@kungfu-tech/buildchain 2.14.2 → 2.14.3-alpha.1

package/dist/site/capability-registry.json

@@ -50,7 +50,7 @@
         "manualCount": 4,
         "pageCount": 4,
         "cliCommandCount": 21,
-        "nodeApiCount": 6,
+        "nodeApiCount": 7,
         "workflowCount": 2,
         "actionCount": 1
       },
@@ -287,7 +287,7 @@
         "pageCount": 6,
         "cliCommandCount": 0,
         "nodeApiCount": 2,
-        "workflowCount": 31,
+        "workflowCount": 32,
         "actionCount": 0
       },
       "manuals": [

package/dist/site/controller-registry.json

@@ -1345,8 +1345,8 @@
       "id": "release-candidate-promotion",
       "version": 1,
       "workflow": {
-        "id": "release-candidate-promote",
-        "path": ".github/workflows/release-candidate-promote.yml"
+        "id": ".release-candidate-promote",
+        "path": ".github/workflows/.release-candidate-promote.yml"
       },
       "inputs": {
         "BUILDCHAIN_ISSUE_APP_ID": {
@@ -1445,6 +1445,50 @@
           "classification": "included",
           "source": "workflow-call-input"
         },
+        "promotion-contract-lock-digest": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "promotion-contract-lock-path": {
+          "classification": "digest-only",
+          "source": "workflow-call-input"
+        },
+        "promotion-override-used": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "promotion-publication-channel": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "promotion-router-ref": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "promotion-router-sha": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "promotion-runtime-ref": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "promotion-runtime-sha": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "promotion-shell-ref": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "promotion-shell-sha": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
+        "promotion-target-ref": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
         "publication-admission-json": {
           "classification": "digest-only",
           "source": "workflow-call-input"
@@ -1655,7 +1699,7 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:2507d132710f66d3ae6ffdb18f5e66172707b8e0f9ad9e888f7422fdacc99133"
+      "digest": "sha256:6a531c572b59eb3b8aa5d47df3658f8f438a0d026468dd13b1a6642a3ea8c425"
     },
     {
       "schemaVersion": 1,
@@ -1683,6 +1727,10 @@
           "classification": "included",
           "source": "workflow-call-input"
         },
+        "downstream-prepare-command": {
+          "classification": "digest-only",
+          "source": "workflow-call-input"
+        },
         "downstream-repository": {
           "classification": "included",
           "source": "workflow-call-input"
@@ -1691,6 +1739,10 @@
           "classification": "included",
           "source": "workflow-call-input"
         },
+        "downstream-verify-command": {
+          "classification": "digest-only",
+          "source": "workflow-call-input"
+        },
         "dry-run": {
           "classification": "included",
           "source": "workflow-call-input"
@@ -1715,6 +1767,10 @@
           "classification": "redacted",
           "source": "workflow-call-secret"
         },
+        "refresh-managed-readme-badges": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
         "source-node": {
           "classification": "included",
           "source": "workflow-call-input"
@@ -1758,8 +1814,8 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:9b9f9a2320c4349903d72ee46e329211b5538ed5ebebaa93559df4eafb835997"
+      "digest": "sha256:ede9eba43b87cf19330d5f8203a1585bf066aa9affc9cac0f43230ac76b8580d"
     }
   ],
-  "digest": "sha256:266928038838e26ba1350c70d78290723ddb2fd209b66ab1afab776d948a379b"
+  "digest": "sha256:5f771d5b2f481a28afc48f516685f50985c1d51391857cdf04e3238c271fecc8"
 }

package/dist/site/kfd-claims.json

@@ -14,20 +14,20 @@
   },
   "runtimeContract": {
     "contract": "kungfu-buildchain-runtime-contract-world",
-    "compatibilityDigest": "sha256:af162b86ab4506e9b5f1d3c59b41f3fd57fbad79ff4d749a7f12ff16460517f8",
+    "compatibilityDigest": "sha256:edc3653e5cb34efd97065a6941db16140bbf375a565bbcf329d9d795bb07676f",
     "majorLine": "v2"
   },
   "publicSurfaceReverseAudit": {
     "contract": "kungfu-buildchain-public-surface-reverse-audit",
     "path": "dist/site/public-surface-audit.json",
     "status": "passed",
-    "sha256": "3d9e43510266b900fe450253fbb8aac72953c7128a797154150eb301ef71ed6a",
+    "sha256": "01e8843cfb9848464fdc5402afb1760f3b6f7c5a79b4a9251cfd91010217c665",
     "summary": {
       "cliCommandCount": 83,
-      "workflowCount": 48,
+      "workflowCount": 49,
       "actionCount": 4,
       "sitePageCount": 50,
-      "docCommandRefCount": 257,
+      "docCommandRefCount": 258,
       "failureCount": 0
     },
     "auditBoundary": {
@@ -166,6 +166,7 @@
         "packages/core/buildchain-contract.js",
         "scripts/buildchain-contract-lock.mjs",
         ".github/workflows/.build.yml",
+        ".github/workflows/.release-candidate-promote.yml",
         ".github/workflows/release-candidate-promote.yml",
         "docs/reusable-build-surface.md"
       ],
@@ -181,6 +182,7 @@
         "actions/promote-buildchain-ref/index.js",
         "actions/promote-buildchain-ref/action.yml",
         "scripts/ensure-github-release.mjs",
+        ".github/workflows/.release-candidate-promote.yml",
         ".github/workflows/release-candidate-promote.yml",
         "docs/release-governance.md"
       ],
@@ -209,6 +211,7 @@
       "sourcePaths": [
         "scripts/npm-publish-transaction.mjs",
         "actions/promote-buildchain-ref/index.js",
+        ".github/workflows/.release-candidate-promote.yml",
         ".github/workflows/release-candidate-promote.yml",
         "docs/publish-transaction.md"
       ],
@@ -225,13 +228,13 @@
       "contract": "kungfu-buildchain-public-surface-reverse-audit",
       "path": "dist/site/public-surface-audit.json",
       "status": "passed",
-      "sha256": "3d9e43510266b900fe450253fbb8aac72953c7128a797154150eb301ef71ed6a",
+      "sha256": "01e8843cfb9848464fdc5402afb1760f3b6f7c5a79b4a9251cfd91010217c665",
       "summary": {
         "cliCommandCount": 83,
-        "workflowCount": 48,
+        "workflowCount": 49,
         "actionCount": 4,
         "sitePageCount": 50,
-        "docCommandRefCount": 257,
+        "docCommandRefCount": 258,
         "failureCount": 0
       },
       "auditBoundary": {
@@ -1303,6 +1306,18 @@
           "public": true,
           "packageExport": "./release-passport"
         },
+        {
+          "id": "export:./release-passport-contract",
+          "name": "@kungfu-tech/buildchain/release-passport-contract",
+          "kind": "package-export",
+          "sourcePath": "packages/core/release-passport-contract.js",
+          "evidencePath": "packages/core/release-passport-contract.js",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "packageExport": "./release-passport-contract"
+        },
         {
           "id": "export:./release-propagation",
           "name": "@kungfu-tech/buildchain/release-propagation",
@@ -2752,6 +2767,91 @@
           ],
           "reverseAuditSource": ".github/workflows"
         },
+        {
+          "id": "workflow:.release-candidate-promote",
+          "name": "workflow:.release-candidate-promote",
+          "kind": "workflow",
+          "sourcePath": ".github/workflows/.release-candidate-promote.yml",
+          "evidencePath": ".github/workflows/.release-candidate-promote.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 70,
+          "inputs": [
+            "allow-repository",
+            "artifact-name",
+            "artifact-patterns",
+            "branch-protection-bypass-apps",
+            "branch-protection-bypass-teams",
+            "branch-protection-bypass-users",
+            "buildchain-contract-compatibility-policy",
+            "buildchain-contract-drift-issue-mode",
+            "buildchain-contract-lock-path",
+            "buildchain-ref",
+            "buildchain-repository",
+            "channel",
+            "dry-run",
+            "github-release",
+            "github-release-notes",
+            "github-release-title",
+            "package-manager",
+            "promotion-contract-lock-digest",
+            "promotion-contract-lock-path",
+            "promotion-override-used",
+            "promotion-publication-channel",
+            "promotion-router-ref",
+            "promotion-router-sha",
+            "promotion-runtime-ref",
+            "promotion-runtime-sha",
+            "promotion-shell-ref",
+            "promotion-shell-sha",
+            "promotion-target-ref",
+            "publication-admission-json",
+            "publication-auto-admission",
+            "publication-auto-no-gate",
+            "publication-consumer-predicate-id",
+            "publication-consumer-qualification-command",
+            "publication-control-plane-audit-json",
+            "publication-expected-json",
+            "publication-gate-aggregate-json",
+            "publication-package-name",
+            "publication-product",
+            "publication-publisher-workflow-path",
+            "publication-runner-provenance-json",
+            "publication-target",
+            "publication-used-nonces-json",
+            "publication-used-qualification-nonces-json",
+            "publish-artifact-kind",
+            "publish-command",
+            "publish-dist-tag",
+            "publish-mode",
+            "publish-package-main",
+            "publish-package-set-order",
+            "publish-required-artifacts-json",
+            "publish-target",
+            "release-candidate-workflow-file",
+            "release-candidate-workflow-name",
+            "release-passport",
+            "release-passport-buildchain-self-kfd",
+            "release-passport-impact-json",
+            "release-passport-kfd-1-witness-jsons",
+            "release-passport-kfd-2-claim-jsons",
+            "release-passport-kfd-3-artifact-verify-command",
+            "release-passport-kfd-3-artifact-witness-jsons",
+            "release-passport-kfd-3-prebuild-witness-jsons",
+            "release-passport-output-dir",
+            "release-passport-platform-manifest-paths",
+            "release-passport-product-name",
+            "required-artifact-count",
+            "required-status-check",
+            "runner-preset",
+            "target-ref",
+            "target-sha",
+            "trusted-publishing"
+          ],
+          "reverseAuditSource": ".github/workflows"
+        },
         {
           "id": "workflow:.release-docker",
           "name": "workflow:.release-docker",
@@ -3605,7 +3705,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 59,
+          "inputCount": 62,
           "inputs": [
             "allow-repository",
             "artifact-name",
@@ -3613,11 +3713,14 @@
             "branch-protection-bypass-apps",
             "branch-protection-bypass-teams",
             "branch-protection-bypass-users",
+            "buildchain-alpha-contract-lock-path",
+            "buildchain-channel",
             "buildchain-contract-compatibility-policy",
             "buildchain-contract-drift-issue-mode",
             "buildchain-contract-lock-path",
             "buildchain-ref",
             "buildchain-repository",
+            "buildchain-stable-contract-lock-path",
             "channel",
             "dry-run",
             "github-release",
@@ -3707,19 +3810,22 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 13,
+          "inputCount": 16,
           "inputs": [
             "buildchain-ref",
             "buildchain-repository",
             "downstream-base-ref",
             "downstream-branch",
+            "downstream-prepare-command",
             "downstream-repository",
             "downstream-target",
+            "downstream-verify-command",
             "dry-run",
             "graph-json",
             "lock-path",
             "pr-body",
             "pr-title",
+            "refresh-managed-readme-badges",
             "source-node",
             "upstream-release-json"
           ],
@@ -3821,7 +3927,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 59,
+          "inputCount": 60,
           "inputs": [
             "allow-repository",
             "branch-protection-bypass-apps",
@@ -3871,6 +3977,7 @@
             "release-passport-output-dir",
             "release-passport-platform-manifest-paths",
             "release-passport-product-name",
+            "release-passport-promotion-routing-json",
             "require-governance",
             "require-publication-qualification",
             "require-publish-source-lock",
@@ -4611,6 +4718,17 @@
         "participantFacing": true,
         "public": true
       },
+      {
+        "id": "control:.github/workflows/.release-candidate-promote.yml",
+        "name": "control:.github/workflows/.release-candidate-promote.yml",
+        "kind": "workflow",
+        "sourcePath": ".github/workflows/.release-candidate-promote.yml",
+        "evidencePath": ".github/workflows/.release-candidate-promote.yml",
+        "availability": "shipped",
+        "visibility": "public",
+        "participantFacing": true,
+        "public": true
+      },
       {
         "id": "control:.github/workflows/release-candidate-promote.yml",
         "name": "control:.github/workflows/release-candidate-promote.yml",
@@ -4702,6 +4820,6 @@
         }
       }
     ],
-    "publicSurfaceCount": 304
+    "publicSurfaceCount": 307
   }
 }

package/dist/site/kfd-upstream-aggregate.json

@@ -4,7 +4,7 @@
   "product": {
     "id": "kungfu-tech-buildchain",
     "name": "@kungfu-tech/buildchain",
-    "version": "2.14.2",
+    "version": "2.14.3-alpha.1",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "source": {
@@ -21,7 +21,7 @@
       "roleValid": true,
       "package": {
         "name": "@kungfu-tech/kfd",
-        "version": "1.0.0-alpha.21"
+        "version": "1.0.0-alpha.29"
       },
       "repository": "kungfu-systems/kfd",
       "kfd": {
@@ -37,19 +37,19 @@
         "line": "v1.0",
         "channel": "alpha",
         "npmPackage": "@kungfu-tech/kfd",
-        "npmVersion": "1.0.0-alpha.21",
+        "npmVersion": "1.0.0-alpha.29",
         "source": {
           "repository": "kungfu-systems/kfd",
           "branch": "alpha/v1/v1.0"
         },
         "rationale": "KFD uses an anchored/manual Buildchain mode: the public package version is an explicit release fact, while the outer KFD line remains v1.0."
       },
-      "kfd3SurfaceCount": 18,
+      "kfd3SurfaceCount": 24,
       "assets": [
         {
           "path": "kfd.release.json",
           "kind": "package",
-          "sha256": "sha256:bfb302c839b6cb45204d541b5af5b1c211568efb16fb3eebbb04dc65f7de83d2",
+          "sha256": "sha256:5fc018c587ba2e2d04932cf46ebb51cf617768e36f4af50e38fcdaa2fcdc39e1",
           "contract": "kfd-release-anchor",
           "role": "",
           "directory": false
@@ -57,7 +57,7 @@
         {
           "path": ".buildchain/kfd-1/contract-world.witness.json",
           "kind": "package",
-          "sha256": "sha256:542fe5b730f2e4782655d096ec04a5dd82a88d4fc9e8701ee235eb111a06dab6",
+          "sha256": "sha256:f1b3faf10ac37a8b69482cf4b0e996972a736ffcb441be898ef6f548a871e034",
           "contract": "",
           "role": "",
           "directory": false
@@ -65,7 +65,7 @@
         {
           "path": ".buildchain/kfd-2/public-release-trust.claim.json",
           "kind": "package",
-          "sha256": "sha256:3780b47472762b5ce9575250da73ee800af71dd194a9b0a3f61a063569311237",
+          "sha256": "sha256:eb157cad7d0b711f81dfb0fca4f46b7f9dd531860dc43c6f95e86c12d366e5b7",
           "contract": "",
           "role": "",
           "directory": false
@@ -73,7 +73,7 @@
         {
           "path": ".buildchain/kfd-2/kfd-foundation.trust-claims.json",
           "kind": "package",
-          "sha256": "sha256:87757bd26c8f64465472aaafda05fe56497939a3ce66274563c142594d9d769b",
+          "sha256": "sha256:da6625c1fda4102704b4320f99276c6118d201e064d58266ca5426f6e71ef26e",
           "contract": "kfd-2-trust-claims",
           "role": "",
           "directory": false
@@ -81,7 +81,7 @@
         {
           "path": ".buildchain/kfd-2/kfd-foundation.trust-assessment.json",
           "kind": "package",
-          "sha256": "sha256:c3749585bb4a295bb2f0f510a4b6030f0398d9a09dc50dab0ace31248bf95b0f",
+          "sha256": "sha256:dad8415898516b571e86f2c9671f81a31f9c1af055b1f76f237184062181ba03",
           "contract": "kfd-2-trust-assessment",
           "role": "",
           "directory": false
@@ -89,7 +89,7 @@
         {
           "path": ".buildchain/kfd-3/collaboration-interface.json",
           "kind": "package",
-          "sha256": "sha256:fa41128be4ee57a4a40b76d4d7a063c01d7c2e5c53aec2b9c6db819c7a27b22b",
+          "sha256": "sha256:5641f78086384fa7288c05a373cb8f0d90a5496c368b014e33f3873527c5b8ce",
           "contract": "kfd-3-collaboration-interface",
           "role": "",
           "directory": false
@@ -97,7 +97,7 @@
         {
           "path": "standards.json",
           "kind": "package",
-          "sha256": "sha256:4ee9e5fc732eef1b43c75a146125496e0dbd859ef5a11d0c637c41e9091c677f",
+          "sha256": "sha256:e19cb764adf739b9eb5627e83e32e00e35613af0a7c0968d1cf51cd8635c891e",
           "contract": "kfd-standards-metadata",
           "role": "",
           "directory": false
@@ -113,7 +113,7 @@
       "kfd"
     ],
     "packageVersions": {
-      "kfd": "1.0.0-alpha.21"
+      "kfd": "1.0.0-alpha.29"
     },
     "status": "collected"
   }

package/dist/site/manual-registry.json

@@ -36,7 +36,7 @@
       "title": "Release Passport protocol",
       "path": "docs/release-passport.md",
       "plane": "verify",
-      "digest": "sha256:2421e3e9f2dd892971bea5deb605492dfec38f3a83e539229442b55380bebe25",
+      "digest": "sha256:0029014ffab7d7228a12d8b92326b78cf6757a41f481b661c5997e2cef06d3cc",
       "capabilityGroup": "release-passport-trust",
       "audience": [
         "release-operator",
@@ -79,7 +79,7 @@
       "title": "Release Candidate Passport",
       "path": "docs/release-candidate.md",
       "plane": "verify",
-      "digest": "sha256:1fc581cf1b4e4a202464c8d6671b3bff12d0b349760246a951e88ef524f99e6b",
+      "digest": "sha256:81463a74dfe3d337768797b5b47f8cb3a22389312a917447f9b0e6096ab4f90a",
       "capabilityGroup": "reusable-build",
       "audience": [
         "release-operator",
@@ -93,7 +93,7 @@
       "title": "Release propagation",
       "path": "docs/release-propagation.md",
       "plane": "use",
-      "digest": "sha256:d5877075eb41a3d41e531549da113756d29d6f34c91e3b68b8ce650753d5ca1d",
+      "digest": "sha256:fc2b743e3d76c4f90cdd8c6560cf9d619ad25d74c15c074be96db7bcb6cc2a29",
       "capabilityGroup": "site-and-propagation",
       "audience": [
         "release-operator",
@@ -205,7 +205,7 @@
       "title": "Migration inventory",
       "path": "docs/migration-inventory.md",
       "plane": "verify",
-      "digest": "sha256:80018cf78785431e67bbc5278d82dda80d0baa320cdb5e4abda26a0b05e5c0bc",
+      "digest": "sha256:08daa7d0b42543c1d1dacf1f56f461f0e7a7ca9e25d0859e39599ceb97054ee0",
       "capabilityGroup": "governance-versioning",
       "audience": [
         "maintainer",
@@ -302,7 +302,7 @@
       "title": "Reusable build surface",
       "path": "docs/reusable-build-surface.md",
       "plane": "use",
-      "digest": "sha256:a2092c8064332cec9a4be852b24d94f90625cb45f885c4c3208f7068a643a3f0",
+      "digest": "sha256:7b745037fedafa1bc2f8ce65f32bb7e887988df2bfe2439694da418d482f6929",
       "capabilityGroup": "reusable-build",
       "audience": [
         "consumer",
@@ -329,7 +329,7 @@
       "title": "Release governance",
       "path": "docs/release-governance.md",
       "plane": "why",
-      "digest": "sha256:e64ffd6183eaa7b73f8c0c133a645ced22212bca70c9609ad5f667cf3830aaae",
+      "digest": "sha256:d25a2ceb6cdc1a1db321e7d2a6aa8a454fb4d7a10560177604f8ecb5801a6e66",
       "capabilityGroup": "governance-versioning",
       "audience": [
         "maintainer",

package/dist/site/node-api-registry.json

@@ -8,7 +8,7 @@
       "specifier": "@kungfu-tech/buildchain",
       "export": ".",
       "target": "./packages/core/index.js",
-      "digest": "sha256:454830df8be696e9c25136421dd9f4efaf5900b043422f5c4238648b493bc15c",
+      "digest": "sha256:1863f8af4327bf4d77b46d0646043b6675c0094656edb6ba69f221c7b1b8da82",
       "summary": "Root toolkit export for Buildchain's public Node API.",
       "capabilityGroup": "api-cli-reference",
       "audience": [
@@ -47,7 +47,7 @@
       "specifier": "@kungfu-tech/buildchain/core",
       "export": "./core",
       "target": "./packages/core/index.js",
-      "digest": "sha256:454830df8be696e9c25136421dd9f4efaf5900b043422f5c4238648b493bc15c",
+      "digest": "sha256:1863f8af4327bf4d77b46d0646043b6675c0094656edb6ba69f221c7b1b8da82",
       "summary": "Alias for the root public toolkit export.",
       "capabilityGroup": "api-cli-reference",
       "audience": [
@@ -86,7 +86,7 @@
       "specifier": "@kungfu-tech/buildchain/buildchain-contract",
       "export": "./buildchain-contract",
       "target": "./packages/core/buildchain-contract.js",
-      "digest": "sha256:a7af059ca8fd80a3e12485d3f756276326a1593edc40e3e1518ff709c47399fe",
+      "digest": "sha256:f5959c9260e04c9779396c50bd352956012da9ddb6d55532efc64a4536236dfa",
       "summary": "Runtime contract world and compatibility digest APIs for floating-ref drift checks.",
       "capabilityGroup": "governance-versioning",
       "audience": [
@@ -99,7 +99,7 @@
       "specifier": "@kungfu-tech/buildchain/controller-evidence",
       "export": "./controller-evidence",
       "target": "./packages/core/controller-evidence.js",
-      "digest": "sha256:3c9cf557ee0e2e4376335bb7d0e61b6e8c9a1d8699962dd8a1e7adc529e13f89",
+      "digest": "sha256:074c9bd73addbd33e03a4fd251ad27e7fe4bac51c25d0747d66561d31d738bab",
       "summary": "Project-independent controller descriptors, source/runtime-bound plans, receipts, aggregates, and validation APIs.",
       "capabilityGroup": "reusable-build",
       "audience": [
@@ -294,7 +294,7 @@
       "specifier": "@kungfu-tech/buildchain/buildchain-publication-authority",
       "export": "./buildchain-publication-authority",
       "target": "./packages/core/buildchain-publication-authority.js",
-      "digest": "sha256:5c1c4ec0ef4cbda07ae4dead6423f800ecad6d45f02f19745aef23513fae45d4",
+      "digest": "sha256:2c999f7b237e532aceb2221ce504144aac26357ed3057b47f853b15f4eb76298",
       "summary": "Buildchain-owned closed-world publication authority descriptor registry.",
       "capabilityGroup": "release-passport-trust",
       "audience": [
@@ -346,7 +346,7 @@
       "specifier": "@kungfu-tech/buildchain/release-passport",
       "export": "./release-passport",
       "target": "./packages/core/release-passport.js",
-      "digest": "sha256:af307129d9df51a1a0d5f7cfff742b0db7d9f8f04dd810cf97a62c79e2d3a726",
+      "digest": "sha256:05abae7c71444b0c48c097a4363218ed3ae7d652677588f1cf2c457a358cc4c1",
       "summary": "Release passport collection, verification, explanation, and evidence APIs.",
       "capabilityGroup": "release-passport-trust",
       "audience": [
@@ -355,6 +355,19 @@
       ],
       "maturity": "stable"
     },
+    {
+      "specifier": "@kungfu-tech/buildchain/release-passport-contract",
+      "export": "./release-passport-contract",
+      "target": "./packages/core/release-passport-contract.js",
+      "digest": "sha256:230863e62b63bce897f8ea51859c958a3c8aacf38b87ed9640bdada3c9383da6",
+      "summary": "Standalone release passport JSON Schema, ownership/check manifest, and structural validation APIs.",
+      "capabilityGroup": "release-passport-trust",
+      "audience": [
+        "developer",
+        "agent"
+      ],
+      "maturity": "stable"
+    },
     {
       "specifier": "@kungfu-tech/buildchain/release-propagation",
       "export": "./release-propagation",
@@ -385,7 +398,7 @@
       "specifier": "@kungfu-tech/buildchain/buildchain-kfd-claims",
       "export": "./buildchain-kfd-claims",
       "target": "./packages/core/buildchain-kfd-claims.js",
-      "digest": "sha256:e9178d4fa1d5aba1063aacf3f0b4fa0d9523c2379824386ac65a21c8262ac0b4",
+      "digest": "sha256:316ca2f86a3934ccacd13b2321e2c10701337638266793d230c687c2fe963e84",
       "summary": "Buildchain self KFD claim registry, witnesses, and public claim APIs.",
       "capabilityGroup": "kfd-trust",
       "audience": [