@kungfu-tech/buildchain 2.10.4 → 2.10.5

package/dist/site/capability-registry.json

@@ -109,8 +109,8 @@
       "counts": {
         "manualCount": 1,
         "pageCount": 1,
-        "cliCommandCount": 6,
-        "nodeApiCount": 4,
+        "cliCommandCount": 19,
+        "nodeApiCount": 5,
         "workflowCount": 0,
         "actionCount": 0
       },

package/dist/site/cli-registry.json

@@ -281,11 +281,107 @@
       ],
       "maturity": "stable"
     },
+    {
+      "id": "kfd",
+      "source": "bin/buildchain.mjs",
+      "usage": "buildchain kfd ...",
+      "purpose": "Inspect KFD standards, schemas, and versioned KFD command families.",
+      "capabilityGroup": "kfd-trust",
+      "audience": [
+        "agent",
+        "operator"
+      ],
+      "maturity": "stable"
+    },
+    {
+      "id": "kfd-1-gate",
+      "source": "bin/buildchain.mjs",
+      "usage": "buildchain kfd 1 gate --witness-json <file-or-json>... [--cwd <dir>] [--artifact-root <dir>]",
+      "purpose": "Generate KFD-1 release gate evidence from declared contract-world witnesses.",
+      "capabilityGroup": "kfd-trust",
+      "audience": [
+        "agent",
+        "operator"
+      ],
+      "maturity": "stable"
+    },
+    {
+      "id": "kfd-1-schema",
+      "source": "bin/buildchain.mjs",
+      "usage": "buildchain kfd 1 schema [--schema <name>] [--json]",
+      "purpose": "Print the default KFD-1 schema exposed by the KFD package standards metadata.",
+      "capabilityGroup": "kfd-trust",
+      "audience": [
+        "agent",
+        "operator"
+      ],
+      "maturity": "stable"
+    },
+    {
+      "id": "kfd-1-verify",
+      "source": "bin/buildchain.mjs",
+      "usage": "buildchain kfd 1 verify --gate-json <file-or-json> [--json]",
+      "purpose": "Validate KFD-1 release gate evidence.",
+      "capabilityGroup": "kfd-trust",
+      "audience": [
+        "agent",
+        "operator"
+      ],
+      "maturity": "stable"
+    },
+    {
+      "id": "kfd-1-witness",
+      "source": "bin/buildchain.mjs",
+      "usage": "buildchain kfd 1 witness [--cwd <dir>] [--source-sha <sha>] [--output <file>] [--json]",
+      "purpose": "Generate Buildchain's KFD-1 self contract-world witness.",
+      "capabilityGroup": "kfd-trust",
+      "audience": [
+        "agent",
+        "operator"
+      ],
+      "maturity": "stable"
+    },
+    {
+      "id": "kfd-2-claims",
+      "source": "bin/buildchain.mjs",
+      "usage": "buildchain kfd 2 claims [--cwd <dir>] [--output-dir <dir>] [--json]",
+      "purpose": "Generate Buildchain's KFD-2 public trust claim evidence.",
+      "capabilityGroup": "kfd-trust",
+      "audience": [
+        "agent",
+        "operator"
+      ],
+      "maturity": "stable"
+    },
+    {
+      "id": "kfd-2-schema",
+      "source": "bin/buildchain.mjs",
+      "usage": "buildchain kfd 2 schema [--schema <name>] [--json]",
+      "purpose": "Print the default KFD-2 schema exposed by the KFD package standards metadata.",
+      "capabilityGroup": "kfd-trust",
+      "audience": [
+        "agent",
+        "operator"
+      ],
+      "maturity": "stable"
+    },
+    {
+      "id": "kfd-2-taxonomy",
+      "source": "bin/buildchain.mjs",
+      "usage": "buildchain kfd 2 taxonomy --entry-json <file-or-json>... [--kind residualRisk|downgradeReason] [--json]",
+      "purpose": "Validate KFD-2 trust taxonomy entries from the KFD package standards metadata.",
+      "capabilityGroup": "kfd-trust",
+      "audience": [
+        "agent",
+        "operator"
+      ],
+      "maturity": "stable"
+    },
     {
       "id": "kfd-3",
       "source": "bin/buildchain.mjs",
-      "usage": "buildchain kfd-3",
-      "purpose": "Inspect KFD-3 surface detection, registry, witness, audit, and query command families.",
+      "usage": "buildchain kfd 3 ...",
+      "purpose": "Inspect KFD-3 surface detection, registry, witness, audit, and query command families under the unified KFD namespace.",
       "capabilityGroup": "kfd-trust",
       "audience": [
         "agent",
@@ -296,7 +392,7 @@
     {
       "id": "kfd-3-audit",
       "source": "bin/buildchain.mjs",
-      "usage": "buildchain kfd-3 audit [--cwd <dir>] [--registry <path>] [--artifact <path>] [--json]",
+      "usage": "buildchain kfd 3 audit [--cwd <dir>] [--registry <path>] [--artifact <path>] [--json]",
       "purpose": "Compare detected, declared, and enforced KFD-3 public surfaces.",
       "capabilityGroup": "kfd-trust",
       "audience": [
@@ -308,7 +404,7 @@
     {
       "id": "kfd-3-detect",
       "source": "bin/buildchain.mjs",
-      "usage": "buildchain kfd-3 detect [--cwd <dir>] [--kind <kind>]... [--artifact <path>] [--json]",
+      "usage": "buildchain kfd 3 detect [--cwd <dir>] [--kind <kind>]... [--artifact <path>] [--json]",
       "purpose": "Detect standard KFD-3 public surface candidates from source and artifact metadata.",
       "capabilityGroup": "kfd-trust",
       "audience": [
@@ -320,7 +416,7 @@
     {
       "id": "kfd-3-query",
       "source": "bin/buildchain.mjs",
-      "usage": "buildchain kfd-3 query [<product>] [--cwd <dir>] [--registry <path>]",
+      "usage": "buildchain kfd 3 query [<product>] [--cwd <dir>] [--registry <path>]",
       "purpose": "Return an agent-readable KFD-3 capability map for a product, registry, or release passport.",
       "capabilityGroup": "kfd-trust",
       "audience": [
@@ -332,7 +428,7 @@
     {
       "id": "kfd-3-register",
       "source": "bin/buildchain.mjs",
-      "usage": "buildchain kfd-3 register <node-api|python-api|cli|binary|documentation|site-bundle>",
+      "usage": "buildchain kfd 3 register <node-api|python-api|cli|binary|documentation|site-bundle>",
       "purpose": "Declare detected KFD-3 public surfaces into a product-owned surface registry.",
       "capabilityGroup": "kfd-trust",
       "audience": [
@@ -344,7 +440,7 @@
     {
       "id": "kfd-3-witness",
       "source": "bin/buildchain.mjs",
-      "usage": "buildchain kfd-3 witness [--cwd <dir>] [--registry <path>] [--kind prebuild|artifact]",
+      "usage": "buildchain kfd 3 witness [--cwd <dir>] [--registry <path>] [--kind prebuild|artifact]",
       "purpose": "Generate release-passport-compatible KFD-3 surface witnesses from a product registry.",
       "capabilityGroup": "kfd-trust",
       "audience": [
@@ -353,6 +449,66 @@
       ],
       "maturity": "stable"
     },
+    {
+      "id": "kfd-4-schema",
+      "source": "bin/buildchain.mjs",
+      "usage": "buildchain kfd 4 schema [--schema <name>] [--json]",
+      "purpose": "Print the default KFD-4 schema exposed by the KFD package standards metadata.",
+      "capabilityGroup": "kfd-trust",
+      "audience": [
+        "agent",
+        "operator"
+      ],
+      "maturity": "stable"
+    },
+    {
+      "id": "kfd-migrate-layout",
+      "source": "bin/buildchain.mjs",
+      "usage": "buildchain kfd migrate-layout [--cwd <dir>] [--write] [--force] [--json]",
+      "purpose": "Plan or apply migration of legacy root Buildchain files into .buildchain/.",
+      "capabilityGroup": "kfd-trust",
+      "audience": [
+        "agent",
+        "operator"
+      ],
+      "maturity": "stable"
+    },
+    {
+      "id": "kfd-schema-list",
+      "source": "bin/buildchain.mjs",
+      "usage": "buildchain kfd schema list [--standard kfd-1|kfd-2|kfd-3|kfd-4] [--json]",
+      "purpose": "List machine-readable schemas exposed by the KFD package standards metadata.",
+      "capabilityGroup": "kfd-trust",
+      "audience": [
+        "agent",
+        "operator"
+      ],
+      "maturity": "stable"
+    },
+    {
+      "id": "kfd-schema-show",
+      "source": "bin/buildchain.mjs",
+      "usage": "buildchain kfd schema show <kfd-1|kfd-2|kfd-3|kfd-4> [--schema <name>] [--json]",
+      "purpose": "Print a machine-readable KFD schema from the KFD package standards metadata.",
+      "capabilityGroup": "kfd-trust",
+      "audience": [
+        "agent",
+        "operator"
+      ],
+      "maturity": "stable"
+    },
+    {
+      "id": "kfd-status",
+      "source": "bin/buildchain.mjs",
+      "usage": "buildchain kfd status [--cwd <dir>] [--json]",
+      "purpose": "Report implemented KFD support and the active .buildchain repository layout.",
+      "capabilityGroup": "kfd-trust",
+      "audience": [
+        "agent",
+        "operator"
+      ],
+      "maturity": "stable"
+    },
     {
       "id": "lifecycle",
       "source": "bin/buildchain.mjs",
@@ -537,7 +693,7 @@
       "id": "validate",
       "source": "bin/buildchain.mjs",
       "usage": "buildchain validate [--cwd <dir>] [--require-version-state]",
-      "purpose": "Validate buildchain.toml and declared lifecycle surfaces.",
+      "purpose": "Validate .buildchain/buildchain.toml and declared lifecycle surfaces.",
       "capabilityGroup": "getting-started",
       "audience": [
         "agent",

package/dist/site/kfd-claims.json

@@ -21,13 +21,13 @@
     "contract": "kungfu-buildchain-public-surface-reverse-audit",
     "path": "dist/site/public-surface-audit.json",
     "status": "passed",
-    "sha256": "8643f99a115112c2fa97081d7ba9bb7c8d6a4be74df40a5d50410e417d4f2856",
+    "sha256": "f9ae0512372a5967f58aafc3eb0e28b1a35a56631caa4b59df7e200b72f4b4f0",
     "summary": {
-      "cliCommandCount": 52,
+      "cliCommandCount": 65,
       "workflowCount": 35,
       "actionCount": 4,
       "sitePageCount": 43,
-      "docCommandRefCount": 180,
+      "docCommandRefCount": 208,
       "failureCount": 0
     },
     "auditBoundary": {
@@ -207,13 +207,13 @@
       "contract": "kungfu-buildchain-public-surface-reverse-audit",
       "path": "dist/site/public-surface-audit.json",
       "status": "passed",
-      "sha256": "8643f99a115112c2fa97081d7ba9bb7c8d6a4be74df40a5d50410e417d4f2856",
+      "sha256": "f9ae0512372a5967f58aafc3eb0e28b1a35a56631caa4b59df7e200b72f4b4f0",
       "summary": {
-        "cliCommandCount": 52,
+        "cliCommandCount": 65,
         "workflowCount": 35,
         "actionCount": 4,
         "sitePageCount": 43,
-        "docCommandRefCount": 180,
+        "docCommandRefCount": 208,
         "failureCount": 0
       },
       "auditBoundary": {
@@ -990,16 +990,28 @@
           "packageExport": "./issue-reporting"
         },
         {
-          "id": "export:./kfd-3-surfaces",
-          "name": "@kungfu-tech/buildchain/kfd-3-surfaces",
+          "id": "export:./kfd",
+          "name": "@kungfu-tech/buildchain/kfd",
           "kind": "package-export",
-          "sourcePath": "packages/core/kfd3-surface-register.js",
-          "evidencePath": "packages/core/kfd3-surface-register.js",
+          "sourcePath": "packages/core/kfd.js",
+          "evidencePath": "packages/core/kfd.js",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "packageExport": "./kfd"
+        },
+        {
+          "id": "export:./buildchain-layout",
+          "name": "@kungfu-tech/buildchain/buildchain-layout",
+          "kind": "package-export",
+          "sourcePath": "packages/core/buildchain-layout.js",
+          "evidencePath": "packages/core/buildchain-layout.js",
           "availability": "shipped",
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "packageExport": "./kfd-3-surfaces"
+          "packageExport": "./buildchain-layout"
         },
         {
           "id": "export:./release-line-bootstrap",
@@ -1577,9 +1589,105 @@
           "public": true,
           "reverseAuditSource": "bin/buildchain.mjs"
         },
+        {
+          "id": "cli:kfd",
+          "name": "buildchain kfd ...",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:kfd-1-gate",
+          "name": "buildchain kfd 1 gate --witness-json <file-or-json>... [--cwd <dir>] [--artifact-root <dir>]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:kfd-1-schema",
+          "name": "buildchain kfd 1 schema [--schema <name>] [--json]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:kfd-1-verify",
+          "name": "buildchain kfd 1 verify --gate-json <file-or-json> [--json]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:kfd-1-witness",
+          "name": "buildchain kfd 1 witness [--cwd <dir>] [--source-sha <sha>] [--output <file>] [--json]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:kfd-2-claims",
+          "name": "buildchain kfd 2 claims [--cwd <dir>] [--output-dir <dir>] [--json]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:kfd-2-schema",
+          "name": "buildchain kfd 2 schema [--schema <name>] [--json]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:kfd-2-taxonomy",
+          "name": "buildchain kfd 2 taxonomy --entry-json <file-or-json>... [--kind residualRisk|downgradeReason] [--json]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
         {
           "id": "cli:kfd-3",
-          "name": "buildchain kfd-3",
+          "name": "buildchain kfd 3 ...",
           "kind": "cli-command",
           "sourcePath": "bin/buildchain.mjs",
           "evidencePath": "bin/buildchain.mjs",
@@ -1591,7 +1699,7 @@
         },
         {
           "id": "cli:kfd-3-audit",
-          "name": "buildchain kfd-3 audit [--cwd <dir>] [--registry <path>] [--artifact <path>] [--json]",
+          "name": "buildchain kfd 3 audit [--cwd <dir>] [--registry <path>] [--artifact <path>] [--json]",
           "kind": "cli-command",
           "sourcePath": "bin/buildchain.mjs",
           "evidencePath": "bin/buildchain.mjs",
@@ -1603,7 +1711,7 @@
         },
         {
           "id": "cli:kfd-3-detect",
-          "name": "buildchain kfd-3 detect [--cwd <dir>] [--kind <kind>]... [--artifact <path>] [--json]",
+          "name": "buildchain kfd 3 detect [--cwd <dir>] [--kind <kind>]... [--artifact <path>] [--json]",
           "kind": "cli-command",
           "sourcePath": "bin/buildchain.mjs",
           "evidencePath": "bin/buildchain.mjs",
@@ -1615,7 +1723,7 @@
         },
         {
           "id": "cli:kfd-3-query",
-          "name": "buildchain kfd-3 query [<product>] [--cwd <dir>] [--registry <path>]",
+          "name": "buildchain kfd 3 query [<product>] [--cwd <dir>] [--registry <path>]",
           "kind": "cli-command",
           "sourcePath": "bin/buildchain.mjs",
           "evidencePath": "bin/buildchain.mjs",
@@ -1627,7 +1735,7 @@
         },
         {
           "id": "cli:kfd-3-register",
-          "name": "buildchain kfd-3 register <node-api|python-api|cli|binary|documentation|site-bundle>",
+          "name": "buildchain kfd 3 register <node-api|python-api|cli|binary|documentation|site-bundle>",
           "kind": "cli-command",
           "sourcePath": "bin/buildchain.mjs",
           "evidencePath": "bin/buildchain.mjs",
@@ -1639,7 +1747,67 @@
         },
         {
           "id": "cli:kfd-3-witness",
-          "name": "buildchain kfd-3 witness [--cwd <dir>] [--registry <path>] [--kind prebuild|artifact]",
+          "name": "buildchain kfd 3 witness [--cwd <dir>] [--registry <path>] [--kind prebuild|artifact]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:kfd-4-schema",
+          "name": "buildchain kfd 4 schema [--schema <name>] [--json]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:kfd-migrate-layout",
+          "name": "buildchain kfd migrate-layout [--cwd <dir>] [--write] [--force] [--json]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:kfd-schema-list",
+          "name": "buildchain kfd schema list [--standard kfd-1|kfd-2|kfd-3|kfd-4] [--json]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:kfd-schema-show",
+          "name": "buildchain kfd schema show <kfd-1|kfd-2|kfd-3|kfd-4> [--schema <name>] [--json]",
+          "kind": "cli-command",
+          "sourcePath": "bin/buildchain.mjs",
+          "evidencePath": "bin/buildchain.mjs",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "bin/buildchain.mjs"
+        },
+        {
+          "id": "cli:kfd-status",
+          "name": "buildchain kfd status [--cwd <dir>] [--json]",
           "kind": "cli-command",
           "sourcePath": "bin/buildchain.mjs",
           "evidencePath": "bin/buildchain.mjs",
@@ -2229,7 +2397,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 28,
+          "inputCount": 31,
           "inputs": [
             "artifact-path",
             "aws-region",
@@ -2239,6 +2407,7 @@
             "buildchain-contract-lock-path",
             "buildchain-ref",
             "buildchain-repository",
+            "fail-on-release-pr-error",
             "node-version",
             "preview-apply",
             "preview-aws-role-arn",
@@ -2253,6 +2422,8 @@
             "production-release-head-prefix",
             "production-release-label",
             "production-release-on-main",
+            "production-release-pr-mode",
+            "production-release-pr-token",
             "release-feedback-actor-privacy",
             "staging-apply",
             "staging-aws-role-arn",
@@ -3526,6 +3697,6 @@
         "public": true
       }
     ],
-    "publicSurfaceCount": 231
+    "publicSurfaceCount": 245
   }
 }

package/dist/site/manual-registry.json

@@ -9,7 +9,7 @@
       "title": "Buildchain documentation map",
       "path": "docs/MAP.md",
       "plane": "use",
-      "digest": "sha256:67a0e6b63a943904eacbf7d26227e3c9ad650d17e8aa937c40b3fdad8f389fdd",
+      "digest": "sha256:b12caa887a325820c591d462ae2c0a4521eda001cb71d3def72e9b55924f892f",
       "capabilityGroup": "getting-started",
       "audience": [
         "agent",
@@ -23,7 +23,7 @@
       "title": "Install and verify Buildchain",
       "path": "docs/install.md",
       "plane": "use",
-      "digest": "sha256:34bc161a26595f95684694d341616e47bfd65b0c51a63225e68a575179636175",
+      "digest": "sha256:2600738a92b5853bc26d4e01211f0c07b8b36a21d4d72ca809bc6032dff5dc5f",
       "capabilityGroup": "getting-started",
       "audience": [
         "consumer"
@@ -36,7 +36,7 @@
       "title": "Release Passport protocol",
       "path": "docs/release-passport.md",
       "plane": "verify",
-      "digest": "sha256:ca764740841b364ff7cfea79b87221d29c09df09fee6d19e78ed4b0b173bfad3",
+      "digest": "sha256:332f058d9a016cc31c709a3447a56dc43ffd0c5e6cdbcd15f9a62f61bb16eb15",
       "capabilityGroup": "release-passport-trust",
       "audience": [
         "release-operator",
@@ -78,7 +78,7 @@
       "title": "README badge blocks",
       "path": "docs/readme-badges.md",
       "plane": "use",
-      "digest": "sha256:ddaf49a7d6e6c11aea8d21d1ba736159897e16207cd74af0044014425faf8a2c",
+      "digest": "sha256:d032ddd27db62bdb21031cbd0673d9ae61af0250c12522fe6106e7aff835fb21",
       "capabilityGroup": "distribution-indexes",
       "audience": [
         "consumer",
@@ -217,7 +217,7 @@
       "title": "CLI and npm package",
       "path": "docs/cli.md",
       "plane": "use",
-      "digest": "sha256:2f55874feb9acecce1c471b96e07bb9a198a8da93efd0f859d69f353bf9c36a8",
+      "digest": "sha256:b6bc32831d202d5c542d72f6e63322f632014751e7db00862b28fb9ce5318fd3",
       "capabilityGroup": "api-cli-reference",
       "audience": [
         "agent",
@@ -245,7 +245,7 @@
       "title": "KFD support and KFD-3 surface registration",
       "path": "docs/kfd-support.md",
       "plane": "verify",
-      "digest": "sha256:4bb33e408a2129e1534e92bea78d3cc0e4d8f986b0fbb27fe73ae6eae46b9ca3",
+      "digest": "sha256:704efbf7be24d641d8b119737eb33b3e98fea8c55cf434f7f475160809f4e3a4",
       "capabilityGroup": "kfd-trust",
       "audience": [
         "agent",
@@ -259,7 +259,7 @@
       "title": "Lifecycle protocol",
       "path": "docs/lifecycle-protocol.md",
       "plane": "use",
-      "digest": "sha256:c76516894cf540da9a6722ba96c475386901ab448ab71ede5850a185f6a716c9",
+      "digest": "sha256:191d706801abe5cea7927042b9cd7989f19cf868e726f8ac5852dff9490aa14f",
       "capabilityGroup": "reusable-build",
       "audience": [
         "consumer",
@@ -273,7 +273,7 @@
       "title": "Reusable build surface",
       "path": "docs/reusable-build-surface.md",
       "plane": "use",
-      "digest": "sha256:a3f979fcede4450dabe5b8d6182395993c9f28559f7176b071a6ff9db565a355",
+      "digest": "sha256:5f56d66ad2798bc46acde3f8091c2e5ccee80412c1b26b70c8197ff9c7f6a406",
       "capabilityGroup": "reusable-build",
       "audience": [
         "consumer",
@@ -287,7 +287,7 @@
       "title": "Publish transaction",
       "path": "docs/publish-transaction.md",
       "plane": "verify",
-      "digest": "sha256:c3fc5c49180db9167e1cf5bc5ff403e5a21cb55d1ba750bd0cfcd2429ad825b2",
+      "digest": "sha256:2523dd9a81e837918afae30c203349a7b29f00fdf953962a6db360fd95e0c6cb",
       "capabilityGroup": "release-passport-trust",
       "audience": [
         "release-operator"
@@ -355,7 +355,7 @@
       "title": "Web surface deployments",
       "path": "docs/web-surface-deployments.md",
       "plane": "use",
-      "digest": "sha256:58673b84879a219572fe39aa8b4d01cfc34fabf664b3318753d61043821edaff",
+      "digest": "sha256:8d60ee80b1d4af1faa092ff9d7170330b02361d1f479221f73c6dc021aac1e60",
       "capabilityGroup": "site-and-propagation",
       "audience": [
         "site",