Publish immutable remote commits

docs/internal/workspace.md

@@ -55,7 +55,8 @@ lock only while their context remains active, and report a release failure.
 Automatic post-publish cleanup:
 
 - only runs when publish actually executed and succeeded;
-- requires `uploaded=true` and `current_pointer_written=true` metadata;
+- requires `uploaded=true`, a remote commit key, and a current commit-pointer
+  key in publish metadata;
 - consumes the resolved cleanup policy described in
   [Configuration](../config.md);
 - refuses unsafe deletes (root delete, out-of-root delete, and symlinked