@kungfu-tech/buildchain 3.0.2 → 3.0.3-alpha.1

package/contracts/auditable-demo-media-profiles-v1.json

@@ -131,6 +131,121 @@
         }
       }
     },
+    "responsive-web-delivery-v1": {
+      "extends": "web-delivery-v1",
+      "mode": "web-delivery",
+      "renditions": [
+        {
+          "path": "demo.gif",
+          "role": "readme-compatibility",
+          "mimeType": "image/gif",
+          "container": "gif",
+          "videoCodec": "gif",
+          "audioStreams": 0,
+          "maximumBytes": 1048576,
+          "budgetBasis": {
+            "evidence": "contracts/evidence/auditable-demo-web-delivery-v1.json",
+            "observedPath": "demo.gif",
+            "observedBytes": 40826,
+            "multiplier": 16,
+            "rounding": "next-power-of-two"
+          },
+          "dimensions": {
+            "policy": "exact-downscale-same-aspect",
+            "width": 1280,
+            "height": 720
+          }
+        },
+        {
+          "path": "demo.mp4",
+          "role": "primary-video",
+          "mimeType": "video/mp4",
+          "container": "mp4",
+          "videoCodec": "h264",
+          "pixelFormat": "yuv420p",
+          "audioStreams": 0,
+          "maximumBytes": 2097152,
+          "budgetBasis": {
+            "evidence": "contracts/evidence/auditable-demo-web-delivery-v1.json",
+            "observedPath": "demo.mp4",
+            "observedBytes": 27038,
+            "multiplier": 64,
+            "rounding": "next-power-of-two"
+          },
+          "progressiveDownload": "moov-before-mdat",
+          "frameRatePolicy": "scene-exact"
+        },
+        {
+          "path": "demo.webm",
+          "role": "alternate-video",
+          "mimeType": "video/webm",
+          "container": "webm",
+          "videoCodec": "vp9",
+          "pixelFormat": "yuv420p",
+          "audioStreams": 0,
+          "maximumBytes": 2097152,
+          "budgetBasis": {
+            "evidence": "contracts/evidence/auditable-demo-web-delivery-v1.json",
+            "observedPath": "demo.webm",
+            "observedBytes": 23383,
+            "multiplier": 64,
+            "rounding": "next-power-of-two"
+          },
+          "frameRatePolicy": "scene-exact"
+        },
+        {
+          "path": "demo-720p.mp4",
+          "role": "responsive-primary-video",
+          "mimeType": "video/mp4",
+          "container": "mp4",
+          "videoCodec": "h264",
+          "pixelFormat": "yuv420p",
+          "audioStreams": 0,
+          "maximumBytes": 2097152,
+          "budgetBasis": {
+            "evidence": "contracts/evidence/auditable-demo-web-delivery-v1.json",
+            "observedPath": "demo.mp4",
+            "observedBytes": 27038,
+            "multiplier": 64,
+            "rounding": "next-power-of-two"
+          },
+          "progressiveDownload": "moov-before-mdat",
+          "frameRatePolicy": "scene-exact",
+          "dimensions": {
+            "policy": "exact-downscale-same-aspect",
+            "width": 1280,
+            "height": 720
+          }
+        },
+        {
+          "path": "demo-720p.webm",
+          "role": "responsive-alternate-video",
+          "mimeType": "video/webm",
+          "container": "webm",
+          "videoCodec": "vp9",
+          "pixelFormat": "yuv420p",
+          "audioStreams": 0,
+          "maximumBytes": 2097152,
+          "budgetBasis": {
+            "evidence": "contracts/evidence/auditable-demo-web-delivery-v1.json",
+            "observedPath": "demo.webm",
+            "observedBytes": 23383,
+            "multiplier": 64,
+            "rounding": "next-power-of-two"
+          },
+          "frameRatePolicy": "scene-exact",
+          "dimensions": {
+            "policy": "exact-downscale-same-aspect",
+            "width": 1280,
+            "height": 720
+          }
+        }
+      ],
+      "singletonRoles": [
+        "responsive-primary-video",
+        "responsive-alternate-video"
+      ]
+    },
     "site-hero-v1": {
       "extends": "web-delivery-v1",
       "mode": "web-delivery",
@@ -155,7 +270,7 @@
     }
   },
   "qualification": {
-    "dimensions": "exact-scene",
+    "dimensions": "exact-scene-or-profile-declared-downscale",
     "durationToleranceMs": 600,
     "memberRootAlgorithm": "sha256",
     "nonClaims": [

package/contracts/buildchain-v2-residuals-v1.json

@@ -0,0 +1,146 @@
+{
+  "contract": "buildchain.v2-residual-inventory/v1",
+  "scope": ".github/workflows on the current default branch",
+  "policy": {
+    "runtimeDefault": "v3",
+    "dogfoodRuntimeDefault": "v3-alpha",
+    "unclassifiedV2TokensAllowed": false
+  },
+  "entries": [
+    {
+      "path": ".github/workflows/.bump-minor-version.yml",
+      "token": "kungfu-systems/buildchain/actions/bump-version@v2",
+      "expectedOccurrences": 1,
+      "classification": "legacy-compatibility-action",
+      "callerStatus": "legacy-reusable",
+      "owner": "buildchain-maintainers",
+      "sunsetCondition": "Remove after every known caller migrates to the lifecycle version command."
+    },
+    {
+      "path": ".github/workflows/.release-candidate-promote.yml",
+      "token": "actions/create-github-app-token@v2",
+      "expectedOccurrences": 1,
+      "classification": "third-party-action-version",
+      "callerStatus": "active",
+      "owner": "actions/create-github-app-token maintainers",
+      "sunsetCondition": "Upgrade through normal dependency review when a compatible successor is adopted."
+    },
+    {
+      "path": ".github/workflows/.release-docker.yml",
+      "token": "workflows v2 Docker release path is retired",
+      "expectedOccurrences": 1,
+      "classification": "retired-path-tombstone",
+      "callerStatus": "fail-closed",
+      "owner": "buildchain-maintainers",
+      "sunsetCondition": "Remove only after the compatibility workflow entry itself is removed."
+    },
+    {
+      "path": ".github/workflows/.release-elastic-beanstalk.yml",
+      "token": "workflows v2 Elastic Beanstalk release path is retired",
+      "expectedOccurrences": 1,
+      "classification": "retired-path-tombstone",
+      "callerStatus": "fail-closed",
+      "owner": "buildchain-maintainers",
+      "sunsetCondition": "Remove only after the compatibility workflow entry itself is removed."
+    },
+    {
+      "path": ".github/workflows/.release-new-version.yml",
+      "token": "default: \"v2\"",
+      "expectedOccurrences": 1,
+      "classification": "retired-input-tombstone",
+      "callerStatus": "fail-closed-unused-input",
+      "owner": "buildchain-maintainers",
+      "sunsetCondition": "Remove with the retired workflow input compatibility surface."
+    },
+    {
+      "path": ".github/workflows/.release-verify.yml",
+      "token": "workflows v2",
+      "expectedOccurrences": 3,
+      "classification": "retired-path-tombstone",
+      "callerStatus": "fail-closed",
+      "owner": "buildchain-maintainers",
+      "sunsetCondition": "Remove each message with its corresponding retired input or path."
+    },
+    {
+      "path": ".github/workflows/.sam-release.yml",
+      "token": "workflows v2 SAM release path is retired",
+      "expectedOccurrences": 1,
+      "classification": "retired-path-tombstone",
+      "callerStatus": "fail-closed",
+      "owner": "buildchain-maintainers",
+      "sunsetCondition": "Remove only after the compatibility workflow entry itself is removed."
+    },
+    {
+      "path": ".github/workflows/.sam-verify.yml",
+      "token": "kungfu-systems/buildchain/actions/bump-version@v2",
+      "expectedOccurrences": 3,
+      "classification": "legacy-compatibility-action",
+      "callerStatus": "legacy-reusable",
+      "owner": "buildchain-maintainers",
+      "sunsetCondition": "Remove after SAM consumers migrate to the lifecycle version command."
+    },
+    {
+      "path": ".github/workflows/.sam-verify.yml",
+      "token": "aws-actions/setup-sam@v2",
+      "expectedOccurrences": 1,
+      "classification": "third-party-action-version",
+      "callerStatus": "legacy-reusable",
+      "owner": "aws-actions/setup-sam maintainers",
+      "sunsetCondition": "Upgrade through normal dependency review when a compatible successor is adopted."
+    },
+    {
+      "path": ".github/workflows/.sync-release-page.yml",
+      "token": "retired in workflows v2",
+      "expectedOccurrences": 1,
+      "classification": "retired-path-tombstone",
+      "callerStatus": "fail-closed",
+      "owner": "buildchain-maintainers",
+      "sunsetCondition": "Remove only after the compatibility workflow entry itself is removed."
+    },
+    {
+      "path": ".github/workflows/.wheel-release.yml",
+      "token": "workflows v2 wheel release path is retired",
+      "expectedOccurrences": 1,
+      "classification": "retired-path-tombstone",
+      "callerStatus": "fail-closed",
+      "owner": "buildchain-maintainers",
+      "sunsetCondition": "Remove only after the compatibility workflow entry itself is removed."
+    },
+    {
+      "path": ".github/workflows/.wheel-verify.yml",
+      "token": "kungfu-systems/buildchain/actions/publish-prebuilt@v2",
+      "expectedOccurrences": 1,
+      "classification": "legacy-compatibility-action",
+      "callerStatus": "legacy-reusable",
+      "owner": "buildchain-maintainers",
+      "sunsetCondition": "Remove after wheel consumers migrate to the publication authority path."
+    },
+    {
+      "path": ".github/workflows/.wheel-verify.yml",
+      "token": "kungfu-systems/buildchain/actions/bump-version@v2",
+      "expectedOccurrences": 3,
+      "classification": "legacy-compatibility-action",
+      "callerStatus": "legacy-reusable",
+      "owner": "buildchain-maintainers",
+      "sunsetCondition": "Remove after wheel consumers migrate to the lifecycle version command."
+    },
+    {
+      "path": ".github/workflows/candidate-lab.yml",
+      "token": "default: \"v2\"",
+      "expectedOccurrences": 1,
+      "classification": "legacy-compatibility-ref",
+      "callerStatus": "manual-no-publish-report-only",
+      "owner": "buildchain-maintainers",
+      "sunsetCondition": "Remove after the legacy workflows comparison lane is formally retired."
+    },
+    {
+      "path": ".github/workflows/schedule-purge-artifacts.yml",
+      "token": "not shipped in buildchain v2",
+      "expectedOccurrences": 1,
+      "classification": "retired-path-tombstone",
+      "callerStatus": "fail-closed",
+      "owner": "buildchain-maintainers",
+      "sunsetCondition": "Remove only after the compatibility workflow entry itself is removed."
+    }
+  ]
+}

package/contracts/evidence/auditable-demo-responsive-web-delivery-v1.json

@@ -0,0 +1,143 @@
+{
+  "evidenceRoot": "sha256:5bebb7ca41b7b509d63293c3c363fbff917d188fe1d6ae19a73d33424ea623ed",
+  "inputs": {
+    "complete-transcript.txt": "sha256:3cc1fc8a46d47fad052143b54ab261f08d007403c4ec00eba37b0a733f7cc615",
+    "public-projection.json": "sha256:c5d5ec702189d2e6eed17419f2fd9a659c1b4cbcf7ee1a58ac8507ec2a748180",
+    "scene.json": "sha256:a140e39b721ba3fe0daa05d6391fb690027efd52e15e1d801dade3934385e67e"
+  },
+  "qualification": {
+    "inspectionRoot": "sha256:c2ad1f75b543f2dbc5abb3dcedce3bb11d1f02cb2463444277ae6ecd80459f76",
+    "nonClaims": [
+      "browser-playback-success",
+      "responsive-layout",
+      "reduced-motion-behavior",
+      "production-site-deployment"
+    ],
+    "profile": {
+      "catalogRoot": "sha256:cf885ac31104a36aa051fb62f47dd79b68bd671f7dfeeb1a458ea7d0cbf0c479",
+      "id": "responsive-web-delivery-v1",
+      "mode": "web-delivery",
+      "profileRoot": "sha256:fdbda001970304af935f58af11ccfdb7c32ec466c9dd487cbb81ee1b19dc4556"
+    },
+    "qualificationRoot": "sha256:1c588662db5abcc6776a43b3210f43555161b55ddf8aa4aa4530371bc1d26ec8",
+    "renditions": [
+      {
+        "audioStreams": 0,
+        "bytes": 45632,
+        "container": "gif",
+        "dimensionPolicy": "exact-downscale-same-aspect",
+        "durationMs": 2500,
+        "frameRate": 12.5,
+        "height": 720,
+        "maximumBytes": 1048576,
+        "mimeType": "image/gif",
+        "path": "demo.gif",
+        "pixelFormat": "bgra",
+        "progressiveDownload": "not-applicable",
+        "role": "readme-compatibility",
+        "root": "sha256:92a73e4c384f4a1c563d1594d77ac114db0f969fefe033e4bd98fad62473478d",
+        "videoCodec": "gif",
+        "width": 1280
+      },
+      {
+        "audioStreams": 0,
+        "bytes": 30654,
+        "container": "mp4",
+        "dimensionPolicy": "scene-exact",
+        "durationMs": 2533,
+        "frameRate": 15,
+        "height": 1080,
+        "maximumBytes": 2097152,
+        "mimeType": "video/mp4",
+        "path": "demo.mp4",
+        "pixelFormat": "yuv420p",
+        "progressiveDownload": "moov-before-mdat",
+        "role": "primary-video",
+        "root": "sha256:1a5a7896781417973d0f2c0ad936c89701a2705e1eb2d2d3c45b8ab95665717e",
+        "videoCodec": "h264",
+        "width": 1920
+      },
+      {
+        "audioStreams": 0,
+        "bytes": 25420,
+        "container": "webm",
+        "dimensionPolicy": "scene-exact",
+        "durationMs": 2534,
+        "frameRate": 15,
+        "height": 1080,
+        "maximumBytes": 2097152,
+        "mimeType": "video/webm",
+        "path": "demo.webm",
+        "pixelFormat": "yuv420p",
+        "progressiveDownload": "not-applicable",
+        "role": "alternate-video",
+        "root": "sha256:f5b47da43d1f69dc66483933e3b3491215e686817eb787008cf026c20f543530",
+        "videoCodec": "vp9",
+        "width": 1920
+      },
+      {
+        "audioStreams": 0,
+        "bytes": 42679,
+        "container": "png",
+        "dimensionPolicy": "scene-exact",
+        "durationMs": 0,
+        "frameRate": 25,
+        "height": 1080,
+        "maximumBytes": 1048576,
+        "mimeType": "image/png",
+        "path": "poster.png",
+        "pixelFormat": "rgb24",
+        "progressiveDownload": "not-applicable",
+        "role": "evidence-poster",
+        "root": "sha256:cf53da4af2c1ddd5341db19fc1f3cf5f23164517c2fe962f546be2faf0f606b0",
+        "videoCodec": "png",
+        "width": 1920
+      },
+      {
+        "audioStreams": 0,
+        "bytes": 19252,
+        "container": "mp4",
+        "dimensionPolicy": "exact-downscale-same-aspect",
+        "durationMs": 2533,
+        "frameRate": 15,
+        "height": 720,
+        "maximumBytes": 2097152,
+        "mimeType": "video/mp4",
+        "path": "demo-720p.mp4",
+        "pixelFormat": "yuv420p",
+        "progressiveDownload": "moov-before-mdat",
+        "role": "responsive-primary-video",
+        "root": "sha256:7b397af86e2f9e8cdab1b5c669bc4b4475d9168508ecb938bab69979e0fcdeee",
+        "videoCodec": "h264",
+        "width": 1280
+      },
+      {
+        "audioStreams": 0,
+        "bytes": 16089,
+        "container": "webm",
+        "dimensionPolicy": "exact-downscale-same-aspect",
+        "durationMs": 2534,
+        "frameRate": 15,
+        "height": 720,
+        "maximumBytes": 2097152,
+        "mimeType": "video/webm",
+        "path": "demo-720p.webm",
+        "pixelFormat": "yuv420p",
+        "progressiveDownload": "not-applicable",
+        "role": "responsive-alternate-video",
+        "root": "sha256:d6b8ae4513e09092de330dcc3a1b916f0e64a7743b6cfc102ae1e7a09667cb1c",
+        "videoCodec": "vp9",
+        "width": 1280
+      }
+    ],
+    "schema": "buildchain.auditable-demo-media-qualification/v1"
+  },
+  "renderer": {
+    "image": "ghcr.io/kungfu-systems/build-images/demo-renderer@sha256:b70a2f5631665f685280bc9d7434c5ed5cf48b760b728873734d0c47bff72b25",
+    "sourceRef": "refs/tags/v1.3.0-alpha.20",
+    "sourceRepository": "kungfu-systems/build-images",
+    "sourceSha": "b3cebc2deb5f140af74db24b1b45233ac6733ef1"
+  },
+  "rendererManifestRoot": "sha256:7c4066cbcf4cd612869d160ddc0beca0e35237369cdca895ffda265b60a74993",
+  "schema": "buildchain.auditable-demo-media-profile-fixture/v1"
+}

package/contracts/evidence/auditable-demo-web-delivery-v1.json

@@ -1,5 +1,5 @@
 {
-  "evidenceRoot": "sha256:451adc20c423fbf680caeb14dcc4850990a3317dd5a77f94ee451a7a26edf3fb",
+  "evidenceRoot": "sha256:5a4fced32999b3007628dfaee32206b0f7512032e65fd57be455e59df2f5d877",
   "inputs": {
     "complete-transcript.txt": "sha256:f3723a3eda614134ab724ce9fbe1e0e5f916d809a8a3096f5e37c1458cb3656c",
     "public-projection.json": "sha256:127f9877f9750a85eada4338f088bee5460c5c71a83302652d3321667002c3c7",
@@ -14,17 +14,18 @@
       "production-site-deployment"
     ],
     "profile": {
-      "catalogRoot": "sha256:b2cf52c7b087be73ea852bbbe574e1a50bb7d64d26b8bc211a2c7d53e2ff9cae",
+      "catalogRoot": "sha256:cf885ac31104a36aa051fb62f47dd79b68bd671f7dfeeb1a458ea7d0cbf0c479",
       "id": "web-delivery-v1",
       "mode": "web-delivery",
       "profileRoot": "sha256:b6fb0a83414d03a7222fc50429e60ed68b6d47758b86ceaa316ecc659a01ae2b"
     },
-    "qualificationRoot": "sha256:f2133bab4a3a5937ec3863972049d0a7247a8e108681d4bd247f47d766c461ae",
+    "qualificationRoot": "sha256:a8509982ce43c133ef50bbb651bdba07b5b37bed06841ebb165f23b81e3b9fc1",
     "renditions": [
       {
         "audioStreams": 0,
         "bytes": 40826,
         "container": "gif",
+        "dimensionPolicy": "scene-exact",
         "durationMs": 2500,
         "frameRate": 12.5,
         "height": 720,
@@ -42,6 +43,7 @@
         "audioStreams": 0,
         "bytes": 27038,
         "container": "mp4",
+        "dimensionPolicy": "scene-exact",
         "durationMs": 2533,
         "frameRate": 15,
         "height": 720,
@@ -59,6 +61,7 @@
         "audioStreams": 0,
         "bytes": 23383,
         "container": "webm",
+        "dimensionPolicy": "scene-exact",
         "durationMs": 2534,
         "frameRate": 15,
         "height": 720,
@@ -76,6 +79,7 @@
         "audioStreams": 0,
         "bytes": 34769,
         "container": "png",
+        "dimensionPolicy": "scene-exact",
         "durationMs": 0,
         "frameRate": 25,
         "height": 720,

package/contracts/fixtures/auditable-demo-responsive-web-delivery-v1/complete-transcript.txt

@@ -0,0 +1,2 @@
+buildchain auditable demo responsive media profile qualification
+immutable renderer fixture completed

package/contracts/fixtures/auditable-demo-responsive-web-delivery-v1/public-projection.json

@@ -0,0 +1,16 @@
+{
+  "schema": "build-images.demo-projection/v1",
+  "evidenceClass": "qualified-build-output",
+  "claimBoundary": "Fixture media qualifies responsive delivery properties only; it does not prove a production deployment.",
+  "cues": [
+    {
+      "startMs": 0,
+      "endMs": 2500,
+      "transcriptLines": [
+        1,
+        2
+      ],
+      "annotation": "fixed responsive qualification fixture"
+    }
+  ]
+}

package/contracts/fixtures/auditable-demo-responsive-web-delivery-v1/scene.json

@@ -0,0 +1,12 @@
+{
+  "schema": "build-images.demo-scene/v1",
+  "id": "buildchain-responsive-web-delivery-qualification",
+  "width": 1920,
+  "height": 1080,
+  "fps": 15,
+  "durationMs": 2500,
+  "title": "Buildchain responsive web delivery qualification",
+  "commandLabel": "buildchain qualify-media-fixture",
+  "background": "#0B1020",
+  "accent": "#67E8A5"
+}