Review policy

Submission runs automated checks before eligible public packages enter human review. The published release records the review level. A clean catalog appearance does not replace signature or revocation checks.