Public-Safe Documentation Promotion Workflow
Status: Public-safe documentation workflow note
Scope: Private knowledge base to public documentation workflow
Runtime impact: none
Sensitive data involved: none
Change type: documentation / governance model
Purpose
This note describes a controlled workflow for turning private working notes into public-safe technical documentation.
The goal is to preserve the value of private research, learning notes and operational reflections without exposing raw private material.
The workflow is designed for situations where a private knowledge base is used as a thinking, drafting and learning layer, while Git-based documentation repositories are used only for reviewed, sanitized and purpose-specific outputs.
Scope
This document covers the documentation control model for promoting private working notes into public-safe Git-based documentation.
It focuses on:
- review checkpoints
- public/private separation
- target repository decisions
- pull request based approval
- AI-assisted drafting boundaries
- conservative documentation publishing
It does not cover customer documentation, production runbooks, confidential operational evidence or automatic synchronization from private notes to public repositories.
Public/private boundary
The source layer and the public documentation layer have different purposes.
Private working notes may include exploratory reasoning, incomplete drafts, personal context, operational friction, sensitive references, project-specific background or material that is useful only inside the private knowledge base.
Public documentation must contain only reviewed, sanitized and purpose-specific material.
The following material must remain private unless it has been intentionally generalized and reviewed:
- raw private notes
- credentials, tokens, recovery codes or secret-like values
- personal, financial, health, relationship or job-search context
- confidential customer, employer or partner details
- screenshots or logs containing private identifiers
- raw AI conversation dumps
- unreviewed operational claims
- internal evidence that is not meant for public review
A document should not be promoted if the public/private boundary is unclear.
Core principle
Private notes and public documentation should not be treated as the same layer.
Private knowledge base
-> review and sanitization
-> target decision
-> Git branch
-> pull request review
-> public-safe documentation
The private layer may contain unfinished thinking, exploratory reasoning, mistakes, sensitive references and context that is useful to the author but not appropriate for publication.
The public layer should contain only material that is useful, bounded, reviewed and safe to share.
Why this matters
Documentation workflows often fail because private notes slowly become public artifacts without a clear review boundary.
That creates several risks:
- accidental exposure of private context
- unclear ownership of claims
- over-sharing of operational details
- mixing learning notes with public evidence
- publishing material that has not been reviewed for scope
- treating AI-assisted drafts as finished documentation
A public-safe promotion process reduces those risks.
Promotion checkpoint
Before any private note is moved toward public documentation, it should pass through a promotion checklist.
The checklist should answer:
- What is the source note?
- Why is this worth promoting?
- What is the target repository?
- What should remain private?
- What needs to be generalized?
- Are there credentials, private identifiers or confidential details?
- Does the document make only scoped claims?
- Can the change be reviewed through a pull request?
If the answer is unclear, the note should stay private.
Target repository decision
Not every note belongs in the same repository.
A simple decision model helps keep documentation clean:
If the note is about documentation method:
publish to the documentation hub.
If the note is about a specific technical project:
publish to that project repository.
If the note is about private planning or personal context:
keep it private.
If the note is about a reusable governance rule:
publish only a sanitized summary.
This prevents a documentation hub from becoming a dumping ground.
Preferred workflow
The preferred workflow is intentionally conservative:
1. Keep the original note private.
2. Create a short public-safe summary.
3. Review the summary against the promotion checklist.
4. Decide the correct target repository.
5. Write the document to a Git branch.
6. Review the pull request diff.
7. Merge only after scope and formatting are confirmed.
8. Synchronize the local repository after merge.
The pull request is the human approval checkpoint.
AI-assisted documentation boundary
AI tools can help draft, summarize and structure documentation.
They should not decide what is safe to publish.
A safe model is:
AI may prepare.
Human review must approve.
GitHub pull request remains the control point.
This keeps authority with the human reviewer while still allowing AI to reduce documentation overhead.
Operational lesson
Long generated Markdown documents should be handled carefully.
Manual copy-paste through local editors or terminals can introduce avoidable formatting problems, especially when Markdown syntax is escaped or pasted into the wrong shell context.
For generated documentation, a safer approach is:
Generate the document
write it to a controlled Git branch
review the pull request diff
merge after formatting and scope are confirmed
sync locally afterward
Local terminals remain useful for repository state operations, but they should not be the primary place for pasting long generated documents.
What this workflow prevents
This workflow helps prevent:
- raw private notes becoming public
- accidental credential exposure
- publishing private operational context
- malformed Markdown entering the main branch
- unclear repository ownership
- unreviewed AI-assisted documentation
- premature automation of private-to-public publishing
What this is not
This workflow is not an automation system.
It does not replace human review.
It does not turn a private knowledge base into a public mirror.
It does not publish raw private notes.
It does not prove production readiness or compliance by itself.
It is a documentation control model.
Future automation boundary
Automation may be considered only after the manual workflow is proven reliable.
Possible safe automation:
- draft checklist generation
- Markdown validation
- candidate file creation
- draft pull request creation
Automation should not:
- publish raw private notes
- choose what is public-safe without review
- merge changes automatically
- bypass pull request review
- expose private source material
Portfolio value
This workflow is useful as portfolio evidence because it shows more than tool usage.
It demonstrates:
- documentation discipline
- public/private boundary thinking
- review-based publishing
- conservative AI-assistance governance
- Git-based change control
- operational learning from formatting and workflow failures
- clear separation between private source material and public evidence
The value is not that every private note becomes public.
The value is that public documentation becomes intentional, reviewable and safer to maintain.
One-sentence summary
A public-safe documentation promotion workflow keeps private knowledge work private while allowing reviewed, sanitized and useful technical documentation to be published through Git-based review.