@kungfu-tech/buildchain 3.0.1 → 3.0.2-alpha.1

package/dist/site/public-surface-audit.json

@@ -3,11 +3,11 @@
   "contract": "kungfu-buildchain-public-surface-reverse-audit",
   "status": "passed",
   "summary": {
-    "cliCommandCount": 87,
+    "cliCommandCount": 96,
     "workflowCount": 53,
     "actionCount": 5,
     "sitePageCount": 56,
-    "docCommandRefCount": 275,
+    "docCommandRefCount": 286,
     "failureCount": 0
   },
   "enumerated": {
@@ -237,11 +237,51 @@
         "source": "bin/buildchain.mjs",
         "usage": "buildchain kfd 3 witness [--cwd <dir>] [--registry <path>] [--kind prebuild|artifact]"
       },
+      {
+        "id": "kfd-4-gate",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain kfd 4 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]"
+      },
       {
         "id": "kfd-4-schema",
         "source": "bin/buildchain.mjs",
         "usage": "buildchain kfd 4 schema [--schema <name>] [--json]"
       },
+      {
+        "id": "kfd-4-verify",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain kfd 4 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]"
+      },
+      {
+        "id": "kfd-5-gate",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain kfd 5 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]"
+      },
+      {
+        "id": "kfd-5-schema",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain kfd 5 schema [--schema <name>] [--json]"
+      },
+      {
+        "id": "kfd-5-verify",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain kfd 5 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]"
+      },
+      {
+        "id": "kfd-7-gate",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain kfd 7 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]"
+      },
+      {
+        "id": "kfd-7-schema",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain kfd 7 schema [--schema <name>] [--json]"
+      },
+      {
+        "id": "kfd-7-verify",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain kfd 7 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]"
+      },
       {
         "id": "kfd-aggregate",
         "source": "bin/buildchain.mjs",
@@ -272,6 +312,11 @@
         "source": "bin/buildchain.mjs",
         "usage": "buildchain kfd status [--cwd <dir>] [--json]"
       },
+      {
+        "id": "kfd-support",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain kfd support project --matrix-json <file-or-json> --gate-json <file-or-json>..."
+      },
       {
         "id": "kfd-upstream-check",
         "source": "bin/buildchain.mjs",
@@ -532,6 +577,9 @@
           "buildchain-contract-lock-path",
           "buildchain-ref",
           "buildchain-repository",
+          "cache-dependency-lock-root",
+          "cache-policy-root",
+          "cache-toolchain-root",
           "cargo-registry-index",
           "checkout-cache-fallback",
           "checkout-cache-fetch-attempts",
@@ -581,7 +629,7 @@
           "verify-command",
           "working-directory"
         ],
-        "inputCount": 66,
+        "inputCount": 69,
         "secrets": [
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
           "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -840,6 +888,8 @@
           "release-passport-kfd-3-artifact-verify-command",
           "release-passport-kfd-3-artifact-witness-jsons",
           "release-passport-kfd-3-prebuild-witness-jsons",
+          "release-passport-kfd-product-gate-jsons",
+          "release-passport-kfd-support-matrix-json",
           "release-passport-output-dir",
           "release-passport-platform-manifest-paths",
           "release-passport-product-name",
@@ -851,7 +901,7 @@
           "target-sha",
           "trusted-publishing"
         ],
-        "inputCount": 83,
+        "inputCount": 85,
         "secrets": [
           "BUILDCHAIN_ISSUE_APP_ID",
           "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -1294,6 +1344,9 @@
           "buildchain-ref",
           "buildchain-repository",
           "buildchain-stable-contract-lock-path",
+          "cache-dependency-lock-root",
+          "cache-policy-root",
+          "cache-toolchain-root",
           "cargo-registry-index",
           "checkout-cache-fallback",
           "checkout-cache-fetch-attempts",
@@ -1343,7 +1396,7 @@
           "verify-command",
           "working-directory"
         ],
-        "inputCount": 69,
+        "inputCount": 72,
         "secrets": [
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
           "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -1958,6 +2011,8 @@
           "release-passport-kfd-3-artifact-verify-command",
           "release-passport-kfd-3-artifact-witness-jsons",
           "release-passport-kfd-3-prebuild-witness-jsons",
+          "release-passport-kfd-product-gate-jsons",
+          "release-passport-kfd-support-matrix-json",
           "release-passport-output-dir",
           "release-passport-platform-manifest-paths",
           "release-passport-product-name",
@@ -1969,7 +2024,7 @@
           "target-sha",
           "trusted-publishing"
         ],
-        "inputCount": 75,
+        "inputCount": 77,
         "secrets": [
           "BUILDCHAIN_ISSUE_APP_ID",
           "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -2256,6 +2311,8 @@
           "release-passport-kfd-3-artifact-verify-command",
           "release-passport-kfd-3-artifact-witness-jsons",
           "release-passport-kfd-3-prebuild-witness-jsons",
+          "release-passport-kfd-product-gate-jsons",
+          "release-passport-kfd-support-matrix-json",
           "release-passport-output-dir",
           "release-passport-platform-manifest-paths",
           "release-passport-product-name",
@@ -2272,7 +2329,7 @@
           "transaction-state-path",
           "verification-command"
         ],
-        "inputCount": 64
+        "inputCount": 66
       },
       {
         "id": "report-buildchain-issue",
@@ -3330,6 +3387,16 @@
         "path": "docs/kfd-support.md",
         "command": "buildchain kfd 3 witness"
       },
+      {
+        "id": "kfd-4-gate",
+        "path": "docs/cli.md",
+        "command": "buildchain kfd 4 gate"
+      },
+      {
+        "id": "kfd-4-gate",
+        "path": "docs/kfd-support.md",
+        "command": "buildchain kfd 4 gate"
+      },
       {
         "id": "kfd-4-schema",
         "path": "docs/cli.md",
@@ -3345,6 +3412,36 @@
         "path": "docs/kfd-support.md",
         "command": "buildchain kfd 4 schema"
       },
+      {
+        "id": "kfd-5-gate",
+        "path": "docs/cli.md",
+        "command": "buildchain kfd 5 gate"
+      },
+      {
+        "id": "kfd-5-gate",
+        "path": "docs/kfd-support.md",
+        "command": "buildchain kfd 5 gate"
+      },
+      {
+        "id": "kfd-5-schema",
+        "path": "docs/kfd-support.md",
+        "command": "buildchain kfd 5 schema"
+      },
+      {
+        "id": "kfd-7-gate",
+        "path": "docs/cli.md",
+        "command": "buildchain kfd 7 gate"
+      },
+      {
+        "id": "kfd-7-gate",
+        "path": "docs/kfd-support.md",
+        "command": "buildchain kfd 7 gate"
+      },
+      {
+        "id": "kfd-7-schema",
+        "path": "docs/kfd-support.md",
+        "command": "buildchain kfd 7 schema"
+      },
       {
         "id": "kfd-aggregate",
         "path": "docs/kfd-support.md",
@@ -3425,6 +3522,21 @@
         "path": "docs/kfd-support.md",
         "command": "buildchain kfd status --json"
       },
+      {
+        "id": "kfd-support",
+        "path": "docs/cli.md",
+        "command": "buildchain kfd support project"
+      },
+      {
+        "id": "kfd-support",
+        "path": "docs/kfd-support.md",
+        "command": "buildchain kfd support project"
+      },
+      {
+        "id": "kfd-support",
+        "path": "docs/kfd-support.md",
+        "command": "buildchain kfd support project"
+      },
       {
         "id": "kfd-upstream-check",
         "path": "docs/kfd-support.md",
@@ -3971,9 +4083,9 @@
     "cliRegistryPath": "dist/site/cli-registry.json",
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
-    "cliRegistryDigest": "5ba7fd93a13993b05767b6f02d0626a7347f25c3d7cd4589ed4f70028c1f1bd1",
-    "workflowRegistryDigest": "1554826457054dabf1b877aa2bd2ae2b764f90b0bab5552230ea38278ca707df",
-    "pageRegistryDigest": "91dcb302decbe07ebb402c3571f59b5d624feb28e4ac90ef11678050a2c73c67"
+    "cliRegistryDigest": "a1c10dd6977d85a7bc793054baa549108b46d6d18098de109733e01b9151a024",
+    "workflowRegistryDigest": "634213ebd845a158a7acd5820844a4830e4d35058896a5de369fc9cd1006b671",
+    "pageRegistryDigest": "d11a4b7ed807d075b52fedb80c85bfa8f13431f5aa86dae38fc00d3f428f0c6e"
   },
   "comparison": {
     "missingCliRegistry": [],

package/dist/site/publication-registry.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-publication-release-registry",
-  "generatedAt": "2026-07-26T13:54:34.126Z",
-  "publishedAt": "2026-07-26T13:54:34.126Z",
+  "generatedAt": "2026-07-26T17:45:16.663Z",
+  "publishedAt": "2026-07-26T17:45:16.663Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "3988275b9a08a1619041a6a041aceb0ecb00fd58",
+  "sourceRevision": "e2907057b177af48316db8d85549539c61432a4f",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "3.0.1",
+    "version": "3.0.2-alpha.1",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/release-passport-check-manifest.json

@@ -14,6 +14,12 @@
       "command": "buildchain verify release-passport <buildchain.release.json>",
       "nodeApi": "@kungfu-tech/buildchain/release-passport#verifyReleasePassport",
       "result": "check-report.json"
+    },
+    "kfdSupportProjection": {
+      "inputSchema": "schemas/kfd-product-gate-input-v1.schema.json",
+      "projectionSchema": "schemas/kfd-support-projection-v1.schema.json",
+      "evidence": "kfd-support.json",
+      "rule": "The passport mirrors one product-owned support matrix and validated product-gate results without widening any claim state."
     }
   },
   "ownership": {
@@ -36,6 +42,7 @@
       "platformArtifactManifests",
       "distTagPromotion",
       "controllerReceipts",
+      "kfdSupport",
       "artifacts",
       "evidence",
       "recovery"
@@ -181,6 +188,10 @@
       {
         "when": "evidence.transactionState is present",
         "pointer": "evidence.transactionState"
+      },
+      {
+        "when": "kfdSupport is present",
+        "pointer": "evidence.kfdSupport"
       }
     ],
     "rule": "The normative checker resolves every declared sibling relative to the passport and fails closed on missing required evidence, digest drift, or semantic mismatch."

package/dist/site/release-provenance.json

@@ -17,11 +17,13 @@
       "./anchored-version-material": "./packages/core/anchored-version-material.js",
       "./buildchain-contract": "./packages/core/buildchain-contract.js",
       "./candidate-timeline": "./packages/core/candidate-timeline.js",
+      "./cache-evidence": "./packages/core/cache-evidence.js",
       "./controller-evidence": "./packages/core/controller-evidence.js",
       "./diagnostics": "./packages/core/diagnostics.js",
       "./homebrew": "./packages/core/homebrew.js",
       "./issue-reporting": "./packages/core/issue-reporting.js",
       "./kfd": "./packages/core/kfd.js",
+      "./kfd-product-gates": "./packages/core/kfd-product-gates.js",
       "./kfd-agent-hub": "./packages/core/kfd-agent-hub.js",
       "./buildchain-layout": "./packages/core/buildchain-layout.js",
       "./release-line-bootstrap": "./packages/core/release-line-bootstrap.js",
@@ -63,6 +65,8 @@
       "./site/release-passport-check-manifest.json": "./dist/site/release-passport-check-manifest.json",
       "./site/schemas/release-passport-v1.schema.json": "./dist/site/schemas/release-passport-v1.schema.json",
       "./site/schemas/kfd-agent-hub-adoption.schema.json": "./dist/site/schemas/kfd-agent-hub-adoption.schema.json",
+      "./site/schemas/kfd-product-gate-input-v1.schema.json": "./dist/site/schemas/kfd-product-gate-input-v1.schema.json",
+      "./site/schemas/kfd-support-projection-v1.schema.json": "./dist/site/schemas/kfd-support-projection-v1.schema.json",
       "./site/buildchain-contract.json": "./dist/site/buildchain-contract.json",
       "./site/product-mechanism.json": "./dist/site/product-mechanism.json",
       "./site/release-provenance.json": "./dist/site/release-provenance.json",

package/dist/site/schemas/kfd-product-gate-input-v1.schema.json

@@ -0,0 +1,164 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://buildchain.libkungfu.dev/schemas/kfd-product-gate-input-v1.schema.json",
+  "title": "Buildchain KFD product gate input v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "contract",
+    "standard",
+    "standardRevision",
+    "source",
+    "evidenceCut",
+    "records",
+    "evidence",
+    "responsibility",
+    "nonClaims"
+  ],
+  "properties": {
+    "schemaVersion": {
+      "const": 1
+    },
+    "contract": {
+      "const": "kungfu-buildchain-kfd-product-gate-input"
+    },
+    "standard": {
+      "enum": [
+        "kfd-4",
+        "kfd-5",
+        "kfd-7"
+      ]
+    },
+    "standardRevision": {
+      "type": "integer",
+      "minimum": 1
+    },
+    "source": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "repository",
+        "sha"
+      ],
+      "properties": {
+        "repository": {
+          "type": "string",
+          "minLength": 1
+        },
+        "sha": {
+          "type": "string",
+          "pattern": "^[0-9a-f]{40}(?:[0-9a-f]{24})?$"
+        }
+      }
+    },
+    "evidenceCut": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "generatedAt",
+        "expiresAt"
+      ],
+      "properties": {
+        "generatedAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "expiresAt": {
+          "type": "string",
+          "format": "date-time"
+        }
+      }
+    },
+    "records": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "role",
+          "path",
+          "sha256"
+        ],
+        "properties": {
+          "role": {
+            "type": "string",
+            "minLength": 1
+          },
+          "path": {
+            "type": "string",
+            "minLength": 1
+          },
+          "sha256": {
+            "type": "string",
+            "pattern": "^sha256:[0-9a-f]{64}$"
+          }
+        }
+      }
+    },
+    "evidence": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "id",
+          "kind",
+          "path",
+          "sha256"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "minLength": 1
+          },
+          "kind": {
+            "type": "string",
+            "minLength": 1
+          },
+          "path": {
+            "type": "string",
+            "minLength": 1
+          },
+          "sha256": {
+            "type": "string",
+            "pattern": "^sha256:[0-9a-f]{64}$"
+          }
+        }
+      }
+    },
+    "responsibility": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "owner",
+        "evidenceOwner",
+        "proofOwner"
+      ],
+      "properties": {
+        "owner": {
+          "type": "string",
+          "minLength": 1
+        },
+        "evidenceOwner": {
+          "type": "string",
+          "minLength": 1
+        },
+        "proofOwner": {
+          "type": "string",
+          "minLength": 1
+        }
+      }
+    },
+    "nonClaims": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "string",
+        "minLength": 1
+      }
+    }
+  }
+}

package/dist/site/schemas/kfd-support-projection-v1.schema.json

@@ -0,0 +1,106 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://buildchain.libkungfu.dev/schemas/kfd-support-projection-v1.schema.json",
+  "title": "Buildchain KFD support projection v1",
+  "description": "A release-bound, non-authoritative projection of one product-owned KFD support matrix.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "contract",
+    "matrix",
+    "standardPackage",
+    "gateResults",
+    "rows",
+    "status",
+    "projectionRoot",
+    "nonClaims"
+  ],
+  "properties": {
+    "schemaVersion": {
+      "const": 1
+    },
+    "contract": {
+      "const": "kungfu-buildchain-kfd-support-projection"
+    },
+    "matrix": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "contract",
+        "root",
+        "authorityPath"
+      ],
+      "properties": {
+        "contract": {
+          "type": "string",
+          "minLength": 1
+        },
+        "root": {
+          "type": "string",
+          "pattern": "^sha256:[0-9a-f]{64}$"
+        },
+        "authorityPath": {
+          "type": "string",
+          "minLength": 1
+        }
+      }
+    },
+    "standardPackage": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "name",
+        "version",
+        "standardsSha256"
+      ],
+      "properties": {
+        "name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "version": {
+          "type": "string",
+          "minLength": 1
+        },
+        "standardsSha256": {
+          "type": "string",
+          "pattern": "^sha256:[0-9a-f]{64}$"
+        }
+      }
+    },
+    "gateResults": {
+      "type": "array",
+      "minItems": 3,
+      "items": {
+        "type": "object"
+      }
+    },
+    "rows": {
+      "type": "array",
+      "minItems": 13,
+      "maxItems": 13,
+      "items": {
+        "type": "object"
+      }
+    },
+    "status": {
+      "enum": [
+        "passed",
+        "failed"
+      ]
+    },
+    "projectionRoot": {
+      "type": "string",
+      "pattern": "^sha256:[0-9a-f]{64}$"
+    },
+    "nonClaims": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "string",
+        "minLength": 1
+      }
+    }
+  }
+}

package/dist/site/schemas/release-passport-v1.schema.json

@@ -195,6 +195,9 @@
     },
     "kfd-3": {
       "type": "object"
+    },
+    "kfdSupport": {
+      "type": "object"
     }
   },
   "additionalProperties": true

package/dist/site/site-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-manifest",
-  "generatedAt": "2026-07-26T13:54:34.126Z",
-  "publishedAt": "2026-07-26T13:54:34.126Z",
+  "generatedAt": "2026-07-26T17:45:16.663Z",
+  "publishedAt": "2026-07-26T17:45:16.663Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "3988275b9a08a1619041a6a041aceb0ecb00fd58",
+  "sourceRevision": "e2907057b177af48316db8d85549539c61432a4f",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "3.0.1",
+    "version": "3.0.2-alpha.1",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",
@@ -77,7 +77,7 @@
       "path": "docs/release-passport.md",
       "plane": "verify",
       "exists": true,
-      "digest": "sha256:c7f096af40224efb53b2e0e8b7e1ceedc3aafeb341c476a7cce7e5974004a775"
+      "digest": "sha256:ed29d25882cbf4ec062abc21e7d069a6377eaf7e3171c24642dfe08da2e4c05b"
     },
     {
       "id": "controller-evidence",
@@ -205,7 +205,7 @@
       "path": "docs/cli.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:f4518193026571d1e84bc245725a9f83e842b2e4b4dfaa072c8207021fa89cd1"
+      "digest": "sha256:47be88f5e5fd14124d03510b807722215034d34eefcebdfe2599a310350b7697"
     },
     {
       "id": "build-facts",
@@ -221,7 +221,7 @@
       "path": "docs/kfd-support.md",
       "plane": "verify",
       "exists": true,
-      "digest": "sha256:58a60b3e54bc47d4bc9b6e08a432ba4ff75ed2275ef056d04c44cc2bc25046da"
+      "digest": "sha256:3a6143e450ab7976a50788fee48ec4d7313706774ff5cf8f71075a7b9e196e01"
     },
     {
       "id": "kfd-agent-hub",