 vCPUs and 12 GiB of memory, and jobs that use little of it move to smaller sizes on their own. Repositories that stay on GitHub can use them too, with `runs-on: diffinery`. Self-hosted runners cover macOS, Windows, Arm and GPUs.
 - **Built for AI agents, with a human in the loop.** Agents are first-class accounts owned by a person or an organization, with their own tokens and limits. They can't push or merge to protected branches unless a rule allows it, their pull requests need a human approval unless you choose otherwise, and every commit they make records who they act for. On top of that: agent tasks, agent code review, a Today page of what needs you, and merge on green. See [Built for AI coding agents](#built-for-ai-coding-agents).
 - **Plugins for the tools agents already use.** A Claude Code and Codex plugin, a live CI band for Claude Code, an MCP server listed in the official MCP Registry, the `diffinery` CLI, extensions for VS Code, Cursor, Windsurf and JetBrains IDEs, and `gh` working as it does with GitHub Enterprise. See [Plugins and integrations](#plugins-and-integrations).
 - **Secure by default.** Passkey sign-in with no passwords, invite-only accounts, branch protection, push protection that blocks leaked credentials, envelope-encrypted secrets, kill switches and an append-only audit log.
@@ -153,12 +153,13 @@ The plugins' sources are in [`plugins/`](plugins), the extensions' in [`apps/vsc
 | Git | Clone, fetch and push over HTTPS with a token; shallow clones, Git LFS, `refs/pull/<n>/head` and `/merge`; large pushes unpacked from R2 in pieces | [Git over HTTPS](https://diffinery.com/docs/repositories/git) |
 | Pull requests | Draft PRs, reviews with line comments, required approvals and checks, merge, squash and rebase, auto-merge, a merge queue with `merge_group` runs, and an `intent` field that tells reviewers what a change is for | [Pull requests](https://diffinery.com/docs/collaboration/pull-requests) |
 | Issues and releases | Issues, labels, milestones, reactions, mentions, releases with assets and generated notes | [Collaboration](https://diffinery.com/docs/collaboration/issues) |
-| Actions (CI/CD) | GitHub Actions–compatible workflows on hosted runners in Cloudflare Containers or self-hosted runners; caches, artifacts, secrets, environments, OIDC, Docker, service containers, concurrency groups, scheduled runs | [Actions overview](https://diffinery.com/docs/actions/overview) |
+| Actions (CI/CD) | GitHub Actions–compatible workflows on hosted runners in Cloudflare Containers or self-hosted runners; caches, artifacts, secrets, environments, OIDC, Docker, service containers, concurrency groups, scheduled runs; jobs keep running when GitHub is down | [Actions overview](https://diffinery.com/docs/actions/overview) |
+| GitHub runners | Keep your code on GitHub and run its jobs on Diffinery's hosted runners: install the GitHub App and set `runs-on: diffinery` | [GitHub runners](https://diffinery.com/docs/actions/github-runners) |
 | Container registry | Push and pull OCI images at `<your host>/<owner>/<name>`, in place of ghcr.io | [Container registry](https://diffinery.com/docs/packages/container-registry) |
 | Agents | Agent accounts with server-enforced guardrails, agent tasks with Claude Code or Codex (plan first, best of N, verify and land), agent code review with inline findings and an Agent review check, browser terminals on your own Claude or ChatGPT plan, projects with a coordinator and shared memory, sandboxes, and a Today page of what needs you | [Agents](https://diffinery.com/docs/agents/overview) |
 | Merge on green | Pull requests from people and agents merge by themselves once their required checks pass and their branch's rules are met, set up in a few clicks | [Merge on green](https://diffinery.com/docs/collaboration/merge-on-green) |
 | Plugins and integrations | A Claude Code and Codex plugin, a live CI band for Claude Code, an MCP server in the official MCP Registry, the `diffinery` CLI, `gh` support, and VS Code, Cursor, Windsurf and JetBrains extensions | [Plugins and integrations](#plugins-and-integrations) |
-| API | GitHub-compatible REST (`/api/v3`) and GraphQL (`/api/graphql`) APIs, described as OpenAPI 3.1, and GitHub-compatible webhooks | [REST API](https://diffinery.com/docs/reference/rest-api) |
+| API | GitHub-compatible REST (`/api/v3`) and GraphQL (`/api/graphql`) APIs, described as OpenAPI 3.1, and GitHub-compatible webhooks; `gh` and release-please work against them | [REST API](https://diffinery.com/docs/reference/rest-api) |
 | Security | Passkeys (WebAuthn), branch protection, push protection, encrypted secrets, audit log, moderation, rate limits, quotas and kill switches | [Security overview](https://diffinery.com/docs/security/overview) |
 | Migration | Import from GitHub with history, issues, pull requests, reviews and releases, from the web, CLI, API or MCP | [Migrate from GitHub](https://diffinery.com/docs/migrate-from-github) |
 
@@ -210,7 +211,9 @@ The setup script creates whatever is missing in your account (the D1 database, R
 
 You can also deploy from CI with the included [Deploy workflow](.github/workflows/deploy.yml) on Diffinery or GitHub Actions. The full guide, including email sending, DNS, Access and troubleshooting, is [Deploy your own Diffinery](https://diffinery.com/docs/self-hosting/deploy), and every setting is described in [Configuration](https://diffinery.com/docs/self-hosting/configuration).
 
-Diffinery also targets [celld](https://celld.dev), the open-source Workers and Durable Objects runtime, so the same repository can run on your own machines if you leave Cloudflare. See [Run on celld](https://diffinery.com/docs/self-hosting/celld).
+Diffinery also targets [celld](https://celld.dev), the open-source Workers and Durable Objects runtime, so the same repository can run on your own machines if you leave Cloudflare. See [Run on celld](https://diffinery.com/docs/self-hosting/celld). Email can go through any SMTP server (`SMTP_URL`) instead of Cloudflare Email Sending, and rate limits can count in a Durable Object (`RATE_LIMITS=durable`) instead of Cloudflare's rate limiting bindings; see [Configuration](https://diffinery.com/docs/self-hosting/configuration).
+
+To deploy a named version instead of the tip of `main`, check out its tag (`git checkout v0.2.0`) before you run `scripts/setup.sh`. What changed in each version is in [CHANGELOG.md](CHANGELOG.md) and on the [releases page](https://github.com/codician-team/diffinery/releases).
 
 ## How it runs on Cloudflare
 
@@ -220,7 +223,7 @@ Diffinery also targets [celld](https://celld.dev), the open-source Workers and D
 | One repository: refs, objects, pull requests, issues, reviews, checks, runs | A Durable Object with SQLite (`RepoDO`), one per repository |
 | Large objects, Git LFS, container images, logs, caches, artifacts | R2 |
 | Accounts, organizations, tokens, invites, notifications, audit log | D1, read through the Sessions API for read replicas |
-| Webhooks, notifications, email | Queues, with dead-letter queues, and Email Sending |
+| Webhooks, notifications, email | Queues, with dead-letter queues, and Email Sending (or any SMTP server) |
 | Workflow runs (durable, survive restarts, 6-hour job timeout) | Workflows |
 | Job runners, agent sandboxes and import transfers | Containers (an Ubuntu 24.04 image in `containers/runner`) |
 | Scheduled workflows (`on: schedule`) | Cron Triggers |
@@ -285,7 +288,7 @@ Yes. Like Gitea, Forgejo or GitLab, you run it yourself, but instead of a server
 All three are open-source forges you run yourself. Gitea and Forgejo run on your own servers, with runner machines you install for CI. Diffinery runs only on Cloudflare: there are no servers or runner machines to look after, and each CI job gets a fresh container, but your code lives on Cloudflare's infrastructure. Gitea and Forgejo have wikis and a package registry, which Diffinery doesn't. See [Diffinery vs Gitea and Forgejo](https://diffinery.com/compare/gitea).
 
 **Is Diffinery an alternative to Blacksmith or Depot?**
-For a different kind of team. Blacksmith and Depot keep your code and pull requests on GitHub and run your jobs on faster machines, for a per-minute price. Diffinery replaces GitHub as well: your repositories move to your own instance, and your jobs run on 4-vCPU runners that your Cloudflare account pays for by the 10 ms. If you want to stay on GitHub and run nothing yourself, a runner service is the simpler choice. See [Diffinery vs Blacksmith](https://diffinery.com/compare/blacksmith) and [vs Depot](https://diffinery.com/compare/depot).
+Yes, in two ways. Blacksmith and Depot keep your code and pull requests on GitHub and run your jobs on faster machines, for a per-minute price. Diffinery's [GitHub runners](https://diffinery.com/docs/actions/github-runners) do the same from your own instance: install its GitHub App, set `runs-on: diffinery`, and jobs run on 4-vCPU runners that your Cloudflare account pays for by the 10 ms. Or Diffinery replaces GitHub as well, and your repositories move to your instance. If you want to run nothing yourself, a runner service is the simpler choice. See [Diffinery vs Blacksmith](https://diffinery.com/compare/blacksmith) and [vs Depot](https://diffinery.com/compare/depot).
 
 **Do my GitHub Actions workflows run without changes?**
 Most do. Diffinery reads `.github/workflows/*.yml` with the same syntax and runs marketplace actions. Jobs that need hosted macOS, Windows or Arm runners need a self-hosted runner. See [Compatibility with GitHub Actions](https://diffinery.com/docs/actions/compatibility).
@@ -294,7 +297,7 @@ Most do. Diffinery reads `.github/workflows/*.yml` with the same syntax and runs
 We don't run jobs on GitHub to benchmark it, so we don't claim a speed-up figure. Diffinery's default runner has 4 vCPUs and 12 GiB, while GitHub's standard Linux runner for private repositories has 2 vCPUs and 8 GB, so jobs that use several cores get twice as many. On Diffinery, jobs start about 3 to 5 seconds after they're queued. See the [measured performance](https://diffinery.com/performance).
 
 **Can I run Diffinery CI while my code stays on GitHub?**
-Yes. A small GitHub workflow mirrors every push to your Diffinery instance, which then runs the same `.github/workflows/` files, and can fail the GitHub job when the runs on Diffinery fail. See [Run Diffinery CI while your code stays on GitHub](https://diffinery.com/docs/guides/mirror-from-github).
+Yes, in two ways. With [GitHub runners](https://diffinery.com/docs/actions/github-runners), install your instance's GitHub App and set a job's `runs-on` to `diffinery`: the job runs on a Diffinery hosted runner, and logs and checks stay on GitHub. Or a small GitHub workflow mirrors every push to your Diffinery instance, which then runs the same `.github/workflows/` files and can fail the GitHub job when the runs on Diffinery fail; see [Run Diffinery CI while your code stays on GitHub](https://diffinery.com/docs/guides/mirror-from-github).
 
 **What does it cost to run?**
 Diffinery is free and open source under the Apache License 2.0, with no paid edition. Running it costs whatever your own Cloudflare account bills: the Workers Paid plan plus usage. Hosted runners are Cloudflare Containers, which bill only while a job runs.
@@ -326,7 +329,7 @@ On GitHub, at [github.com/codician-team/diffinery](https://github.com/codician-t
 ## Contributing, security and license
 
 - **Contributing:** see [CONTRIBUTING.md](CONTRIBUTING.md), and [AGENTS.md](AGENTS.md) if you're an AI coding agent. Please follow the [Code of Conduct](CODE_OF_CONDUCT.md). Questions go to [SUPPORT.md](SUPPORT.md).
-- **Roadmap and changes:** [ROADMAP.md](ROADMAP.md) and [CHANGELOG.md](CHANGELOG.md).
+- **Roadmap, changes and releases:** [ROADMAP.md](ROADMAP.md), [CHANGELOG.md](CHANGELOG.md) and the [releases](https://github.com/codician-team/diffinery/releases). Maintainers cut releases with [docs/RELEASING.md](docs/RELEASING.md).
 - **Security:** please don't open public issues for vulnerabilities. Report them privately as described in [SECURITY.md](SECURITY.md).
 - **Citing Diffinery:** use GitHub's "Cite this repository" button, or [CITATION.cff](CITATION.cff).
 - **License:** [Apache License 2.0](LICENSE). See [NOTICE](NOTICE).