# The public-editions scrub checklist

The repeatable pass run before any private repository gets a public edition: network addresses, hardware addresses, secrets, likenesses, license.

From the [Templates & checklists](../index.md#templates) section of [The Muse Field Guide](../index.md).

## How to use it

Run the whole pass, in order, on the full history of the repository and not just the current tree. This is the scrub methodology this household applies before a working repo gets a public edition that carries the publishable subset while the working repository stays private.

## The checklist

- [ ] Search the source for hardcoded local network addresses.
- [ ] Search for real device hardware addresses.
- [ ] Search for vault entry names and operator email addresses in the source.
- [ ] Search configuration for cloud account identifiers.
- [ ] Run a secrets scanner over the full history, not just the current tree.
- [ ] Replace any real likeness images with generated sample images that depict nobody.
- [ ] Ship a provenance file stating what the edition is and where it came from.
- [ ] Ask exactly one license-and-push question per edition, and no more.

Deep dive: [Steal this](../deep-dives/steal-this.md)

Related resources: [The approval ladder](the-approval-ladder.md), [Publish numbers with a source and a verified date](verdict-facts-with-dates.md)

Canonical page: https://www.niclydon.io/muse/items/public-editions-scrub-checklist.html