Use the canonical account name, not a redirect

.github/workflows/release.yml

@@ -40,7 +40,7 @@ env:
   # which the 22.12.0 floor above does not satisfy, so installing it here would fail on a real
   # tag and only on a real tag. 11.19.0 accepts ^20.17.0 || >=22.9.0 and clears the OIDC floor.
   NPM_VERSION: "11.19.0"
-  IMAGE_NAME: ghcr.io/reesebuilt/agentwall
+  IMAGE_NAME: ghcr.io/repsecure/agentwall
 
 jobs:
   build:
@@ -98,7 +98,7 @@ jobs:
             echo "version=${version}"
             echo "tag=${tag}"
             echo "is-release=${is_release}"
-            echo "tarball=reesebuilt-agentwall-${version}.tgz"
+            echo "tarball=repsecure-agentwall-${version}.tgz"
           } >> "$GITHUB_OUTPUT"
           echo "building ${tag} (release=${is_release})"
 
@@ -328,7 +328,7 @@ jobs:
           # The binaries were built by this workflow from this tag, not by a person.
           slsa-verifier verify-artifact agentwall-verify-linux-amd64 \\
             --provenance-path ${PROVENANCE} \\
-            --source-uri github.com/reesebuilt/agentwall \\
+            --source-uri github.com/repsecure/agentwall \\
             --source-tag ${TAG}
 
           # The verifier shares no code with the tool that wrote the evidence.

CHANGELOG.md

@@ -83,7 +83,7 @@ decision, policy file, or enforcement behavior moved in this release.
 - Approval webhook notifications for queued and resolved manual reviews via `approval.webhookUrl`.
 
 ### Changed
-- The npm package is published as `@reesebuilt/agentwall`. The unscoped name `agentwall` on npm
+- The npm package is published as `@repsecure/agentwall`. The unscoped name `agentwall` on npm
   belongs to an unrelated project and always has. The installed command is still `agentwall`.
 - The supported Node floor is 22.12.0, declared in `engines`. Node 20 reached end of life in
   April 2026 and a security tool should not advertise a runtime that stops receiving fixes.

README.md

@@ -10,7 +10,7 @@ and keeps a record that cannot be quietly rewritten.
 </p>
 
 <p align="center">
-  <a href="https://github.com/reesebuilt/agentwall/actions/workflows/ci.yml"><img src="https://github.com/reesebuilt/agentwall/actions/workflows/ci.yml/badge.svg?branch=main" alt="CI"></a>
+  <a href="https://github.com/repsecure/agentwall/actions/workflows/ci.yml"><img src="https://github.com/repsecure/agentwall/actions/workflows/ci.yml/badge.svg?branch=main" alt="CI"></a>
   <a href="LICENSE"><img src="https://img.shields.io/badge/license-Apache--2.0-22d3ee?style=flat-square&labelColor=0b0f14" alt="License: Apache-2.0"></a>
   <img src="https://img.shields.io/badge/TypeScript-5.x-22d3ee?style=flat-square&labelColor=0b0f14&logo=typescript&logoColor=22d3ee" alt="TypeScript">
   <img src="https://img.shields.io/badge/Node-22.12%2B-22d3ee?style=flat-square&labelColor=0b0f14&logo=node.js&logoColor=22d3ee" alt="Node 22.12+">
@@ -56,19 +56,19 @@ The rest of the limits are in [Limits](#limits). They are not footnotes.
 Linux, Node.js 22.12 or newer. Verified on Node 24.14.1.
 
 ```bash
-npm install -g @reesebuilt/agentwall
+npm install -g @repsecure/agentwall
 
 agentwall init --mode monitor
 agentwall doctor
 ```
 
 The npm package named `agentwall`, without a scope, is a different and unrelated project. This
-one is `@reesebuilt/agentwall`; the command it installs is `agentwall`.
+one is `@repsecure/agentwall`; the command it installs is `agentwall`.
 
 From a checkout instead:
 
 ```bash
-git clone https://github.com/reesebuilt/agentwall.git
+git clone https://github.com/repsecure/agentwall.git
 cd agentwall
 npm install
 npm run build
@@ -250,7 +250,7 @@ go list -m all
 ```
 
 ```
-github.com/reesebuilt/agentwall/verifier
+github.com/repsecure/agentwall/verifier
 ```
 
 One line, and it is this module. SHA-256, Ed25519, SPKI parsing, and JSON all come from the Go

docs/install.md

@@ -12,7 +12,7 @@
 ## Local source install
 
 ```bash
-git clone https://github.com/reesebuilt/agentwall
+git clone https://github.com/repsecure/agentwall
 cd agentwall
 npm install
 npm run build

package.json

@@ -1,14 +1,14 @@
 {
-  "name": "@reesebuilt/agentwall",
+  "name": "@repsecure/agentwall",
   "version": "0.2.0",
   "description": "Agentwall: provenance-aware policy enforcement for agent egress, tools, content, and approvals",
-  "homepage": "https://github.com/reesebuilt/agentwall#readme",
+  "homepage": "https://github.com/repsecure/agentwall#readme",
   "bugs": {
-    "url": "https://github.com/reesebuilt/agentwall/issues"
+    "url": "https://github.com/repsecure/agentwall/issues"
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/reesebuilt/agentwall.git"
+    "url": "git+https://github.com/repsecure/agentwall.git"
   },
   "main": "dist/index.js",
   "scripts": {

verifier/README.md

@@ -35,7 +35,7 @@ the FORMAT.
 Zero third party dependencies is a property you check rather than a claim you accept:
 
     cd verifier && go list -m all
-    github.com/reesebuilt/agentwall/verifier
+    github.com/repsecure/agentwall/verifier
 
 One line, and it is this module. SHA-256, Ed25519, SPKI parsing, and JSON all come from the Go
 standard library, maintained by the Go security team, so a reader auditing this verifier reads this

verifier/go.mod

@@ -1,3 +1,3 @@
-module github.com/reesebuilt/agentwall/verifier
+module github.com/repsecure/agentwall/verifier
 
 go 1.22