@kungfu-tech/buildchain 2.14.12 → 2.14.13-alpha.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -3690,7 +3690,7 @@
3690
3690
  "pageRegistryPath": "dist/site/page-registry.json",
3691
3691
  "cliRegistryDigest": "90c8650f870c350ca187c612c37f2459dcbfe265aa9b1d5b375ee5c4fb31fab6",
3692
3692
  "workflowRegistryDigest": "02950eef2769b1bd2d899099ef23c7b9ae716b18d602e25aef169d788bc6ece0",
3693
- "pageRegistryDigest": "a30056f990a316d0366c6b1bd805ad69dd4e59791975cc46a6a5428cbf6b32cd"
3693
+ "pageRegistryDigest": "01c3418ba850dcf1bc678be943f60082c609c0984c5101cc2181bb9803cd6aa4"
3694
3694
  },
3695
3695
  "comparison": {
3696
3696
  "missingCliRegistry": [],
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-publication-release-registry",
4
- "generatedAt": "2026-07-21T19:08:54.164Z",
5
- "publishedAt": "2026-07-21T19:08:54.164Z",
4
+ "generatedAt": "2026-07-21T19:58:22.693Z",
5
+ "publishedAt": "2026-07-21T19:58:22.693Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "a0f75abc3460b5c6e45769ba4b88496396231816",
22
+ "sourceRevision": "98ee8b787cdd471b0ce60efa555f2abca7378927",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -32,7 +32,7 @@
32
32
  },
33
33
  "package": {
34
34
  "name": "@kungfu-tech/buildchain",
35
- "version": "2.14.12",
35
+ "version": "2.14.13-alpha.1",
36
36
  "versionSource": "package.json#version"
37
37
  },
38
38
  "sourceKind": "package-site-bundle",
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-site-manifest",
4
- "generatedAt": "2026-07-21T19:08:54.164Z",
5
- "publishedAt": "2026-07-21T19:08:54.164Z",
4
+ "generatedAt": "2026-07-21T19:58:22.693Z",
5
+ "publishedAt": "2026-07-21T19:58:22.693Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "a0f75abc3460b5c6e45769ba4b88496396231816",
22
+ "sourceRevision": "98ee8b787cdd471b0ce60efa555f2abca7378927",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -37,7 +37,7 @@
37
37
  },
38
38
  "package": {
39
39
  "name": "@kungfu-tech/buildchain",
40
- "version": "2.14.12",
40
+ "version": "2.14.13-alpha.1",
41
41
  "versionSource": "package.json#version"
42
42
  },
43
43
  "entrypoint": "buildchain-site.json",
@@ -69,7 +69,7 @@
69
69
  "path": "docs/release-passport.md",
70
70
  "plane": "verify",
71
71
  "exists": true,
72
- "digest": "sha256:2dec5e7cd0050815d17c30dbbfd2f5c3c987f55a4558514118538d81a9c562b0"
72
+ "digest": "sha256:f10d2f0f9cc694976b2a1d2a61195ed155c1bc24c964de1551475882e8197c92"
73
73
  },
74
74
  {
75
75
  "id": "controller-evidence",
@@ -165,7 +165,7 @@
165
165
  "path": "docs/migration-inventory.md",
166
166
  "plane": "verify",
167
167
  "exists": true,
168
- "digest": "sha256:dd4b7e2aefef64d62c0a7d53b7c96ed0a1be963b2b7210962bd6e73560f2fbc5"
168
+ "digest": "sha256:a5f7271a065544f7ac525dbddfe3d4b9f621b5284c730089f086dd9f961e883c"
169
169
  },
170
170
  {
171
171
  "id": "ownership",
@@ -189,7 +189,7 @@
189
189
  "path": "docs/cli.md",
190
190
  "plane": "use",
191
191
  "exists": true,
192
- "digest": "sha256:733a43df58e6fa643ef529d8736fbdbea053b5b58e5fbe445b595ea1e25861f6"
192
+ "digest": "sha256:758625143a51d0fe66871220c52273ceaf5c7a47fc1a99bda4608e3ad587ae81"
193
193
  },
194
194
  {
195
195
  "id": "build-facts",
@@ -221,7 +221,7 @@
221
221
  "path": "docs/reusable-build-surface.md",
222
222
  "plane": "use",
223
223
  "exists": true,
224
- "digest": "sha256:9b615d68390ace8f870ef2e6fd481ae077e28514fc2f34d8efa089ca2f11a8c8"
224
+ "digest": "sha256:dea8ec2f1f2ea75e569a989988e9d6f76067e1d0ae496dadc34ef1dcfbfa35dd"
225
225
  },
226
226
  {
227
227
  "id": "publish-transaction",
package/docs/cli.md CHANGED
@@ -686,6 +686,12 @@ collector copies `versionImpact` plus `surfaceImpacts` into
686
686
  `buildchain explain release --for agent --json` state why a release is patch,
687
687
  minor, or major instead of relying on file-path memory.
688
688
 
689
+ For a promote-only stable transaction, Buildchain can derive a patch-level
690
+ release-governance ledger when the PR-stage release-candidate passport proves
691
+ the stable source tree is exactly the previously qualified candidate tree.
692
+ This fallback is unavailable when candidate evidence is absent, stale, or not
693
+ tree-equivalent.
694
+
689
695
  Buildchain dogfoods its observability toolkit in this lane. The standalone
690
696
  builder writes API-generated events, while the workflow uses `buildchain mark`,
691
697
  `buildchain span`, `buildchain verify observability-log`, and `buildchain log
@@ -46,7 +46,7 @@ do not duplicate alpha and stable jobs or call
46
46
  `.release-candidate-promote.yml` directly.
47
47
 
48
48
  Buildchain also keeps the workflow-file layout transition declarative in
49
- `.buildchain/promotion-shell-routing.json`. Stable `v2.14.10` contains the hidden
49
+ `.buildchain/promotion-shell-routing.json`. Stable `v2.14.12` contains the hidden
50
50
  advanced workflow, so the stable lane is pinned to that implementation's
51
51
  immutable release SHA and forwards the full internal identity surface. This is
52
52
  provider-owned compatibility state; consumers still keep the same single public
@@ -405,6 +405,12 @@ content can remain patch while an additive `registry.kind` field on the
405
405
  machine-consumed KFD registry schema records a minor `kfd-registry-schema`
406
406
  surface impact.
407
407
 
408
+ Promote-only stable publication may omit an explicit impact ledger only when
409
+ the downloaded PR-stage release-candidate passport proves exact tree
410
+ equivalence. Buildchain then records a patch-level release-governance impact
411
+ bound to that candidate. Missing, stale, or non-equivalent candidate evidence
412
+ does not receive this fallback and remains fail-closed.
413
+
408
414
  Verify a release passport:
409
415
 
410
416
  ```bash
@@ -754,7 +754,7 @@ promotion starts:
754
754
  `vN`, and `buildchain-stable-contract-lock-path`.
755
755
 
756
756
  The generated router also owns the stable-shell layout transition through
757
- `.buildchain/promotion-shell-routing.json`. Stable `v2.14.10` contains the hidden
757
+ `.buildchain/promotion-shell-routing.json`. Stable `v2.14.12` contains the hidden
758
758
  advanced workflow, so the stable lane calls that workflow at the exact immutable
759
759
  SHA behind the released `v2` state and forwards the complete internal promotion
760
760
  identity surface. The logical shell identity remains `vN`, and the router
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@kungfu-tech/buildchain",
3
- "version": "2.14.12",
3
+ "version": "2.14.13-alpha.1",
4
4
  "private": false,
5
5
  "description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
6
6
  "repository": "https://github.com/kungfu-systems/buildchain",