Delete (withdraw) a tag: on the hub, with oh, and with oxy issue #301 closed: completed andymccall opened this 11 days ago · 0 comments

Andy (2026-10-24) needed to delete v1.0.0-rc1 on doomsdayone/supermarioland and could not: no delete on the Tags page, no oh tag command, oxy tag creates and lists only, oxy push --delete takes bookmarks only. Tags are immutable (spec §10.1), so a mistaken tag can only be removed by hand on the server.

Wanted: a signed withdrawal rather than silent deletion:

• oxy tag delete NAME / oxy push --delete tags/NAME, authorised by the trust policy to whoever may create the tag, as a signed attestation, logged in the transparency log beside the creation (the history says the tag was withdrawn, by whom and when).
• The hub's Tags page: Delete for maintainers, audited; refused while a release uses the tag, or deletes the release too after a confirmation; oh tag delete.
• Clients drop a withdrawn tag on their next fetch. Friction entry in ~/oxygen_feedback.md (2026-10-24).