@kungfu-tech/buildchain 3.0.0 → 3.0.1-alpha.1

package/dist/site/controller-registry.json

@@ -1006,6 +1006,10 @@
           "classification": "redacted",
           "source": "workflow-call-input"
         },
+        "production-source-sha": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
         "publication-admission-json": {
           "classification": "digest-only",
           "source": "workflow-call-input"
@@ -1098,7 +1102,7 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:65cc01e6d2b622277d67237e4811e82d24d2289d55c2f7d2dfb72325c610b2ea"
+      "digest": "sha256:c5274b37f04d0054559fdc8698c51bd0f0d8ae470baf163e9caa7699aa970575"
     },
     {
       "schemaVersion": 1,
@@ -1722,6 +1726,14 @@
           "classification": "included",
           "source": "workflow-call-input"
         },
+        "release-activation-command": {
+          "classification": "digest-only",
+          "source": "workflow-call-input"
+        },
+        "release-activation-receipt-set-path": {
+          "classification": "digest-only",
+          "source": "workflow-call-input"
+        },
         "release-candidate-workflow-file": {
           "classification": "included",
           "source": "workflow-call-input"
@@ -1738,6 +1750,14 @@
           "classification": "included",
           "source": "workflow-call-input"
         },
+        "release-passport-evidence-command": {
+          "classification": "digest-only",
+          "source": "workflow-call-input"
+        },
+        "release-passport-evidence-path": {
+          "classification": "digest-only",
+          "source": "workflow-call-input"
+        },
         "release-passport-impact-json": {
           "classification": "digest-only",
           "source": "workflow-call-input"
@@ -1852,7 +1872,7 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:0fcfcb36cad335e6ffe50b087d17f8bce9d6bd711e285740b28ce05bf9be7c6e"
+      "digest": "sha256:2bae7310eb27f48a3afc6b7f993872d6b6121cf3f67ad4d6e2da35b254c4d047"
     },
     {
       "schemaVersion": 1,
@@ -2028,5 +2048,5 @@
       "digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555"
     }
   ],
-  "digest": "sha256:5dc72042c6cd7d50fc4b77d186e14b676b48be0ac8c88ee85eb54ea1b428e144"
+  "digest": "sha256:4b5425a3111fa55d3c9244c4af08effa9045362680bd0833a30d718aba256600"
 }

package/dist/site/kfd-claims.json

@@ -14,19 +14,19 @@
   },
   "runtimeContract": {
     "contract": "kungfu-buildchain-runtime-contract-world",
-    "compatibilityDigest": "sha256:199fd83a7da33b0f654692ca973b33155e376ed50f0ce1f5864e1b6b18e0500a",
+    "compatibilityDigest": "sha256:008b1c5a90a787cf30106829ac7aca68ab501f6d9c375e415d9c5c6b89039f46",
     "majorLine": "v3"
   },
   "publicSurfaceReverseAudit": {
     "contract": "kungfu-buildchain-public-surface-reverse-audit",
     "path": "dist/site/public-surface-audit.json",
     "status": "passed",
-    "sha256": "e04e65883d48ed353c4a07f340b827444122ec28815d9b0d876b6fe45833e3bf",
+    "sha256": "b95d6937fa884cbb0f69c64b8361e3e862a87bd659f793c3d8e7a145d0a0c2dc",
     "summary": {
       "cliCommandCount": 87,
-      "workflowCount": 52,
+      "workflowCount": 53,
       "actionCount": 5,
-      "sitePageCount": 54,
+      "sitePageCount": 56,
       "docCommandRefCount": 276,
       "failureCount": 0
     },
@@ -228,12 +228,12 @@
       "contract": "kungfu-buildchain-public-surface-reverse-audit",
       "path": "dist/site/public-surface-audit.json",
       "status": "passed",
-      "sha256": "e04e65883d48ed353c4a07f340b827444122ec28815d9b0d876b6fe45833e3bf",
+      "sha256": "b95d6937fa884cbb0f69c64b8361e3e862a87bd659f793c3d8e7a145d0a0c2dc",
       "summary": {
         "cliCommandCount": 87,
-        "workflowCount": 52,
+        "workflowCount": 53,
         "actionCount": 5,
-        "sitePageCount": 54,
+        "sitePageCount": 56,
         "docCommandRefCount": 276,
         "failureCount": 0
       },
@@ -332,6 +332,18 @@
           "public": true,
           "plane": "use"
         },
+        {
+          "id": "doc:docs/auditable-demo.md",
+          "name": "Auditable demo artifact pipeline",
+          "kind": "documentation",
+          "sourcePath": "docs/auditable-demo.md",
+          "evidencePath": "docs/auditable-demo.md",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "plane": "verify"
+        },
         {
           "id": "doc:docs/binary-distribution.md",
           "name": "Binary distribution contract",
@@ -1425,6 +1437,18 @@
           "public": true,
           "packageExport": "./release-propagation"
         },
+        {
+          "id": "export:./release-activation-transaction",
+          "name": "@kungfu-tech/buildchain/release-activation-transaction",
+          "kind": "package-export",
+          "sourcePath": "packages/core/release-activation-transaction.js",
+          "evidencePath": "packages/core/release-activation-transaction.js",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "packageExport": "./release-activation-transaction"
+        },
         {
           "id": "export:./surface-manifest",
           "name": "@kungfu-tech/buildchain/surface-manifest",
@@ -2717,6 +2741,30 @@
           "public": true,
           "reverseAuditSource": "bin/buildchain.mjs"
         },
+        {
+          "id": "workflow:.auditable-demo",
+          "name": "workflow:.auditable-demo",
+          "kind": "workflow",
+          "sourcePath": ".github/workflows/.auditable-demo.yml",
+          "evidencePath": ".github/workflows/.auditable-demo.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 9,
+          "inputs": [
+            "adapter-path",
+            "artifact-retention-days",
+            "buildchain-repository",
+            "render-media",
+            "renderer-image",
+            "require-trusted-event",
+            "source-artifact-digest",
+            "source-artifact-name",
+            "source-ref"
+          ],
+          "reverseAuditSource": ".github/workflows"
+        },
         {
           "id": "workflow:.binary-release-assets",
           "name": "workflow:.binary-release-assets",
@@ -2933,7 +2981,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 79,
+          "inputCount": 83,
           "inputs": [
             "allow-repository",
             "artifact-name",
@@ -2992,10 +3040,14 @@
             "publish-required-artifacts-json",
             "publish-target",
             "publish-transaction-override",
+            "release-activation-command",
+            "release-activation-receipt-set-path",
             "release-candidate-workflow-file",
             "release-candidate-workflow-name",
             "release-passport",
             "release-passport-buildchain-self-kfd",
+            "release-passport-evidence-command",
+            "release-passport-evidence-path",
             "release-passport-impact-json",
             "release-passport-invariant-passport-command",
             "release-passport-invariant-passport-jsons",
@@ -3244,7 +3296,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 40,
+          "inputCount": 41,
           "inputs": [
             "artifact-path",
             "aws-region",
@@ -3274,6 +3326,7 @@
             "production-release-on-main",
             "production-release-pr-mode",
             "production-release-pr-token",
+            "production-source-sha",
             "publication-admission-json",
             "publication-control-plane-audit-json",
             "publication-expected-json",
@@ -3920,7 +3973,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 71,
+          "inputCount": 75,
           "inputs": [
             "allow-repository",
             "artifact-name",
@@ -3971,10 +4024,14 @@
             "publish-required-artifacts-json",
             "publish-target",
             "publish-transaction-override",
+            "release-activation-command",
+            "release-activation-receipt-set-path",
             "release-candidate-workflow-file",
             "release-candidate-workflow-name",
             "release-passport",
             "release-passport-buildchain-self-kfd",
+            "release-passport-evidence-command",
+            "release-passport-evidence-path",
             "release-passport-impact-json",
             "release-passport-invariant-passport-command",
             "release-passport-invariant-passport-jsons",
@@ -4614,6 +4671,18 @@
           "public": true,
           "reverseAuditSource": "dist/site/page-registry.json"
         },
+        {
+          "id": "site-page:manual:auditable-demo",
+          "name": "site-page:manual:auditable-demo",
+          "kind": "site-page",
+          "sourcePath": "dist/site/page-registry.json",
+          "evidencePath": "dist/site/page-registry.json",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "dist/site/page-registry.json"
+        },
         {
           "id": "site-page:manual:binary-distribution",
           "name": "site-page:manual:binary-distribution",
@@ -4866,6 +4935,18 @@
           "public": true,
           "reverseAuditSource": "dist/site/page-registry.json"
         },
+        {
+          "id": "site-page:manual:release-activation-transaction",
+          "name": "site-page:manual:release-activation-transaction",
+          "kind": "site-page",
+          "sourcePath": "dist/site/page-registry.json",
+          "evidencePath": "dist/site/page-registry.json",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "reverseAuditSource": "dist/site/page-registry.json"
+        },
         {
           "id": "site-page:manual:release-candidate",
           "name": "site-page:manual:release-candidate",
@@ -5172,6 +5253,6 @@
         }
       }
     ],
-    "publicSurfaceCount": 329
+    "publicSurfaceCount": 334
   }
 }

package/dist/site/kfd-upstream-aggregate.json

@@ -4,7 +4,7 @@
   "product": {
     "id": "kungfu-tech-buildchain",
     "name": "@kungfu-tech/buildchain",
-    "version": "3.0.0",
+    "version": "3.0.1-alpha.1",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "source": {

package/dist/site/manual-registry.json

@@ -9,7 +9,7 @@
       "title": "Buildchain documentation map",
       "path": "docs/MAP.md",
       "plane": "use",
-      "digest": "sha256:c9eb92eb02601e1e36cb38d7df93097c582dec2b8dc34f769f58c30fc5190bbe",
+      "digest": "sha256:11ccb0a90cc0583a1a67da36609a8b07207f259815ac9ac0926c2ec8d7a8764a",
       "capabilityGroup": "getting-started",
       "audience": [
         "agent",
@@ -18,6 +18,20 @@
       "maturity": "stable",
       "order": 10
     },
+    {
+      "id": "auditable-demo",
+      "title": "Auditable demo artifact pipeline",
+      "path": "docs/auditable-demo.md",
+      "plane": "verify",
+      "digest": "sha256:cff9786d4de098c84ea7e494b523627d6431909f15c82940e2193dbda1ef10e9",
+      "capabilityGroup": "reusable-build",
+      "audience": [
+        "consumer",
+        "agent"
+      ],
+      "maturity": "preview",
+      "order": 207
+    },
     {
       "id": "install",
       "title": "Install and verify Buildchain",
@@ -79,7 +93,7 @@
       "title": "GitHub governance authority",
       "path": "docs/github-governance-authority.md",
       "plane": "verify",
-      "digest": "sha256:8484b18d5b0fe6d61d102d6b9cb9e18beac9f47ecb516d430fb5427518e2931f",
+      "digest": "sha256:b8c3d9ad53c2509bbd95804ccc31f6aa89989c3aadf3a2b75d9c73aef168b7e8",
       "capabilityGroup": "governance-versioning",
       "audience": [
         "maintainer",
@@ -401,7 +415,7 @@
       "title": "Versioning",
       "path": "docs/versioning.md",
       "plane": "why",
-      "digest": "sha256:199ed8e83c988836f757c9a16b58ec441e0bd04a4f3465f21cc73ed7f530e610",
+      "digest": "sha256:f3665f2f173bdcb287cf8aa509035164e818b20088849f4a2bce098951c84ea3",
       "capabilityGroup": "governance-versioning",
       "audience": [
         "maintainer"

package/dist/site/node-api-registry.json

@@ -8,7 +8,7 @@
       "specifier": "@kungfu-tech/buildchain",
       "export": ".",
       "target": "./packages/core/index.js",
-      "digest": "sha256:b1cccdca930eb1ab2be006b8fabc795966f61fafdb4933758a42a7bf3c3bf6cd",
+      "digest": "sha256:7f1f3ce6c862e556dc73a0b3b7fe96b8c6772b96de3e677a77eed87c8a03047f",
       "summary": "Root toolkit export for Buildchain's public Node API.",
       "capabilityGroup": "api-cli-reference",
       "audience": [
@@ -47,7 +47,7 @@
       "specifier": "@kungfu-tech/buildchain/core",
       "export": "./core",
       "target": "./packages/core/index.js",
-      "digest": "sha256:b1cccdca930eb1ab2be006b8fabc795966f61fafdb4933758a42a7bf3c3bf6cd",
+      "digest": "sha256:7f1f3ce6c862e556dc73a0b3b7fe96b8c6772b96de3e677a77eed87c8a03047f",
       "summary": "Alias for the root public toolkit export.",
       "capabilityGroup": "api-cli-reference",
       "audience": [
@@ -99,7 +99,7 @@
       "specifier": "@kungfu-tech/buildchain/buildchain-contract",
       "export": "./buildchain-contract",
       "target": "./packages/core/buildchain-contract.js",
-      "digest": "sha256:cf08a6c4fd2a56dff45e4a97d1c470ce94e453ab613a304bd86b3fe9d298a153",
+      "digest": "sha256:5772ad10d66e8fbbc07c06f4df521c7d60b631b0505b47540ce05804bcb576b0",
       "summary": "Runtime contract world and compatibility digest APIs for floating-ref drift checks.",
       "capabilityGroup": "governance-versioning",
       "audience": [
@@ -333,7 +333,7 @@
       "specifier": "@kungfu-tech/buildchain/buildchain-publication-authority",
       "export": "./buildchain-publication-authority",
       "target": "./packages/core/buildchain-publication-authority.js",
-      "digest": "sha256:46484b94389d78a2092c9ae60399020930d879abc847234ffe7cb69ec4f61161",
+      "digest": "sha256:85f524a61cfc9931cae24158f8ff718ef0eae3a2a839670ab01744cbdfdd10c3",
       "summary": "Buildchain-owned closed-world publication authority descriptor registry.",
       "capabilityGroup": "release-passport-trust",
       "audience": [
@@ -346,7 +346,7 @@
       "specifier": "@kungfu-tech/buildchain/github-governance-authority",
       "export": "./github-governance-authority",
       "target": "./packages/core/github-governance-authority.js",
-      "digest": "sha256:045e129994f654fabb87bdc594c9fcd09b837fdf26cac8b90403bc2fd5074f91",
+      "digest": "sha256:63f3ce1520edf99e4f877b1dd28afa33d85150266940cd60f82c2aadba38c50d",
       "summary": "Fail-closed GitHub ownership, effective-policy, managed-zone admission, rollout-plan, and immutable receipt APIs.",
       "capabilityGroup": "governance-versioning",
       "audience": [
@@ -433,6 +433,19 @@
       ],
       "maturity": "stable"
     },
+    {
+      "specifier": "@kungfu-tech/buildchain/release-activation-transaction",
+      "export": "./release-activation-transaction",
+      "target": "./packages/core/release-activation-transaction.js",
+      "digest": "sha256:a37ecb18d123febc53503184fe725d6f5cb1ac85d522846b5112bd21f52ff8ac",
+      "summary": "Ordered cross-repository activation, exact receipt-set binding, retry, abort, rollback, and shadow-rehearsal APIs.",
+      "capabilityGroup": "release-passport-trust",
+      "audience": [
+        "developer",
+        "agent"
+      ],
+      "maturity": "stable"
+    },
     {
       "specifier": "@kungfu-tech/buildchain/surface-manifest",
       "export": "./surface-manifest",
@@ -450,7 +463,7 @@
       "specifier": "@kungfu-tech/buildchain/buildchain-kfd-claims",
       "export": "./buildchain-kfd-claims",
       "target": "./packages/core/buildchain-kfd-claims.js",
-      "digest": "sha256:fc916f55d366db8eb7270389fdaf6ac02e18bcd4fe5f1fdbdb1283e5fc4c9929",
+      "digest": "sha256:f3a719c64881e650a6ef68e3e0d4acd40878722b0eb76b88d30081db77ad92c8",
       "summary": "Buildchain self KFD claim registry, witnesses, and public claim APIs.",
       "capabilityGroup": "kfd-trust",
       "audience": [