@kungfu-tech/buildchain 3.0.1 → 3.0.2-alpha.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (58) hide show
  1. package/README.md +5 -3
  2. package/actions/promote-buildchain-ref/README.md +7 -0
  3. package/bin/buildchain.mjs +173 -513
  4. package/bin/internal/cli-options.mjs +79 -0
  5. package/bin/internal/trust-release-cli.mjs +469 -0
  6. package/dist/site/agent-index.json +2 -0
  7. package/dist/site/artifact-schemas.json +5 -0
  8. package/dist/site/badge-endpoint-registry.json +18 -18
  9. package/dist/site/badges/v1/kfd-12/aligned.json +1 -1
  10. package/dist/site/badges/v1/kfd-12/declared.json +1 -1
  11. package/dist/site/badges/v1/kfd-12/downgraded.json +1 -1
  12. package/dist/site/badges/v1/kfd-12/draft.json +1 -1
  13. package/dist/site/badges/v1/kfd-12/failed.json +1 -1
  14. package/dist/site/badges/v1/kfd-12/missing.json +1 -1
  15. package/dist/site/badges/v1/kfd-12/passed.json +1 -1
  16. package/dist/site/badges/v1/kfd-12/planned.json +1 -1
  17. package/dist/site/badges/v1/kfd-13/aligned.json +1 -1
  18. package/dist/site/badges/v1/kfd-13/declared.json +1 -1
  19. package/dist/site/badges/v1/kfd-13/downgraded.json +1 -1
  20. package/dist/site/badges/v1/kfd-13/draft.json +1 -1
  21. package/dist/site/badges/v1/kfd-13/failed.json +1 -1
  22. package/dist/site/badges/v1/kfd-13/missing.json +1 -1
  23. package/dist/site/badges/v1/kfd-13/passed.json +1 -1
  24. package/dist/site/badges/v1/kfd-13/planned.json +1 -1
  25. package/dist/site/buildchain-contract.json +32 -22
  26. package/dist/site/buildchain-site.json +28 -18
  27. package/dist/site/capability-registry.json +2 -2
  28. package/dist/site/cli-registry.json +108 -0
  29. package/dist/site/controller-registry.json +10 -2
  30. package/dist/site/kfd-claims.json +136 -10
  31. package/dist/site/kfd-upstream-aggregate.json +20 -11
  32. package/dist/site/manual-registry.json +3 -3
  33. package/dist/site/node-api-registry.json +21 -8
  34. package/dist/site/page-registry.json +20 -10
  35. package/dist/site/public-surface-audit.json +114 -8
  36. package/dist/site/publication-registry.json +4 -4
  37. package/dist/site/release-passport-check-manifest.json +11 -0
  38. package/dist/site/release-provenance.json +3 -0
  39. package/dist/site/schemas/kfd-product-gate-input-v1.schema.json +164 -0
  40. package/dist/site/schemas/kfd-support-projection-v1.schema.json +106 -0
  41. package/dist/site/schemas/release-passport-v1.schema.json +3 -0
  42. package/dist/site/site-manifest.json +7 -7
  43. package/dist/site/workflow-registry.json +9 -3
  44. package/docs/cli.md +9 -2
  45. package/docs/kfd-support.md +43 -7
  46. package/docs/release-passport.md +15 -0
  47. package/package.json +6 -3
  48. package/packages/core/index.js +17 -0
  49. package/packages/core/kfd-product-gates.js +865 -0
  50. package/packages/core/kfd.js +16 -7
  51. package/packages/core/kfd3-surface-register.js +105 -1
  52. package/packages/core/public-surface-audit.js +6 -1
  53. package/packages/core/release-passport-contract.js +13 -0
  54. package/packages/core/release-passport.js +87 -3
  55. package/scripts/check-internal-architecture.mjs +171 -0
  56. package/scripts/check-inventory.mjs +4 -0
  57. package/scripts/generate-site-bundle.mjs +23 -0
  58. package/scripts/promotion-routing-evidence.mjs +73 -0
@@ -118,8 +118,8 @@
118
118
  "counts": {
119
119
  "manualCount": 2,
120
120
  "pageCount": 2,
121
- "cliCommandCount": 28,
122
- "nodeApiCount": 6,
121
+ "cliCommandCount": 37,
122
+ "nodeApiCount": 7,
123
123
  "workflowCount": 0,
124
124
  "actionCount": 0
125
125
  },
@@ -545,6 +545,18 @@
545
545
  ],
546
546
  "maturity": "stable"
547
547
  },
548
+ {
549
+ "id": "kfd-4-gate",
550
+ "source": "bin/buildchain.mjs",
551
+ "usage": "buildchain kfd 4 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]",
552
+ "purpose": "Evaluate source-bound KFD-4 observer-perspective and contrastive-replay product evidence.",
553
+ "capabilityGroup": "kfd-trust",
554
+ "audience": [
555
+ "agent",
556
+ "operator"
557
+ ],
558
+ "maturity": "stable"
559
+ },
548
560
  {
549
561
  "id": "kfd-4-schema",
550
562
  "source": "bin/buildchain.mjs",
@@ -557,6 +569,90 @@
557
569
  ],
558
570
  "maturity": "stable"
559
571
  },
572
+ {
573
+ "id": "kfd-4-verify",
574
+ "source": "bin/buildchain.mjs",
575
+ "usage": "buildchain kfd 4 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]",
576
+ "purpose": "Verify a retained KFD-4 product-gate result without widening product support.",
577
+ "capabilityGroup": "kfd-trust",
578
+ "audience": [
579
+ "agent",
580
+ "operator"
581
+ ],
582
+ "maturity": "stable"
583
+ },
584
+ {
585
+ "id": "kfd-5-gate",
586
+ "source": "bin/buildchain.mjs",
587
+ "usage": "buildchain kfd 5 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]",
588
+ "purpose": "Evaluate source-bound KFD-5 Primitive discovery qualification evidence.",
589
+ "capabilityGroup": "kfd-trust",
590
+ "audience": [
591
+ "agent",
592
+ "operator"
593
+ ],
594
+ "maturity": "stable"
595
+ },
596
+ {
597
+ "id": "kfd-5-schema",
598
+ "source": "bin/buildchain.mjs",
599
+ "usage": "buildchain kfd 5 schema [--schema <name>] [--json]",
600
+ "purpose": "Print the default KFD-5 schema exposed by the KFD package standards metadata.",
601
+ "capabilityGroup": "kfd-trust",
602
+ "audience": [
603
+ "agent",
604
+ "operator"
605
+ ],
606
+ "maturity": "stable"
607
+ },
608
+ {
609
+ "id": "kfd-5-verify",
610
+ "source": "bin/buildchain.mjs",
611
+ "usage": "buildchain kfd 5 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]",
612
+ "purpose": "Verify a retained KFD-5 product-gate result without widening product support.",
613
+ "capabilityGroup": "kfd-trust",
614
+ "audience": [
615
+ "agent",
616
+ "operator"
617
+ ],
618
+ "maturity": "stable"
619
+ },
620
+ {
621
+ "id": "kfd-7-gate",
622
+ "source": "bin/buildchain.mjs",
623
+ "usage": "buildchain kfd 7 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]",
624
+ "purpose": "Evaluate a source-bound KFD-7 Domain Profile, evidence obligations, and independent review.",
625
+ "capabilityGroup": "kfd-trust",
626
+ "audience": [
627
+ "agent",
628
+ "operator"
629
+ ],
630
+ "maturity": "stable"
631
+ },
632
+ {
633
+ "id": "kfd-7-schema",
634
+ "source": "bin/buildchain.mjs",
635
+ "usage": "buildchain kfd 7 schema [--schema <name>] [--json]",
636
+ "purpose": "Print the default KFD-7 schema exposed by the KFD package standards metadata.",
637
+ "capabilityGroup": "kfd-trust",
638
+ "audience": [
639
+ "agent",
640
+ "operator"
641
+ ],
642
+ "maturity": "stable"
643
+ },
644
+ {
645
+ "id": "kfd-7-verify",
646
+ "source": "bin/buildchain.mjs",
647
+ "usage": "buildchain kfd 7 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]",
648
+ "purpose": "Verify a retained KFD-7 product-gate result without widening product support.",
649
+ "capabilityGroup": "kfd-trust",
650
+ "audience": [
651
+ "agent",
652
+ "operator"
653
+ ],
654
+ "maturity": "stable"
655
+ },
560
656
  {
561
657
  "id": "kfd-aggregate",
562
658
  "source": "bin/buildchain.mjs",
@@ -629,6 +725,18 @@
629
725
  ],
630
726
  "maturity": "stable"
631
727
  },
728
+ {
729
+ "id": "kfd-support",
730
+ "source": "bin/buildchain.mjs",
731
+ "usage": "buildchain kfd support project --matrix-json <file-or-json> --gate-json <file-or-json>...",
732
+ "purpose": "Project and verify a product-owned KFD-1 through KFD-13 support matrix against KFD-4/5/7 gates.",
733
+ "capabilityGroup": "kfd-trust",
734
+ "audience": [
735
+ "agent",
736
+ "operator"
737
+ ],
738
+ "maturity": "stable"
739
+ },
632
740
  {
633
741
  "id": "kfd-upstream-check",
634
742
  "source": "bin/buildchain.mjs",
@@ -1842,6 +1842,14 @@
1842
1842
  "classification": "digest-only",
1843
1843
  "source": "workflow-call-input"
1844
1844
  },
1845
+ "release-passport-kfd-product-gate-jsons": {
1846
+ "classification": "digest-only",
1847
+ "source": "workflow-call-input"
1848
+ },
1849
+ "release-passport-kfd-support-matrix-json": {
1850
+ "classification": "digest-only",
1851
+ "source": "workflow-call-input"
1852
+ },
1845
1853
  "release-passport-output-dir": {
1846
1854
  "classification": "included",
1847
1855
  "source": "workflow-call-input"
@@ -1924,7 +1932,7 @@
1924
1932
  "controller-receipt"
1925
1933
  ]
1926
1934
  },
1927
- "digest": "sha256:2bae7310eb27f48a3afc6b7f993872d6b6121cf3f67ad4d6e2da35b254c4d047"
1935
+ "digest": "sha256:4bd94f0bb1790c87af758b71aa592a3e22fdcd84a9851931d252e3f60cba8d40"
1928
1936
  },
1929
1937
  {
1930
1938
  "schemaVersion": 1,
@@ -2100,5 +2108,5 @@
2100
2108
  "digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555"
2101
2109
  }
2102
2110
  ],
2103
- "digest": "sha256:becd8aae765ed9ac3dd0fd737d0d4ce4d7b5b4dff3ec31355bce5b2cf6493c6c"
2111
+ "digest": "sha256:fd3dc839a88bc9b31761e241251a485c96d51ac9c010c4810422cb0425021b2d"
2104
2112
  }
@@ -21,13 +21,13 @@
21
21
  "contract": "kungfu-buildchain-public-surface-reverse-audit",
22
22
  "path": "dist/site/public-surface-audit.json",
23
23
  "status": "passed",
24
- "sha256": "bb7ace4c0abba72ecc320e36339956b0d38577b9f4ed0d764e790919732c1b28",
24
+ "sha256": "1bd7609dcd53c17ac52bfe77e9b993ceb4dae8605f1ec792377483baba070897",
25
25
  "summary": {
26
- "cliCommandCount": 87,
26
+ "cliCommandCount": 96,
27
27
  "workflowCount": 53,
28
28
  "actionCount": 5,
29
29
  "sitePageCount": 56,
30
- "docCommandRefCount": 275,
30
+ "docCommandRefCount": 286,
31
31
  "failureCount": 0
32
32
  },
33
33
  "auditBoundary": {
@@ -228,13 +228,13 @@
228
228
  "contract": "kungfu-buildchain-public-surface-reverse-audit",
229
229
  "path": "dist/site/public-surface-audit.json",
230
230
  "status": "passed",
231
- "sha256": "bb7ace4c0abba72ecc320e36339956b0d38577b9f4ed0d764e790919732c1b28",
231
+ "sha256": "1bd7609dcd53c17ac52bfe77e9b993ceb4dae8605f1ec792377483baba070897",
232
232
  "summary": {
233
- "cliCommandCount": 87,
233
+ "cliCommandCount": 96,
234
234
  "workflowCount": 53,
235
235
  "actionCount": 5,
236
236
  "sitePageCount": 56,
237
- "docCommandRefCount": 275,
237
+ "docCommandRefCount": 286,
238
238
  "failureCount": 0
239
239
  },
240
240
  "auditBoundary": {
@@ -1209,6 +1209,18 @@
1209
1209
  "public": true,
1210
1210
  "packageExport": "./kfd"
1211
1211
  },
1212
+ {
1213
+ "id": "export:./kfd-product-gates",
1214
+ "name": "@kungfu-tech/buildchain/kfd-product-gates",
1215
+ "kind": "package-export",
1216
+ "sourcePath": "packages/core/kfd-product-gates.js",
1217
+ "evidencePath": "packages/core/kfd-product-gates.js",
1218
+ "availability": "shipped",
1219
+ "visibility": "public",
1220
+ "participantFacing": true,
1221
+ "public": true,
1222
+ "packageExport": "./kfd-product-gates"
1223
+ },
1212
1224
  {
1213
1225
  "id": "export:./kfd-agent-hub",
1214
1226
  "name": "@kungfu-tech/buildchain/kfd-agent-hub",
@@ -2237,6 +2249,18 @@
2237
2249
  "public": true,
2238
2250
  "reverseAuditSource": "bin/buildchain.mjs"
2239
2251
  },
2252
+ {
2253
+ "id": "cli:kfd-4-gate",
2254
+ "name": "buildchain kfd 4 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]",
2255
+ "kind": "cli-command",
2256
+ "sourcePath": "bin/buildchain.mjs",
2257
+ "evidencePath": "bin/buildchain.mjs",
2258
+ "availability": "shipped",
2259
+ "visibility": "public",
2260
+ "participantFacing": true,
2261
+ "public": true,
2262
+ "reverseAuditSource": "bin/buildchain.mjs"
2263
+ },
2240
2264
  {
2241
2265
  "id": "cli:kfd-4-schema",
2242
2266
  "name": "buildchain kfd 4 schema [--schema <name>] [--json]",
@@ -2249,6 +2273,90 @@
2249
2273
  "public": true,
2250
2274
  "reverseAuditSource": "bin/buildchain.mjs"
2251
2275
  },
2276
+ {
2277
+ "id": "cli:kfd-4-verify",
2278
+ "name": "buildchain kfd 4 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]",
2279
+ "kind": "cli-command",
2280
+ "sourcePath": "bin/buildchain.mjs",
2281
+ "evidencePath": "bin/buildchain.mjs",
2282
+ "availability": "shipped",
2283
+ "visibility": "public",
2284
+ "participantFacing": true,
2285
+ "public": true,
2286
+ "reverseAuditSource": "bin/buildchain.mjs"
2287
+ },
2288
+ {
2289
+ "id": "cli:kfd-5-gate",
2290
+ "name": "buildchain kfd 5 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]",
2291
+ "kind": "cli-command",
2292
+ "sourcePath": "bin/buildchain.mjs",
2293
+ "evidencePath": "bin/buildchain.mjs",
2294
+ "availability": "shipped",
2295
+ "visibility": "public",
2296
+ "participantFacing": true,
2297
+ "public": true,
2298
+ "reverseAuditSource": "bin/buildchain.mjs"
2299
+ },
2300
+ {
2301
+ "id": "cli:kfd-5-schema",
2302
+ "name": "buildchain kfd 5 schema [--schema <name>] [--json]",
2303
+ "kind": "cli-command",
2304
+ "sourcePath": "bin/buildchain.mjs",
2305
+ "evidencePath": "bin/buildchain.mjs",
2306
+ "availability": "shipped",
2307
+ "visibility": "public",
2308
+ "participantFacing": true,
2309
+ "public": true,
2310
+ "reverseAuditSource": "bin/buildchain.mjs"
2311
+ },
2312
+ {
2313
+ "id": "cli:kfd-5-verify",
2314
+ "name": "buildchain kfd 5 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]",
2315
+ "kind": "cli-command",
2316
+ "sourcePath": "bin/buildchain.mjs",
2317
+ "evidencePath": "bin/buildchain.mjs",
2318
+ "availability": "shipped",
2319
+ "visibility": "public",
2320
+ "participantFacing": true,
2321
+ "public": true,
2322
+ "reverseAuditSource": "bin/buildchain.mjs"
2323
+ },
2324
+ {
2325
+ "id": "cli:kfd-7-gate",
2326
+ "name": "buildchain kfd 7 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]",
2327
+ "kind": "cli-command",
2328
+ "sourcePath": "bin/buildchain.mjs",
2329
+ "evidencePath": "bin/buildchain.mjs",
2330
+ "availability": "shipped",
2331
+ "visibility": "public",
2332
+ "participantFacing": true,
2333
+ "public": true,
2334
+ "reverseAuditSource": "bin/buildchain.mjs"
2335
+ },
2336
+ {
2337
+ "id": "cli:kfd-7-schema",
2338
+ "name": "buildchain kfd 7 schema [--schema <name>] [--json]",
2339
+ "kind": "cli-command",
2340
+ "sourcePath": "bin/buildchain.mjs",
2341
+ "evidencePath": "bin/buildchain.mjs",
2342
+ "availability": "shipped",
2343
+ "visibility": "public",
2344
+ "participantFacing": true,
2345
+ "public": true,
2346
+ "reverseAuditSource": "bin/buildchain.mjs"
2347
+ },
2348
+ {
2349
+ "id": "cli:kfd-7-verify",
2350
+ "name": "buildchain kfd 7 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]",
2351
+ "kind": "cli-command",
2352
+ "sourcePath": "bin/buildchain.mjs",
2353
+ "evidencePath": "bin/buildchain.mjs",
2354
+ "availability": "shipped",
2355
+ "visibility": "public",
2356
+ "participantFacing": true,
2357
+ "public": true,
2358
+ "reverseAuditSource": "bin/buildchain.mjs"
2359
+ },
2252
2360
  {
2253
2361
  "id": "cli:kfd-aggregate",
2254
2362
  "name": "buildchain kfd aggregate [--cwd <dir>] [--json]",
@@ -2321,6 +2429,18 @@
2321
2429
  "public": true,
2322
2430
  "reverseAuditSource": "bin/buildchain.mjs"
2323
2431
  },
2432
+ {
2433
+ "id": "cli:kfd-support",
2434
+ "name": "buildchain kfd support project --matrix-json <file-or-json> --gate-json <file-or-json>...",
2435
+ "kind": "cli-command",
2436
+ "sourcePath": "bin/buildchain.mjs",
2437
+ "evidencePath": "bin/buildchain.mjs",
2438
+ "availability": "shipped",
2439
+ "visibility": "public",
2440
+ "participantFacing": true,
2441
+ "public": true,
2442
+ "reverseAuditSource": "bin/buildchain.mjs"
2443
+ },
2324
2444
  {
2325
2445
  "id": "cli:kfd-upstream-check",
2326
2446
  "name": "buildchain kfd upstream check [--cwd <dir>] [--aggregate-json <file-or-json>] [--json]",
@@ -2993,7 +3113,7 @@
2993
3113
  "visibility": "public",
2994
3114
  "participantFacing": true,
2995
3115
  "public": true,
2996
- "inputCount": 83,
3116
+ "inputCount": 85,
2997
3117
  "inputs": [
2998
3118
  "allow-repository",
2999
3119
  "artifact-name",
@@ -3068,6 +3188,8 @@
3068
3188
  "release-passport-kfd-3-artifact-verify-command",
3069
3189
  "release-passport-kfd-3-artifact-witness-jsons",
3070
3190
  "release-passport-kfd-3-prebuild-witness-jsons",
3191
+ "release-passport-kfd-product-gate-jsons",
3192
+ "release-passport-kfd-support-matrix-json",
3071
3193
  "release-passport-output-dir",
3072
3194
  "release-passport-platform-manifest-paths",
3073
3195
  "release-passport-product-name",
@@ -3986,7 +4108,7 @@
3986
4108
  "visibility": "public",
3987
4109
  "participantFacing": true,
3988
4110
  "public": true,
3989
- "inputCount": 75,
4111
+ "inputCount": 77,
3990
4112
  "inputs": [
3991
4113
  "allow-repository",
3992
4114
  "artifact-name",
@@ -4053,6 +4175,8 @@
4053
4175
  "release-passport-kfd-3-artifact-verify-command",
4054
4176
  "release-passport-kfd-3-artifact-witness-jsons",
4055
4177
  "release-passport-kfd-3-prebuild-witness-jsons",
4178
+ "release-passport-kfd-product-gate-jsons",
4179
+ "release-passport-kfd-support-matrix-json",
4056
4180
  "release-passport-output-dir",
4057
4181
  "release-passport-platform-manifest-paths",
4058
4182
  "release-passport-product-name",
@@ -4275,7 +4399,7 @@
4275
4399
  "visibility": "public",
4276
4400
  "participantFacing": true,
4277
4401
  "public": true,
4278
- "inputCount": 64,
4402
+ "inputCount": 66,
4279
4403
  "inputs": [
4280
4404
  "allow-repository",
4281
4405
  "branch-protection-bypass-apps",
@@ -4326,6 +4450,8 @@
4326
4450
  "release-passport-kfd-3-artifact-verify-command",
4327
4451
  "release-passport-kfd-3-artifact-witness-jsons",
4328
4452
  "release-passport-kfd-3-prebuild-witness-jsons",
4453
+ "release-passport-kfd-product-gate-jsons",
4454
+ "release-passport-kfd-support-matrix-json",
4329
4455
  "release-passport-output-dir",
4330
4456
  "release-passport-platform-manifest-paths",
4331
4457
  "release-passport-product-name",
@@ -5266,6 +5392,6 @@
5266
5392
  }
5267
5393
  }
5268
5394
  ],
5269
- "publicSurfaceCount": 334
5395
+ "publicSurfaceCount": 344
5270
5396
  }
5271
5397
  }
@@ -4,7 +4,7 @@
4
4
  "product": {
5
5
  "id": "kungfu-tech-buildchain",
6
6
  "name": "@kungfu-tech/buildchain",
7
- "version": "3.0.1",
7
+ "version": "3.0.2-alpha.0",
8
8
  "repository": "https://github.com/kungfu-systems/buildchain"
9
9
  },
10
10
  "source": {
@@ -21,14 +21,23 @@
21
21
  "roleValid": true,
22
22
  "package": {
23
23
  "name": "@kungfu-tech/kfd",
24
- "version": "1.0.0-alpha.41"
24
+ "version": "1.0.0-alpha.47"
25
25
  },
26
26
  "repository": "kungfu-systems/kfd",
27
27
  "kfd": {
28
28
  "kfd1": "exported-witness",
29
29
  "kfd2": "exported-claim",
30
30
  "kfd3": "exported-collaboration-interface",
31
- "kfd4": "schema-metadata"
31
+ "kfd4": "schema-metadata",
32
+ "kfd5": "declared",
33
+ "kfd6": "declared",
34
+ "kfd7": "declared",
35
+ "kfd8": "declared",
36
+ "kfd9": "declared",
37
+ "kfd10": "declared",
38
+ "kfd11": "declared",
39
+ "kfd12": "declared",
40
+ "kfd13": "declared"
32
41
  },
33
42
  "releasePassport": "",
34
43
  "releaseAnchor": {
@@ -37,7 +46,7 @@
37
46
  "line": "v1.0",
38
47
  "channel": "alpha",
39
48
  "npmPackage": "@kungfu-tech/kfd",
40
- "npmVersion": "1.0.0-alpha.41",
49
+ "npmVersion": "1.0.0-alpha.47",
41
50
  "source": {
42
51
  "repository": "kungfu-systems/kfd",
43
52
  "branch": "alpha/v1/v1.0"
@@ -49,7 +58,7 @@
49
58
  {
50
59
  "path": "kfd.release.json",
51
60
  "kind": "package",
52
- "sha256": "sha256:6c03be20c9aad8f31d46dc336a952affb82b592c8bbd96121f4f2853bc105957",
61
+ "sha256": "sha256:c4e0ca30c47b3cfca1b6d2d00c6277d62dd71423fd367e355f0f231c8a0b445d",
53
62
  "contract": "kfd-release-anchor",
54
63
  "role": "",
55
64
  "directory": false
@@ -57,7 +66,7 @@
57
66
  {
58
67
  "path": ".buildchain/kfd-1/contract-world.witness.json",
59
68
  "kind": "package",
60
- "sha256": "sha256:0fe0e6533f7a1dbb2e208f6c9fc3bf4437f0e2be179cc94248b7d303c14884b8",
69
+ "sha256": "sha256:fdd2d250fbac2246671f2444067234df5b6c519612196d1631c93e9da6de19b2",
61
70
  "contract": "",
62
71
  "role": "",
63
72
  "directory": false
@@ -65,7 +74,7 @@
65
74
  {
66
75
  "path": ".buildchain/kfd-2/public-release-trust.claim.json",
67
76
  "kind": "package",
68
- "sha256": "sha256:b5de204e4f3e4861275c16e8c8ef8faef0f44d84a7b8f81a8cd513e3f22cc0d3",
77
+ "sha256": "sha256:4886e6052a56ba0d8527cdb73443614a1b79f98a4fb3ab7f0a37f0c7bf0e5ece",
69
78
  "contract": "",
70
79
  "role": "",
71
80
  "directory": false
@@ -73,7 +82,7 @@
73
82
  {
74
83
  "path": ".buildchain/kfd-2/kfd-foundation.trust-claims.json",
75
84
  "kind": "package",
76
- "sha256": "sha256:00d9ebe3e4b4bb3976bd20363613136c44c6e88114fdad4602069eeef6fafa3e",
85
+ "sha256": "sha256:24c21ac663190183c60e1dd56437b0b427f107abe9ded0da73491f0b515eea7e",
77
86
  "contract": "kfd-2-trust-claims",
78
87
  "role": "",
79
88
  "directory": false
@@ -81,7 +90,7 @@
81
90
  {
82
91
  "path": ".buildchain/kfd-2/kfd-foundation.trust-assessment.json",
83
92
  "kind": "package",
84
- "sha256": "sha256:84c1d1e7547fb9387c1c4195685459074517971c21c72e70d1e06f14eb3fab16",
93
+ "sha256": "sha256:11421752a2b6dc376a7006de288ed33115235be229c954bde95901b44b001cdb",
85
94
  "contract": "kfd-2-trust-assessment",
86
95
  "role": "",
87
96
  "directory": false
@@ -97,7 +106,7 @@
97
106
  {
98
107
  "path": "standards.json",
99
108
  "kind": "package",
100
- "sha256": "sha256:04c8163ffe9bc0c4830008a67c5560b21c279935544f3a1b9ad78e63292f49a9",
109
+ "sha256": "sha256:65899780779a8e933f1f3a298bfdf2311104ccde84b773a0828ee4c23dd19d5b",
101
110
  "contract": "kfd-standards-metadata",
102
111
  "role": "",
103
112
  "directory": false
@@ -113,7 +122,7 @@
113
122
  "kfd"
114
123
  ],
115
124
  "packageVersions": {
116
- "kfd": "1.0.0-alpha.41"
125
+ "kfd": "1.0.0-alpha.47"
117
126
  },
118
127
  "status": "collected"
119
128
  }
@@ -50,7 +50,7 @@
50
50
  "title": "Release Passport protocol",
51
51
  "path": "docs/release-passport.md",
52
52
  "plane": "verify",
53
- "digest": "sha256:c7f096af40224efb53b2e0e8b7e1ceedc3aafeb341c476a7cce7e5974004a775",
53
+ "digest": "sha256:ed29d25882cbf4ec062abc21e7d069a6377eaf7e3171c24642dfe08da2e4c05b",
54
54
  "capabilityGroup": "release-passport-trust",
55
55
  "audience": [
56
56
  "release-operator",
@@ -275,7 +275,7 @@
275
275
  "title": "CLI and npm package",
276
276
  "path": "docs/cli.md",
277
277
  "plane": "use",
278
- "digest": "sha256:f4518193026571d1e84bc245725a9f83e842b2e4b4dfaa072c8207021fa89cd1",
278
+ "digest": "sha256:47be88f5e5fd14124d03510b807722215034d34eefcebdfe2599a310350b7697",
279
279
  "capabilityGroup": "api-cli-reference",
280
280
  "audience": [
281
281
  "agent",
@@ -303,7 +303,7 @@
303
303
  "title": "KFD support and KFD-3 surface registration",
304
304
  "path": "docs/kfd-support.md",
305
305
  "plane": "verify",
306
- "digest": "sha256:58a60b3e54bc47d4bc9b6e08a432ba4ff75ed2275ef056d04c44cc2bc25046da",
306
+ "digest": "sha256:3a6143e450ab7976a50788fee48ec4d7313706774ff5cf8f71075a7b9e196e01",
307
307
  "capabilityGroup": "kfd-trust",
308
308
  "audience": [
309
309
  "agent",
@@ -8,7 +8,7 @@
8
8
  "specifier": "@kungfu-tech/buildchain",
9
9
  "export": ".",
10
10
  "target": "./packages/core/index.js",
11
- "digest": "sha256:7f1f3ce6c862e556dc73a0b3b7fe96b8c6772b96de3e677a77eed87c8a03047f",
11
+ "digest": "sha256:47761a66474e783b4defb0de8a6df8fb9b73f61b766152c323099354e8a42517",
12
12
  "summary": "Root toolkit export for Buildchain's public Node API.",
13
13
  "capabilityGroup": "api-cli-reference",
14
14
  "audience": [
@@ -47,7 +47,7 @@
47
47
  "specifier": "@kungfu-tech/buildchain/core",
48
48
  "export": "./core",
49
49
  "target": "./packages/core/index.js",
50
- "digest": "sha256:7f1f3ce6c862e556dc73a0b3b7fe96b8c6772b96de3e677a77eed87c8a03047f",
50
+ "digest": "sha256:47761a66474e783b4defb0de8a6df8fb9b73f61b766152c323099354e8a42517",
51
51
  "summary": "Alias for the root public toolkit export.",
52
52
  "capabilityGroup": "api-cli-reference",
53
53
  "audience": [
@@ -177,7 +177,7 @@
177
177
  "specifier": "@kungfu-tech/buildchain/kfd",
178
178
  "export": "./kfd",
179
179
  "target": "./packages/core/kfd.js",
180
- "digest": "sha256:7b4c15c375e19f5e558476cd0e17c6ea86372bb04a08e80cdf268f8ad8077fc4",
180
+ "digest": "sha256:d9e72c8220cf09a4d92ac995a7ddef8b4b0ff17e97440cb87363480eef0b8c8c",
181
181
  "summary": "Unified KFD standards, schema discovery, KFD-1/KFD-2/KFD-3 grouped APIs, KFD-4 schema discovery, upstream KFD aggregate facts, and Buildchain KFD claim helpers.",
182
182
  "capabilityGroup": "kfd-trust",
183
183
  "audience": [
@@ -186,6 +186,19 @@
186
186
  ],
187
187
  "maturity": "stable"
188
188
  },
189
+ {
190
+ "specifier": "@kungfu-tech/buildchain/kfd-product-gates",
191
+ "export": "./kfd-product-gates",
192
+ "target": "./packages/core/kfd-product-gates.js",
193
+ "digest": "sha256:42c393d2d3adc7223d6d8784428556b036c29707e8a3e6becd07b72683f800fb",
194
+ "summary": "Fail-closed KFD-4, KFD-5, and KFD-7 product evidence gates plus non-widening KFD support-matrix release projections.",
195
+ "capabilityGroup": "kfd-trust",
196
+ "audience": [
197
+ "developer",
198
+ "agent"
199
+ ],
200
+ "maturity": "stable"
201
+ },
189
202
  {
190
203
  "specifier": "@kungfu-tech/buildchain/kfd-agent-hub",
191
204
  "export": "./kfd-agent-hub",
@@ -242,7 +255,7 @@
242
255
  "specifier": "@kungfu-tech/buildchain/public-surface-audit",
243
256
  "export": "./public-surface-audit",
244
257
  "target": "./packages/core/public-surface-audit.js",
245
- "digest": "sha256:1a7ab71556fa0c42a9d2c3b4a8613903ee830035a385d487aaa751c4c81b2809",
258
+ "digest": "sha256:680a821f732f3da344c0ecc7a6c8f4178ac268694c43890f677e4c05ad5c3a7e",
246
259
  "summary": "Reverse audit APIs for CLI, workflow, action, site page, and documentation command surfaces.",
247
260
  "capabilityGroup": "kfd-trust",
248
261
  "audience": [
@@ -398,7 +411,7 @@
398
411
  "specifier": "@kungfu-tech/buildchain/release-passport",
399
412
  "export": "./release-passport",
400
413
  "target": "./packages/core/release-passport.js",
401
- "digest": "sha256:6d30420aa771b3504473cabd5d53c16868cfe267b817cfa446b20eabc153f886",
414
+ "digest": "sha256:842f7f1e60a8de253225ada03cf238948ce527481eb640bc6f14c6cc0ef38880",
402
415
  "summary": "Release passport collection, verification, explanation, and evidence APIs.",
403
416
  "capabilityGroup": "release-passport-trust",
404
417
  "audience": [
@@ -411,7 +424,7 @@
411
424
  "specifier": "@kungfu-tech/buildchain/release-passport-contract",
412
425
  "export": "./release-passport-contract",
413
426
  "target": "./packages/core/release-passport-contract.js",
414
- "digest": "sha256:b91d4fd2d830b91445c56f72d75e4dc4e7e69094181154a32a2780f86d81d317",
427
+ "digest": "sha256:5623da00b6355cfafc7564deb9206d36f7b2dafb24e29fec77c35deee5de5f6b",
415
428
  "summary": "Standalone release passport JSON Schema, ownership/check manifest, and structural validation APIs.",
416
429
  "capabilityGroup": "release-passport-trust",
417
430
  "audience": [
@@ -477,7 +490,7 @@
477
490
  {
478
491
  "id": "cli-and-node-package",
479
492
  "path": "docs/cli.md",
480
- "digest": "sha256:f4518193026571d1e84bc245725a9f83e842b2e4b4dfaa072c8207021fa89cd1"
493
+ "digest": "sha256:47be88f5e5fd14124d03510b807722215034d34eefcebdfe2599a310350b7697"
481
494
  },
482
495
  {
483
496
  "id": "build-facts",
@@ -487,7 +500,7 @@
487
500
  {
488
501
  "id": "kfd-support",
489
502
  "path": "docs/kfd-support.md",
490
- "digest": "sha256:58a60b3e54bc47d4bc9b6e08a432ba4ff75ed2275ef056d04c44cc2bc25046da"
503
+ "digest": "sha256:3a6143e450ab7976a50788fee48ec4d7313706774ff5cf8f71075a7b9e196e01"
491
504
  },
492
505
  {
493
506
  "id": "readme-badges",