@kungfu-tech/buildchain 3.0.4-alpha.4 → 3.0.4-alpha.6

package/dist/site/buildchain-site.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-bundle",
-  "generatedAt": "2026-08-01T07:54:07.899Z",
-  "publishedAt": "2026-08-01T07:54:07.899Z",
+  "generatedAt": "2026-08-01T11:04:27.961Z",
+  "publishedAt": "2026-08-01T11:04:27.961Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "0395e290736c49c38982fc85d916d09ba07a5f16",
+  "sourceRevision": "ef33b573020c1866a3e22c260bdae2c1cacbc1d5",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "3.0.4-alpha.4",
+    "version": "3.0.4-alpha.6",
     "versionSource": "package.json#version"
   },
   "source": {
@@ -106,13 +106,18 @@
       ],
       "maturity": "stable",
       "sourcePath": "README.md",
-      "digest": "sha256:f238209650d3eee529616542d556fd62b9bfeb2d71333cdfcb90ffe74052f5d7",
+      "digest": "sha256:465578f02ed41b27a755a1b3c9836d4c69e3b966bd7c71909d7a74f91b0551cd",
       "headings": [
         {
           "level": 1,
           "title": "Buildchain",
           "anchor": "buildchain"
         },
+        {
+          "level": 2,
+          "title": "Choose Your Path",
+          "anchor": "choose-your-path"
+        },
         {
           "level": 2,
           "title": "Where Buildchain sits in the Agent Supply Chain",
@@ -164,7 +169,7 @@
           "anchor": "read-next"
         }
       ],
-      "markdown": "# Buildchain\n\n<!-- buildchain:badges:start -->\n\n[![KFD-1: passed](https://buildchain.libkungfu.dev/badges/v1/kfd-1/passed.svg)](https://github.com/kungfu-systems/buildchain/releases/latest/download/buildchain.release.json)\n[![KFD-2: passed](https://buildchain.libkungfu.dev/badges/v1/kfd-2/passed.svg)](https://github.com/kungfu-systems/buildchain/releases/latest/download/buildchain.release.json)\n[![KFD-3: passed](https://buildchain.libkungfu.dev/badges/v1/kfd-3/passed.svg)](https://github.com/kungfu-systems/buildchain/releases/latest/download/buildchain.release.json)\n[![KFD-4: declared](https://buildchain.libkungfu.dev/badges/v1/kfd-4/declared.svg)](https://github.com/kungfu-systems/buildchain/releases/latest/download/buildchain.release.json)\n[![Buildchain Release Passport: passed](https://buildchain.libkungfu.dev/badges/v1/buildchain-release-passport/passed.svg)](https://github.com/kungfu-systems/buildchain/releases/latest/download/buildchain.release.json)\n[![License: Apache-2.0](https://img.shields.io/badge/license-Apache--2.0-0969da.svg)](https://github.com/kungfu-systems/buildchain/blob/HEAD/LICENSE)\n[![Platform: macOS | Linux | Windows](https://img.shields.io/badge/platform-macOS%20%7C%20Linux%20%7C%20Windows-6e7781.svg)](https://github.com/kungfu-systems/buildchain/releases/latest/download/buildchain.release.json)\n[![Verify](https://github.com/kungfu-systems/buildchain/actions/workflows/verify.yml/badge.svg)](https://github.com/kungfu-systems/buildchain/actions/workflows/verify.yml)\n[![Buildchain Ref Promotion](https://github.com/kungfu-systems/buildchain/actions/workflows/buildchain-ref-promotion.yml/badge.svg)](https://github.com/kungfu-systems/buildchain/actions/workflows/buildchain-ref-promotion.yml)\n[![Binary Distribution](https://github.com/kungfu-systems/buildchain/actions/workflows/binary-distribution.yml/badge.svg)](https://github.com/kungfu-systems/buildchain/actions/workflows/binary-distribution.yml)\n<!-- buildchain:badges:end -->\n\nBuildchain Release Passport is a mature product release record for artifacts\nthat users or agents depend on.\n\nBuildchain by Kungfu uses GitHub as the execution and trust substrate: protected\nrefs, reviewed promotion PRs, exact tags, GitHub Releases, npm Trusted\nPublishing, and machine-readable evidence. Its job is to turn release intent\ninto an auditable product record, not to ask a repository to migrate away from\nits existing CI.\n\nThe same mechanism releases Buildchain itself.\n\n## Where Buildchain sits in the Agent Supply Chain\n\nBuildchain binds a product's declarations to the exact source cut, build,\nartifacts, checks, and promotion record that produced a release. In the wider\nAgent Supply Chain it sits between KFD-3 product discovery and KFD-2\npurpose-bound assessment:\n\n```text\nKFD-3 declaration -> Buildchain exact-artifact evidence -> KFD-2 assessment\n```\n\nBuildchain can prove that a declared claim and an exact artifact remain\nconsistent, or fail/downgrade when their evidence drifts. It does not invent\nthe product fact, decide whether a receiver should trust it for a purpose,\ncertify every platform, or prove external adoption. Receivers and downstream\nKFD-2 assessors retain the admission decision and residual risk.\n\nTo evaluate the layer, inspect a release's `buildchain.release.json` and\n`artifact-evidence.json`, verify them with the CLI, and report missing product\nor protocol evidence through the repository issue tracker.\n\n## Install and Verify\n\nFor v3, use the published npm package and verify the release passport before\ntrusting release evidence:\n\n```bash\ncurl -LO https://github.com/kungfu-systems/buildchain/releases/download/v3.0.0/buildchain.release.json\ncurl -LO https://github.com/kungfu-systems/buildchain/releases/download/v3.0.0/artifact-evidence.json\nnpx @kungfu-tech/buildchain@3.0.0 verify release-passport buildchain.release.json\nnpx @kungfu-tech/buildchain@3.0.0 version\n```\n\nThe v3.0.0 release publishes evidence assets but no standalone platform archives.\nThe names below describe the optional archive contract used by legacy release\nlines:\n\n- `buildchain-x86_64-unknown-linux-gnu.tar.gz`\n- `buildchain-aarch64-apple-darwin.tar.gz`\n- `buildchain-x86_64-pc-windows-msvc.zip`\n- `checksums.txt`\n- `buildchain.release.json`\n- `artifact-evidence.json`\n- `product-mechanism.json`\n- `impact.json`\n- `agent-index.json`\n- `check-report.json`\n- `llms.txt`\n- `buildchain-release-bundle.tar.gz`\n- `buildchain-release-bundle.json`\n\nLoose top-level `buildchain` and `buildchain.exe` assets are intentionally not\npublished. The executable lives inside each platform archive, which prevents\nLinux and macOS artifacts from overwriting each other in a merged release lane.\n\nFor npm consumers:\n\n```bash\nnpm install -D @kungfu-tech/buildchain\nnpx buildchain version\nnpx buildchain doctor --json\n```\n\nThe npm package is also the Buildchain toolkit. Use the command when a workflow\nor shell step needs an executable; use the ESM APIs directly from JavaScript\nbuild scripts. JavaScript callers should import the package instead of spawning\nthe CLI or unpacking the standalone binary:\n\n```js\nimport {\n  createBuildchainLogger,\n  verifyBuildchainLogEvents,\n} from \"@kungfu-tech/buildchain/logging\";\n\nconst logger = createBuildchainLogger({\n  path: \".buildchain/logs/native-build.jsonl\",\n  source: \"user\",\n  component: \"native-build\",\n});\n\nawait logger.span(\"native.compile\", { phase: \"build\" }, async () => {\n  await compileNativeTargets();\n});\n\nconst report = verifyBuildchainLogEvents({\n  path: logger.path,\n  requireEvents: [\"native.compile.start\", \"native.compile.end\"],\n});\n```\n\nThe package also ships `dist/site/` as the Buildchain-owned fact source for\n`buildchain.libkungfu.dev`.\n\nRepositories can also generate README status badges from Buildchain-owned facts\ninstead of hand-maintaining badge Markdown:\n\n```bash\nbuildchain badges bundle --check\nbuildchain badges bundle --write\nbuildchain badges readme --check\nbuildchain badges readme --write\n```\n\n## Project Governance\n\n- [`LICENSE-POLICY.md`](LICENSE-POLICY.md) explains the Apache-2.0 project\n  license, DCO-based contributions, and third-party notice boundary.\n- [`TRADEMARK.md`](TRADEMARK.md) explains official project marks and fork\n  identity boundaries.\n- [`ACCEPTABLE_USE.md`](ACCEPTABLE_USE.md) explains acceptable use of official\n  services and maintainer-operated infrastructure.\n- [`PROVIDER_COMPLIANCE.md`](PROVIDER_COMPLIANCE.md) explains the official\n  posture for GitHub, npm, cloud, credential, release evidence, and other\n  provider integrations.\n- [`SECURITY.md`](SECURITY.md) explains private vulnerability reporting.\n\nNative build consumers can import the diagnostics toolkit instead of copying\nrepository-local probes:\n\n```js\nimport {\n  collectBuildchainDiagnostics,\n  collectRunnerDiagnostics,\n  writeDiagnosticsArtifact,\n} from \"@kungfu-tech/buildchain/diagnostics\";\n\nwriteDiagnosticsArtifact(\".buildchain/artifacts/diagnostics.json\", {\n  contract: \"consumer-build-diagnostics\",\n  buildchain: collectBuildchainDiagnostics({ cwd: process.cwd() }),\n  runner: collectRunnerDiagnostics(),\n});\n```\n\n`buildchain lifecycle run` writes a small `diagnostics.json` next to the\nplatform manifest. It includes lifecycle-wide observability, runner/tool/cache\nsnapshots, Git state, and links to the larger manifest and artifact outputs.\n\nConsumers can report Buildchain-owned workflow failures directly to the\nBuildchain repository with a scoped issue-write token:\n\n```yaml\n- uses: kungfu-systems/buildchain/actions/report-buildchain-issue@v3\n  if: failure()\n  with:\n    token: ${{ steps.buildchain-issue-token.outputs.token }}\n    summary: \"Reusable build failed before artifact finalization\"\n    failure-code: reusable-build-failed\n    buildchain-ref: v3\n    diagnostics-path: .buildchain/artifacts/diagnostics.json\n```\n\nThe action deduplicates by fingerprint, comments on existing open reports, and\nis fail-soft by default so issue reporting does not hide the original failure.\nUse `report-kind: workflow-friction` when Buildchain workflows should report\ntheir own repeated release friction back to the Buildchain issue tracker.\n\n## Use Buildchain\n\nBootstrap a repository:\n\n```bash\nnpx @kungfu-tech/buildchain init --type package --package-manager pnpm\nnpx @kungfu-tech/buildchain validate --require-version-state\nnpx @kungfu-tech/buildchain release --dry-run --target-ref alpha/v3/v3.0\n```\n\nBootstrap and inspect a governed paper repository through one interface:\n\n```bash\nnpx @kungfu-tech/buildchain paper scaffold \\\n  --package @kungfu-tech/paper-example \\\n  --repository kungfu-systems/paper-example\npnpm add -D @kungfu-tech/buildchain@<exact-v3-version>\npnpm exec buildchain paper work start <topic>\npnpm exec buildchain paper work submit\npnpm exec buildchain paper preflight --offline\npnpm exec buildchain paper status\n```\n\nThe paper surface is dry-run first. Add `--write` only to create missing\nscaffold files. `work start` and `work submit` validate the canonical remote,\nexact development SHA, clean source, safe branch, and fast-forward boundary\nbefore changing local or GitHub state. External mutations such as npm\nbootstrap, Alpha PR creation, and release resumption require `--execute`. See\n[`docs/publication-artifacts.md`](docs/publication-artifacts.md) for the\nevidence-state model and operator flow.\n\nBuildchain supports package and non-package projects through\n`.buildchain/buildchain.toml`. Legacy root `buildchain.toml` files remain\nreadable, but new consumers should keep Buildchain-owned files under\n`.buildchain/`:\n\n```text\n.buildchain/buildchain.toml\n.buildchain/contract-lock.json\n.buildchain/kfd/kfd-3/surfaces.json\n.buildchain/release-passport/buildchain.release.json\n```\n\nLifecycle commands can call pnpm, npm, yarn, pip, Conan, CMake, Make, custom\nscripts, or any other command that can run in the repository checkout.\n\nThe KFD entrypoint is `buildchain kfd`. Buildchain provides concrete KFD-1\ncontract-world, KFD-2 trust-claim, and KFD-3 collaboration-surface workflows,\nplus fail-closed product-evidence gates for KFD-4, KFD-5, and KFD-7. These\ngates preserve product-owned qualification and support decisions; they do not\nturn a schema-valid record into certification or shipped support.\n\nBuildchain's action registry currently contains six active entries. Four are\ndirect consumer integration actions:\n\n- `actions/validate-config`\n- `actions/run-lifecycle`\n- `actions/promote-buildchain-ref`\n- `actions/report-buildchain-issue`\n\nTwo additional release-authority components are also registered and versioned:\n\n- `actions/github-artifact-attestation`\n- `actions/macos-credential-island`\n\n`dist/site/workflow-registry.json#actions` is the machine-readable inventory;\nthis split keeps the older four-action consumer list from being mistaken for\nthe complete current registry.\n\nThe active reusable workflow surfaces are:\n\n- `.github/workflows/.gate-profile.yml` for project-neutral Shifu Gate profile\n  planning, capability-aware runner dispatch, receipt validation, and one\n  stable aggregate check;\n- `.github/workflows/.auditable-demo.yml` for exact-artifact demo\n  qualification, transcript-bound renderer smoke, optional media rendering\n  from the exact passing Gate bundle, and opt-in content-addressed web-delivery\n  profiles with independently verified rendition roles;\n- `.github/workflows/.build.yml` for deterministic multi-platform build and\n  artifact contracts;\n- `.github/workflows/build.yml` for the single-config channel router that uses\n  `vN-alpha` during development/prerelease work and `vN` for stable releases;\n- `.github/workflows/release-candidate-promote.yml` for post-merge\n  promote-only publication from a PR-stage release candidate, without a second\n  heavy build;\n- `.github/workflows/.web-surface.yml` for preview, staging, production, and\n  cleanup plans for site/app repositories;\n- `.github/workflows/buildchain-ref-promotion.yml` for protected release\n  promotion and version-state transactions;\n- `.github/workflows/binary-distribution.yml` for Buildchain's own release\n  passport proof case.\n\nStable consumers should reference actions and workflows through floating major\nrefs after reviewing the exact release passport:\n\n```yaml\nuses: kungfu-systems/buildchain/actions/validate-config@v3\n```\n\n```yaml\nuses: kungfu-systems/buildchain/.github/workflows/build.yml@v3\n```\n\n```yaml\nuses: kungfu-systems/buildchain/.github/workflows/release-candidate-promote.yml@v3\n```\n\n## Release Model\n\nBuildchain treats a reviewed branch merge as release intent:\n\n| Merge path                              | Meaning                                                | Exact tag        | Floating refs                                        |\n| --------------------------------------- | ------------------------------------------------------ | ---------------- | ---------------------------------------------------- |\n| `dev/vX/vX.Y -> alpha/vX/vX.Y`          | publish the next testable alpha for a minor line       | `vX.Y.Z-alpha.N` | `vX.Y-alpha`, `alpha/vX/vX.Y`, `dev/vX/vX.Y`         |\n| `alpha/vX/vX.Y -> release/vX/vX.Y`      | publish production for that minor line                 | `vX.Y.Z`         | `vX.Y`, usually `vX`, `release/vX/vX.Y`              |\n| `release/vX/vX.Y -> publish-gate/major` | publish the next major from a reviewed production line | `v(X+1).0.0`     | `v(X+1)`, `v(X+1).0`, new dev/alpha/release branches |\n\nExact tags are immutable. Floating channel tags and branches are machine-updated\nby Buildchain and must remain writable by the release authority.\n\nAfter a production release, Buildchain prepares the next alpha source commit for\nthe same minor line. That keeps production consumers pinned to the production\npassport while development can continue on the next testable patch.\n\n`publish-gate/major` is not an active development trunk. It is a reviewed\npromotion gate used when maintainers decide that the next production release\nshould open a new major line.\n\n## Toolkit Observability\n\nBuildchain includes a logging toolkit for release and build steps. Inside\nJavaScript build code, prefer the package API:\n\n```js\nimport { createBuildchainLogger } from \"@kungfu-tech/buildchain/logging\";\n\nconst logger = createBuildchainLogger({ source: \"user\", component: \"conan\" });\nlogger.mark(\"conan.profile.ready\", { phase: \"configure\" });\nawait logger.span(\"conan.install\", { phase: \"dependencies\" }, runConanInstall);\n```\n\nIn workflows or shell scripts, use the equivalent CLI:\n\n```bash\nbuildchain mark --event native.configure --phase configure --component cmake\nbuildchain span --event native.build --phase build -- cmake --build build\nbuildchain log summary --json\nbuildchain verify observability-log .buildchain/logs/events.jsonl --min-events 4\n```\n\nEvery event records a timestamp. `span` records duration. The API form can be\nimported from repository scripts so heavy builds can mark phases from inside\ntheir own code.\n\n## Site Fact Source\n\n`@kungfu-tech/buildchain` publishes `dist/site/`:\n\n- `buildchain-site.json`\n- `site-manifest.json`\n- `page-registry.json`\n- `cli-registry.json`\n- `workflow-registry.json`\n- `release-model.json`\n- `artifact-schemas.json`\n- `product-mechanism.json`\n- `release-provenance.json`\n- `agent-index.json`\n\n`buildchain.libkungfu.dev` should render from these package-owned facts, then\nlayer presentation around them. The site should not hand-write Buildchain's\ncurrent release mechanics. `page-registry.json` is the complete markdown page\nsource for the public site: README homepage content, all packaged `docs/*.md`\nmanuals, action READMEs, the Node API package overview, and fixture guides.\n\n## Homepage Content Contract\n\nThis README is also the homepage text source for `buildchain.libkungfu.dev`.\nWhen a site repository consumes the `@kungfu-tech/buildchain` npm package, it\nshould use the generated `dist/site/buildchain-site.json` homepage fields\ninstead of parsing this README or maintaining separate homepage copy.\n\nThe first screen should be derived from:\n\n- Page identity: the top-level heading.\n- Lead: the opening paragraph that defines Buildchain Release Passport.\n- Trust signal: the start of `Install and Verify`, especially passport-first\n  binary verification.\n- Use signal: the start of `Use Buildchain`, especially the reusable workflow\n  and action surfaces.\n\nThe package-owned site bundle exposes ordered `homepage.sections`,\n`homepage.displayPlan`, `homepage.rendererContract`, and a complete\n`pages` collection mirrored from `page-registry.json`. A site renderer may adapt\nlayout, navigation, typography, examples, and visual assets, but it should not\nmaintain separate wording for Buildchain's release mechanics, workflow surface,\noperation manuals, Node API overview, fixture guides, or release-passport trust\nmodel. Renderer-contract text is machine/implementation metadata, not ordinary\nhomepage content.\n\n## Local Verification\n\n```bash\ncorepack enable pnpm\npnpm install --frozen-lockfile\npnpm run generate:site\npnpm run check\nnpm pack --dry-run --json --registry=https://registry.npmjs.org/\n```\n\n## Read Next\n\n- [Install and verify](docs/install.md)\n- [Documentation map](docs/MAP.md)\n- [Product mechanism](docs/product-mechanism.md)\n- [Release Passport and binary distribution](docs/release-passport.md)\n- [GitHub governance authority](docs/github-governance-authority.md)\n- [GitHub-native Linux artifact attestation](docs/github-artifact-attestation.md)\n- [Binary distribution details](docs/binary-distribution.md)\n- [Toolkit observability](docs/toolkit-observability.md)\n- [Site bundle contract](docs/site-bundle-contract.md)\n- [Lifecycle protocol](docs/lifecycle-protocol.md)\n- [Reusable build surface](docs/reusable-build-surface.md)\n- [Shifu Gate profile orchestration](docs/shifu-gate-profiles.md)\n- [Release candidate passport](docs/release-candidate.md)\n- [Consumer issue reporting](docs/consumer-issue-reporting.md)\n- [Publish transaction](docs/publish-transaction.md)\n- [Release governance](docs/release-governance.md)",
+      "markdown": "# Buildchain\n\n<!-- buildchain:badges:start -->\n\n[![KFD-1: passed](https://buildchain.libkungfu.dev/badges/v1/kfd-1/passed.svg)](https://github.com/kungfu-systems/buildchain/releases/latest/download/buildchain.release.json)\n[![KFD-2: passed](https://buildchain.libkungfu.dev/badges/v1/kfd-2/passed.svg)](https://github.com/kungfu-systems/buildchain/releases/latest/download/buildchain.release.json)\n[![KFD-3: passed](https://buildchain.libkungfu.dev/badges/v1/kfd-3/passed.svg)](https://github.com/kungfu-systems/buildchain/releases/latest/download/buildchain.release.json)\n[![KFD-4: declared](https://buildchain.libkungfu.dev/badges/v1/kfd-4/declared.svg)](https://github.com/kungfu-systems/buildchain/releases/latest/download/buildchain.release.json)\n[![Buildchain Release Passport: passed](https://buildchain.libkungfu.dev/badges/v1/buildchain-release-passport/passed.svg)](https://github.com/kungfu-systems/buildchain/releases/latest/download/buildchain.release.json)\n[![License: Apache-2.0](https://img.shields.io/badge/license-Apache--2.0-0969da.svg)](https://github.com/kungfu-systems/buildchain/blob/HEAD/LICENSE)\n[![Platform: macOS | Linux | Windows](https://img.shields.io/badge/platform-macOS%20%7C%20Linux%20%7C%20Windows-6e7781.svg)](https://github.com/kungfu-systems/buildchain/releases/latest/download/buildchain.release.json)\n[![Verify](https://github.com/kungfu-systems/buildchain/actions/workflows/verify.yml/badge.svg)](https://github.com/kungfu-systems/buildchain/actions/workflows/verify.yml)\n[![Buildchain Ref Promotion](https://github.com/kungfu-systems/buildchain/actions/workflows/buildchain-ref-promotion.yml/badge.svg)](https://github.com/kungfu-systems/buildchain/actions/workflows/buildchain-ref-promotion.yml)\n[![Binary Distribution](https://github.com/kungfu-systems/buildchain/actions/workflows/binary-distribution.yml/badge.svg)](https://github.com/kungfu-systems/buildchain/actions/workflows/binary-distribution.yml)\n<!-- buildchain:badges:end -->\n\nBuildchain Release Passport is a mature product release record for artifacts\nthat users or agents depend on.\n\nBuildchain by Kungfu uses GitHub as the execution and trust substrate: protected\nrefs, reviewed promotion PRs, exact tags, GitHub Releases, npm Trusted\nPublishing, and machine-readable evidence. Its job is to turn release intent\ninto an auditable product record, not to ask a repository to migrate away from\nits existing CI.\n\nThe same mechanism releases Buildchain itself.\n\n## Choose Your Path\n\n| You are... | Start here | You will get... |\n| --- | --- | --- |\n| adopting Buildchain for the first time | [Golden Path](docs/getting-started.md) | an exact install, project declaration, validated config, reusable workflow, release dry-run, and Passport inspection |\n| looking up a CLI command | [Generated CLI Reference](docs/cli-reference.md) | governed syntax, options, aliases, and side-effect-free help paths |\n| writing JavaScript automation | [Generated Node API Reference](docs/node-api-reference.md) | every public subpath and symbol with source-derived signatures and behavior boundaries |\n| operating an advanced build or release | [Documentation Map](docs/MAP.md) | capability-, intent-, and maturity-based navigation to normative contracts |\n\nThe Golden Path is the beginner lane. Advanced workflow, signing, publishing,\nand governance manuals remain separate so a first-time consumer does not need\nto understand the entire release control plane before reaching a valid local\nconfiguration.\n\n## Where Buildchain sits in the Agent Supply Chain\n\nBuildchain binds a product's declarations to the exact source cut, build,\nartifacts, checks, and promotion record that produced a release. In the wider\nAgent Supply Chain it sits between KFD-3 product discovery and KFD-2\npurpose-bound assessment:\n\n```text\nKFD-3 declaration -> Buildchain exact-artifact evidence -> KFD-2 assessment\n```\n\nBuildchain can prove that a declared claim and an exact artifact remain\nconsistent, or fail/downgrade when their evidence drifts. It does not invent\nthe product fact, decide whether a receiver should trust it for a purpose,\ncertify every platform, or prove external adoption. Receivers and downstream\nKFD-2 assessors retain the admission decision and residual risk.\n\nTo evaluate the layer, inspect a release's `buildchain.release.json` and\n`artifact-evidence.json`, verify them with the CLI, and report missing product\nor protocol evidence through the repository issue tracker.\n\n## Install and Verify\n\nNew repository adopters should follow the [15–30 minute Golden Path](docs/getting-started.md).\nThe commands below are the shorter verification-only route for an existing\nconsumer.\n\nFor v3, use the published npm package and verify the release passport before\ntrusting release evidence:\n\n```bash\ncurl -LO https://github.com/kungfu-systems/buildchain/releases/download/v3.0.0/buildchain.release.json\ncurl -LO https://github.com/kungfu-systems/buildchain/releases/download/v3.0.0/artifact-evidence.json\nnpx @kungfu-tech/buildchain@3.0.0 verify release-passport buildchain.release.json\nnpx @kungfu-tech/buildchain@3.0.0 version\n```\n\nThe v3.0.0 release publishes evidence assets but no standalone platform archives.\nThe names below describe the optional archive contract used by legacy release\nlines:\n\n- `buildchain-x86_64-unknown-linux-gnu.tar.gz`\n- `buildchain-aarch64-apple-darwin.tar.gz`\n- `buildchain-x86_64-pc-windows-msvc.zip`\n- `checksums.txt`\n- `buildchain.release.json`\n- `artifact-evidence.json`\n- `product-mechanism.json`\n- `impact.json`\n- `agent-index.json`\n- `check-report.json`\n- `llms.txt`\n- `buildchain-release-bundle.tar.gz`\n- `buildchain-release-bundle.json`\n\nLoose top-level `buildchain` and `buildchain.exe` assets are intentionally not\npublished. The executable lives inside each platform archive, which prevents\nLinux and macOS artifacts from overwriting each other in a merged release lane.\n\nFor npm consumers:\n\n```bash\nnpm install -D @kungfu-tech/buildchain\nnpx buildchain version\nnpx buildchain doctor --json\n```\n\nThe npm package is also the Buildchain toolkit. Use the command when a workflow\nor shell step needs an executable; use the ESM APIs directly from JavaScript\nbuild scripts. JavaScript callers should import the package instead of spawning\nthe CLI or unpacking the standalone binary:\n\n```js\nimport {\n  createBuildchainLogger,\n  verifyBuildchainLogEvents,\n} from \"@kungfu-tech/buildchain/logging\";\n\nconst logger = createBuildchainLogger({\n  path: \".buildchain/logs/native-build.jsonl\",\n  source: \"user\",\n  component: \"native-build\",\n});\n\nawait logger.span(\"native.compile\", { phase: \"build\" }, async () => {\n  await compileNativeTargets();\n});\n\nconst report = verifyBuildchainLogEvents({\n  path: logger.path,\n  requireEvents: [\"native.compile.start\", \"native.compile.end\"],\n});\n```\n\nThe package also ships `dist/site/` as the Buildchain-owned fact source for\n`buildchain.libkungfu.dev`.\n\nRepositories can also generate README status badges from Buildchain-owned facts\ninstead of hand-maintaining badge Markdown:\n\n```bash\nbuildchain badges bundle --check\nbuildchain badges bundle --write\nbuildchain badges readme --check\nbuildchain badges readme --write\n```\n\n## Project Governance\n\n- [`LICENSE-POLICY.md`](LICENSE-POLICY.md) explains the Apache-2.0 project\n  license, DCO-based contributions, and third-party notice boundary.\n- [`TRADEMARK.md`](TRADEMARK.md) explains official project marks and fork\n  identity boundaries.\n- [`ACCEPTABLE_USE.md`](ACCEPTABLE_USE.md) explains acceptable use of official\n  services and maintainer-operated infrastructure.\n- [`PROVIDER_COMPLIANCE.md`](PROVIDER_COMPLIANCE.md) explains the official\n  posture for GitHub, npm, cloud, credential, release evidence, and other\n  provider integrations.\n- [`SECURITY.md`](SECURITY.md) explains private vulnerability reporting.\n\nNative build consumers can import the diagnostics toolkit instead of copying\nrepository-local probes:\n\n```js\nimport {\n  collectBuildchainDiagnostics,\n  collectRunnerDiagnostics,\n  writeDiagnosticsArtifact,\n} from \"@kungfu-tech/buildchain/diagnostics\";\n\nwriteDiagnosticsArtifact(\".buildchain/artifacts/diagnostics.json\", {\n  contract: \"consumer-build-diagnostics\",\n  buildchain: collectBuildchainDiagnostics({ cwd: process.cwd() }),\n  runner: collectRunnerDiagnostics(),\n});\n```\n\n`buildchain lifecycle run` writes a small `diagnostics.json` next to the\nplatform manifest. It includes lifecycle-wide observability, runner/tool/cache\nsnapshots, Git state, and links to the larger manifest and artifact outputs.\n\nConsumers can report Buildchain-owned workflow failures directly to the\nBuildchain repository with a scoped issue-write token:\n\n```yaml\n- uses: kungfu-systems/buildchain/actions/report-buildchain-issue@v3\n  if: failure()\n  with:\n    token: ${{ steps.buildchain-issue-token.outputs.token }}\n    summary: \"Reusable build failed before artifact finalization\"\n    failure-code: reusable-build-failed\n    buildchain-ref: v3\n    diagnostics-path: .buildchain/artifacts/diagnostics.json\n```\n\nThe action deduplicates by fingerprint, comments on existing open reports, and\nis fail-soft by default so issue reporting does not hide the original failure.\nUse `report-kind: workflow-friction` when Buildchain workflows should report\ntheir own repeated release friction back to the Buildchain issue tracker.\n\n## Use Buildchain\n\nBootstrap a repository:\n\n```bash\nnpx @kungfu-tech/buildchain init --type package --package-manager pnpm\nnpx @kungfu-tech/buildchain validate --require-version-state\nnpx @kungfu-tech/buildchain release --dry-run --target-ref alpha/v3/v3.0\n```\n\nBootstrap and inspect a governed paper repository through one interface:\n\n```bash\nnpx @kungfu-tech/buildchain paper scaffold \\\n  --package @kungfu-tech/paper-example \\\n  --repository kungfu-systems/paper-example\npnpm add -D @kungfu-tech/buildchain@<exact-v3-version>\npnpm exec buildchain paper work start <topic>\npnpm exec buildchain paper work submit\npnpm exec buildchain paper preflight --offline\npnpm exec buildchain paper status\n```\n\nThe paper surface is dry-run first. Add `--write` only to create missing\nscaffold files. `work start` and `work submit` validate the canonical remote,\nexact development SHA, clean source, safe branch, and fast-forward boundary\nbefore changing local or GitHub state. External mutations such as npm\nbootstrap, Alpha PR creation, and release resumption require `--execute`. See\n[`docs/publication-artifacts.md`](docs/publication-artifacts.md) for the\nevidence-state model and operator flow.\n\nBuildchain supports package and non-package projects through\n`.buildchain/buildchain.toml`. Legacy root `buildchain.toml` files remain\nreadable, but new consumers should keep Buildchain-owned files under\n`.buildchain/`:\n\n```text\n.buildchain/buildchain.toml\n.buildchain/contract-lock.json\n.buildchain/kfd/kfd-3/surfaces.json\n.buildchain/release-passport/buildchain.release.json\n```\n\nLifecycle commands can call pnpm, npm, yarn, pip, Conan, CMake, Make, custom\nscripts, or any other command that can run in the repository checkout.\n\nThe KFD entrypoint is `buildchain kfd`. Buildchain provides concrete KFD-1\ncontract-world, KFD-2 trust-claim, and KFD-3 collaboration-surface workflows,\nplus fail-closed product-evidence gates for KFD-4, KFD-5, and KFD-7. These\ngates preserve product-owned qualification and support decisions; they do not\nturn a schema-valid record into certification or shipped support.\n\nBuildchain's action registry currently contains six active entries. Four are\ndirect consumer integration actions:\n\n- `actions/validate-config`\n- `actions/run-lifecycle`\n- `actions/promote-buildchain-ref`\n- `actions/report-buildchain-issue`\n\nTwo additional release-authority components are also registered and versioned:\n\n- `actions/github-artifact-attestation`\n- `actions/macos-credential-island`\n\n`dist/site/workflow-registry.json#actions` is the machine-readable inventory;\nthis split keeps the older four-action consumer list from being mistaken for\nthe complete current registry.\n\nThe active reusable workflow surfaces are:\n\n- `.github/workflows/.gate-profile.yml` for project-neutral Shifu Gate profile\n  planning, capability-aware runner dispatch, receipt validation, and one\n  stable aggregate check;\n- `.github/workflows/.auditable-demo.yml` for exact-artifact demo\n  qualification, transcript-bound renderer smoke, optional media rendering\n  from the exact passing Gate bundle, and opt-in content-addressed web-delivery\n  profiles with independently verified rendition roles;\n- `.github/workflows/.build.yml` for deterministic multi-platform build and\n  artifact contracts;\n- `.github/workflows/build.yml` for the single-config channel router that uses\n  `vN-alpha` during development/prerelease work and `vN` for stable releases;\n- `.github/workflows/release-candidate-promote.yml` for post-merge\n  promote-only publication from a PR-stage release candidate, without a second\n  heavy build;\n- `.github/workflows/.web-surface.yml` for preview, staging, production, and\n  cleanup plans for site/app repositories;\n- `.github/workflows/buildchain-ref-promotion.yml` for protected release\n  promotion and version-state transactions;\n- `.github/workflows/binary-distribution.yml` for Buildchain's own release\n  passport proof case.\n\nStable consumers should reference actions and workflows through floating major\nrefs after reviewing the exact release passport:\n\n```yaml\nuses: kungfu-systems/buildchain/actions/validate-config@v3\n```\n\n```yaml\nuses: kungfu-systems/buildchain/.github/workflows/build.yml@v3\n```\n\n```yaml\nuses: kungfu-systems/buildchain/.github/workflows/release-candidate-promote.yml@v3\n```\n\n## Release Model\n\nBuildchain treats a reviewed branch merge as release intent:\n\n| Merge path                              | Meaning                                                | Exact tag        | Floating refs                                        |\n| --------------------------------------- | ------------------------------------------------------ | ---------------- | ---------------------------------------------------- |\n| `dev/vX/vX.Y -> alpha/vX/vX.Y`          | publish the next testable alpha for a minor line       | `vX.Y.Z-alpha.N` | `vX.Y-alpha`, `alpha/vX/vX.Y`, `dev/vX/vX.Y`         |\n| `alpha/vX/vX.Y -> release/vX/vX.Y`      | publish production for that minor line                 | `vX.Y.Z`         | `vX.Y`, usually `vX`, `release/vX/vX.Y`              |\n| `release/vX/vX.Y -> publish-gate/major` | publish the next major from a reviewed production line | `v(X+1).0.0`     | `v(X+1)`, `v(X+1).0`, new dev/alpha/release branches |\n\nExact tags are immutable. Floating channel tags and branches are machine-updated\nby Buildchain and must remain writable by the release authority.\n\nAfter a production release, Buildchain prepares the next alpha source commit for\nthe same minor line. That keeps production consumers pinned to the production\npassport while development can continue on the next testable patch.\n\n`publish-gate/major` is not an active development trunk. It is a reviewed\npromotion gate used when maintainers decide that the next production release\nshould open a new major line.\n\n## Toolkit Observability\n\nBuildchain includes a logging toolkit for release and build steps. Inside\nJavaScript build code, prefer the package API:\n\n```js\nimport { createBuildchainLogger } from \"@kungfu-tech/buildchain/logging\";\n\nconst logger = createBuildchainLogger({ source: \"user\", component: \"conan\" });\nlogger.mark(\"conan.profile.ready\", { phase: \"configure\" });\nawait logger.span(\"conan.install\", { phase: \"dependencies\" }, runConanInstall);\n```\n\nIn workflows or shell scripts, use the equivalent CLI:\n\n```bash\nbuildchain mark --event native.configure --phase configure --component cmake\nbuildchain span --event native.build --phase build -- cmake --build build\nbuildchain log summary --json\nbuildchain verify observability-log .buildchain/logs/events.jsonl --min-events 4\n```\n\nEvery event records a timestamp. `span` records duration. The API form can be\nimported from repository scripts so heavy builds can mark phases from inside\ntheir own code.\n\n## Site Fact Source\n\n`@kungfu-tech/buildchain` publishes `dist/site/`:\n\n- `buildchain-site.json`\n- `site-manifest.json`\n- `page-registry.json`\n- `cli-registry.json`\n- `workflow-registry.json`\n- `release-model.json`\n- `artifact-schemas.json`\n- `product-mechanism.json`\n- `release-provenance.json`\n- `agent-index.json`\n\n`buildchain.libkungfu.dev` should render from these package-owned facts, then\nlayer presentation around them. The site should not hand-write Buildchain's\ncurrent release mechanics. `page-registry.json` is the complete markdown page\nsource for the public site: README homepage content, all packaged `docs/*.md`\nmanuals, action READMEs, the Node API package overview, and fixture guides.\n\n## Homepage Content Contract\n\nThis README is also the homepage text source for `buildchain.libkungfu.dev`.\nWhen a site repository consumes the `@kungfu-tech/buildchain` npm package, it\nshould use the generated `dist/site/buildchain-site.json` homepage fields\ninstead of parsing this README or maintaining separate homepage copy.\n\nThe first screen should be derived from:\n\n- Page identity: the top-level heading.\n- Lead: the opening paragraph that defines Buildchain Release Passport.\n- Trust signal: the start of `Install and Verify`, especially passport-first\n  binary verification.\n- Use signal: the start of `Use Buildchain`, especially the reusable workflow\n  and action surfaces.\n\nThe package-owned site bundle exposes ordered `homepage.sections`,\n`homepage.displayPlan`, `homepage.rendererContract`, and a complete\n`pages` collection mirrored from `page-registry.json`. A site renderer may adapt\nlayout, navigation, typography, examples, and visual assets, but it should not\nmaintain separate wording for Buildchain's release mechanics, workflow surface,\noperation manuals, Node API overview, fixture guides, or release-passport trust\nmodel. Renderer-contract text is machine/implementation metadata, not ordinary\nhomepage content.\n\n## Local Verification\n\n```bash\ncorepack enable pnpm\npnpm install --frozen-lockfile\npnpm run generate:site\npnpm run check\nnpm pack --dry-run --json --registry=https://registry.npmjs.org/\n```\n\n## Read Next\n\n- [Install and verify](docs/install.md)\n- [Documentation map](docs/MAP.md)\n- [Product mechanism](docs/product-mechanism.md)\n- [Release Passport and binary distribution](docs/release-passport.md)\n- [GitHub governance authority](docs/github-governance-authority.md)\n- [GitHub-native Linux artifact attestation](docs/github-artifact-attestation.md)\n- [Binary distribution details](docs/binary-distribution.md)\n- [Toolkit observability](docs/toolkit-observability.md)\n- [Site bundle contract](docs/site-bundle-contract.md)\n- [Lifecycle protocol](docs/lifecycle-protocol.md)\n- [Reusable build surface](docs/reusable-build-surface.md)\n- [Shifu Gate profile orchestration](docs/shifu-gate-profiles.md)\n- [Release candidate passport](docs/release-candidate.md)\n- [Consumer issue reporting](docs/consumer-issue-reporting.md)\n- [Publish transaction](docs/publish-transaction.md)\n- [Release governance](docs/release-governance.md)",
       "slug": "home"
     },
     {
@@ -573,64 +578,1112 @@
           "anchor": "node-api"
         },
         {
-          "level": 2,
-          "title": "Release Passport Integration",
-          "anchor": "release-passport-integration"
+          "level": 2,
+          "title": "Release Passport Integration",
+          "anchor": "release-passport-integration"
+        },
+        {
+          "level": 2,
+          "title": "Kungfu Legacy Projection",
+          "anchor": "kungfu-legacy-projection"
+        }
+      ],
+      "markdown": "# Build Facts\n\nBuild Facts are Buildchain's machine-readable record of what a repository\nbuilt. They sit between lifecycle logs and release passports:\n\n- lifecycle logs explain what ran and how long it took;\n- module build facts bind one module to its Git source digest, version source,\n  platform, lifecycle invocation, and output digests;\n- product build facts aggregate module facts and product artifacts;\n- release passports can carry build facts as first-class evidence.\n\nThe goal is to remove handwritten build metadata from consumer repositories.\nConsumers declare where their version and outputs live; Buildchain collects and\nverifies the facts.\n\n## Config\n\nDeclare build facts in `buildchain.toml`:\n\n```toml\nschema = 1\n\n[[facts.version_sources]]\nid = \"package\"\ntype = \"json\"\npath = \"package.json\"\nkey = \"version\"\n\n[[facts.modules]]\nid = \"native-core\"\nroot = \"src/core\"\nscope = \"core\"\nversion_source = \"package\"\nlifecycle = \"build\"\noutputs = [\"dist/core.node\"]\n\n[[facts.products]]\nid = \"kungfu\"\nmodule_facts = [\".buildchain/facts/native-core.json\"]\nartifacts = [\"dist/kungfu.zip\"]\n\n[[facts.legacy_projections]]\ntype = \"kungfu-buildinfo\"\nmodule = \"native-core\"\npath = \"framework/core/src/kungfu/yijinjing/kungfubuildinfo.json\"\n```\n\nSupported version sources:\n\n- `static`: an explicit `value`;\n- `json`: a JSON file plus dotted `key`;\n- `toml`: a TOML file plus dotted `key`;\n- `regex`: a text file plus regex `pattern`, using a named `version` group or\n  the first capture group;\n- `command`: an explicit command whose output is the version.\n\nPrefer file-based sources. Command sources are allowed for legacy projects but\nare marked as less reproducible because the command output is not a static\nsource file.\n\n## CLI\n\nCollect a module fact:\n\n```bash\nbuildchain facts module \\\n  --module native-core \\\n  --output .buildchain/facts/native-core.json\n```\n\nOverride declarative config from a workflow step when needed:\n\n```bash\nbuildchain facts module \\\n  --cwd \"$GITHUB_WORKSPACE\" \\\n  --module native-core \\\n  --module-root src/core \\\n  --version-source package \\\n  --output-path dist/core.node \\\n  --output .buildchain/facts/native-core.json \\\n  --json\n```\n\nWrite the Kungfu legacy `kungfubuildinfo.json` projection from the same module\nfact:\n\n```bash\nbuildchain facts module \\\n  --module native-core \\\n  --output .buildchain/facts/native-core.json \\\n  --legacy-kungfu-buildinfo framework/core/src/kungfu/yijinjing/kungfubuildinfo.json\n```\n\nAggregate product facts:\n\n```bash\nbuildchain facts aggregate \\\n  --product kungfu \\\n  --module-fact .buildchain/facts/native-core.json \\\n  --artifact dist/kungfu.zip \\\n  --output .buildchain/facts/kungfu.json\n```\n\nVerify a fact before publishing:\n\n```bash\nbuildchain facts verify --fact .buildchain/facts/kungfu.json\n```\n\nVerification fails closed when a declared output is missing, an output digest is\nstale, a module fact was collected from a different Git `HEAD`, or a source\ndigest no longer matches the tracked source files.\n\n## Node API\n\n```js\nimport {\n  aggregateBuildFacts,\n  collectModuleBuildFacts,\n  verifyBuildFacts,\n  writeBuildFacts,\n  writeKungfuBuildInfoProjection,\n} from \"@kungfu-tech/buildchain/build-facts\";\n\nconst moduleFact = collectModuleBuildFacts({ moduleId: \"native-core\" });\nwriteBuildFacts({ fact: moduleFact, output: \".buildchain/facts/native-core.json\" });\n\nconst productFact = aggregateBuildFacts({ productId: \"kungfu\" });\nconst verification = verifyBuildFacts({ fact: productFact });\n```\n\nThe root package export also re-exports these APIs from\n`@kungfu-tech/buildchain`.\n\n## Release Passport Integration\n\nPass build facts into a release passport:\n\n```bash\nbuildchain collect github-release \\\n  --tag \"$TAG\" \\\n  --assets-dir dist \\\n  --build-facts-json .buildchain/facts/native-core.json \\\n  --build-facts-json .buildchain/facts/kungfu.json \\\n  --output-dir .buildchain/release-passport\n```\n\nThe passport records the full build facts in `buildFacts[]` and a compact\nevidence index in `evidence.buildFacts[]`. Agents can start from\n`buildchain.release.json`, discover the module/product facts, and verify that\nthe released artifacts still match the declared source, version, and output\nfacts.\n\n## Kungfu Legacy Projection\n\nKungfu historically consumes `kungfubuildinfo.json`. Buildchain now treats that\nfile as a projection of module build facts, not as an independent source of\ntruth. The projection preserves legacy fields such as `version`,\n`python_version`, `git_branch`, `git_revision`, and `git_pristine`, while adding\na `buildchain` section that points back to the module fact digest, version\nsource digest, and source digest.\n\nRepositories that no longer need the legacy file should consume the module and\nproduct facts directly."
+    },
+    {
+      "id": "manual:cli",
+      "title": "Buildchain CLI, npm Package, and Toolkit API",
+      "route": "/docs/cli",
+      "category": "manual",
+      "capabilityGroup": "api-cli-reference",
+      "audience": [
+        "agent",
+        "developer"
+      ],
+      "maturity": "stable",
+      "sourcePath": "docs/cli.md",
+      "digest": "sha256:0c8721e9c2f449e96aa8adefe99b016b193ab2876c02f3c61186794ac1873e90",
+      "headings": [
+        {
+          "level": 1,
+          "title": "Buildchain CLI, npm Package, and Toolkit API",
+          "anchor": "buildchain-cli-npm-package-and-toolkit-api"
+        },
+        {
+          "level": 2,
+          "title": "Install and Run",
+          "anchor": "install-and-run"
+        },
+        {
+          "level": 2,
+          "title": "Node API and Package Exports",
+          "anchor": "node-api-and-package-exports"
+        },
+        {
+          "level": 2,
+          "title": "Commands",
+          "anchor": "commands"
+        },
+        {
+          "level": 3,
+          "title": "Governed paper lifecycle",
+          "anchor": "governed-paper-lifecycle"
+        },
+        {
+          "level": 2,
+          "title": "npm Publish Gate",
+          "anchor": "npm-publish-gate"
+        }
+      ],
+      "markdown": "---\nstatus: active\nperiod: ongoing\ntheme: buildchain-cli\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: unreviewed\nlast_reviewed: 2026-07-31\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-07-31\n  invisible_context: not asserted\n---\n\n# Buildchain CLI, npm Package, and Toolkit API\n\nBuildchain is published as the public npm package\n`@kungfu-tech/buildchain`. The package contains the `buildchain` command,\nthe importable ESM toolkit APIs, and the local scripts needed to initialize and\nvalidate repositories before they use the reusable GitHub workflow surface.\n\nThe npm package is not the release authority. Release authority still comes\nfrom the protected Buildchain branch and tag state machine. npm publishing is a\nside effect of an exact release tag that has already been produced by that\nstate machine.\n\n## Install and Run\n\nUse the published package directly:\n\n```bash\nnpx @kungfu-tech/buildchain --help\nnpx @kungfu-tech/buildchain init --type package\nnpx @kungfu-tech/buildchain validate --require-version-state\n```\n\nOr install it in a repository:\n\n```bash\npnpm add -D @kungfu-tech/buildchain\npnpm exec buildchain validate\n```\n\nConsumers should pin the exact Buildchain version that was validated in their\nrepository. When dogfooding a fresh Buildchain release immediately after it is\npublished, pnpm may block the install through a minimum release-age policy. In\nthat case, add a temporary package/version-specific `minimumReleaseAgeExclude`\nentry, such as `@kungfu-tech/buildchain@3.0.0`, and remove it once the package\nhas aged past the normal policy window. Do not replace that with a broad\nregistry or scope-wide exclude.\n\nUse the package API directly inside JavaScript build scripts:\n\n```js\nimport { createBuildchainLogger } from \"@kungfu-tech/buildchain/logging\";\n\nconst logger = createBuildchainLogger({ source: \"user\", component: \"build\" });\nawait logger.span(\"build.native\", { phase: \"build\" }, async () => {\n  await buildNativeArtifacts();\n});\n```\n\nThe standalone binary and CLI are for workflow steps, shell scripts, and\nnon-JavaScript environments. JavaScript code that already depends on\n`@kungfu-tech/buildchain` should import the toolkit API instead of spawning\n`npx buildchain` or a downloaded binary.\n\n## Node API and Package Exports\n\nBuildchain's public Node API is the package `exports` surface, not arbitrary\ninternal file paths. The npm package also ships\n`dist/site/node-api-registry.json` and exports it as\n`@kungfu-tech/buildchain/site/node-api-registry.json` so agents can enumerate\nthe supported imports from the installed package.\nFor navigation, start with `dist/site/capability-registry.json`: it groups\nmanuals, CLI commands, workflow/action inputs, Node exports, site pages, and KFD\nclaim facts by product capability before an agent chooses a concrete command or\nmanual.\n\nCurrent public import families include:\n\n```js\nimport * as buildchain from \"@kungfu-tech/buildchain\";\nimport { createBuildchainLogger } from \"@kungfu-tech/buildchain/logging\";\nimport { collectModuleBuildFacts } from \"@kungfu-tech/buildchain/build-facts\";\nimport { checkHomebrewTap } from \"@kungfu-tech/buildchain/homebrew\";\nimport { verifyKfd1ReleaseGate } from \"@kungfu-tech/buildchain/kfd-gate\";\nimport { collectBadgeBundleFacts } from \"@kungfu-tech/buildchain/badges\";\nimport { collectReadmeBadgeFacts } from \"@kungfu-tech/buildchain/readme-badges\";\nimport { verifyReleasePassport } from \"@kungfu-tech/buildchain/release-passport\";\nimport { verifyGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain/github-artifact-attestation\";\nimport { createReleasePropagationPlan } from \"@kungfu-tech/buildchain/release-propagation\";\nimport { verifyPublicationReproducibility } from \"@kungfu-tech/buildchain/publication-reproducibility\";\nimport { collectPaperStatus } from \"@kungfu-tech/buildchain/paper\";\nimport { planReleaseLineBootstrap } from \"@kungfu-tech/buildchain/release-line-bootstrap\";\nimport { collectPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain/public-surface-audit\";\nimport { createBuildchainLayoutDiscovery } from \"@kungfu-tech/buildchain/buildchain-layout\";\nimport { createPortableDevCachePlan } from \"@kungfu-tech/buildchain/portable-dev-cache\";\nimport contractWorld from \"@kungfu-tech/buildchain/site/buildchain-contract.json\" with { type: \"json\" };\nimport capabilityRegistry from \"@kungfu-tech/buildchain/site/capability-registry.json\" with { type: \"json\" };\nimport manualRegistry from \"@kungfu-tech/buildchain/site/manual-registry.json\" with { type: \"json\" };\nimport nodeApiRegistry from \"@kungfu-tech/buildchain/site/node-api-registry.json\" with { type: \"json\" };\nimport publicSurfaceAudit from \"@kungfu-tech/buildchain/site/public-surface-audit.json\" with { type: \"json\" };\n```\n\nUse `dist/site/manual-registry.json` to find the packaged operating manuals and\ntheir SHA-256 digests. Use `dist/site/buildchain-contract.json` to verify the\nfloating-ref contract world for a runtime such as `@v3`.\n\nFor exhaustive lookup, use the generated references rather than scanning this\nconceptual guide:\n\n- [`cli-reference.md`](cli-reference.md) is projected from the governed usage\n  model and runtime command registry. `buildchain <path> --help` is intercepted\n  before dispatch at every listed path, exits zero, and has no command side\n  effects.\n- [`node-api-reference.md`](node-api-reference.md) is projected from\n  `package.json#exports` and exact ESM export declarations. The packaged\n  `dist/site/node-api-registry.json` carries the same per-symbol signatures,\n  parameters, conservative return/error boundaries, side-effect classification,\n  maturity, example import, and source location.\n\n## Commands\n\n`buildchain create github-artifact-attestation-policy` seals the expected\nartifact, caller source, original Linux build, immutable Buildchain signer, and\nGitHub permission set before the Release Passport is collected.\n`buildchain verify github-artifact-attestation` invokes `gh attestation verify`\nwith the exact signer/source policy and then verifies the retained bundle,\npredicate, platform manifest, Passport, and Buildchain evidence locally. See\n[`github-artifact-attestation.md`](github-artifact-attestation.md).\n\n### Governed paper lifecycle\n\n`buildchain paper` is the unified operator surface for one paper repository or\na discovered fleet. Every subcommand returns a versioned JSON contract with\n`--json`:\n\n```bash\nbuildchain paper scaffold --package @kungfu-tech/paper-example \\\n  --repository kungfu-systems/paper-example\nbuildchain paper migrate --json\nbuildchain paper agent verify --json\nbuildchain paper work start golden-path --json\nbuildchain paper work submit --json\nbuildchain paper fleet audit --root ../papers --json\nbuildchain paper fleet update --root ../paper-worktrees --json\nbuildchain paper preflight --offline --json\nbuildchain paper bootstrap npm --json\nbuildchain paper build --json\nbuildchain paper alpha --json\nbuildchain paper status --json\nbuildchain paper resume --json\n```\n\nThe safety and authority boundary is explicit:\n\n- `scaffold` plans a 17-file, no-overwrite repository shape by default; add\n  `--write` to create only missing files.\n- `migrate` plans the Buildchain-owned authority, workflow, contract lock,\n  version pin, package, agent-entry policy, managed `AGENTS.md` section, and\n  required-check changes needed by an existing paper repository. It pins an\n  exact v3 dependency and adds pnpm-backed paper scripts.\n  Add `--write` only after reviewing exact old and new digests; paper content\n  and publication configuration are never rewritten. Refresh\n  `pnpm-lock.yaml` with `pnpm install --lockfile-only` after a write.\n- `agent verify` is the mandatory resume check on an existing work branch. It\n  verifies the digest-bound `.buildchain/paper/agent-entry.json`, the single\n  managed `AGENTS.md` section, exact package scripts and v3 dependency, runtime\n  source SHA, development target, and current branch lineage. `--ci` derives\n  the pull-request source and target from GitHub context and fails closed on a\n  non-work source branch or a target other than the configured development\n  line.\n- `work start` derives the protected development branch from the configured\n  publication semver line and creates a safe local work branch only when the\n  worktree is clean, the sole `origin` is the canonical `kungfu-systems`\n  repository, and local HEAD equals the exact remotely observed development\n  SHA. It never fetches or merges silently.\n- `work submit` accepts only an allowed non-protected work branch that contains\n  the exact remote development commit. It rejects divergent remote work,\n  wrong-base pull requests, dirty trees, forks, and ambiguous remotes; execution\n  uses a normal non-force push and opens or reuses a PR to the derived\n  development branch.\n- `fleet audit` discovers `paper-*` repositories from a root and emits one\n  deterministic audit root over exact runtime, dependency, lockfile, workflow,\n  authority, and repository observations. `fleet update` reuses the migration\n  contract for every discovered repository, remains dry-run by default, and\n  refuses protected or non-work branches.\n- The scaffolded `.buildchain/paper/provisioning-authority.json` binds both\n  build/release caller workflow byte digests, the required verify caller, the\n  agent-entry policy and instructions, their exact reusable-workflow SHA, the\n  runtime SHA, contract-lock bytes, npm registry and trusted-publisher\n  coordinates, and the repository Actions/generated-write policy under one\n  digest. A floating Buildchain ref cannot change release policy after that\n  authority is accepted.\n- The reusable `check.yml` detects publication-artifact repositories and runs\n  `paper preflight --offline --ci` inside the existing required check context.\n  Skipping the local CLI therefore cannot admit a missing entry contract,\n  drifted Buildchain-owned surface, unsafe source branch, or wrong PR target.\n- `preflight` separates local readiness from readiness for external mutation.\n  `--offline` skips live GitHub and npm observations without treating them as\n  local failures. Live readiness requires default workflow permissions `read`,\n  Actions pull-request approval disabled, and GitHub App or equivalent narrow\n  generated-write credential metadata.\n- `bootstrap npm` always performs npm pack and publish dry-runs first. A real\n  public bootstrap requires both `--execute` and\n  `--confirm-public-package <exact-name>`, uses only the official npm registry,\n  fixes the bootstrap version at `0.0.0-bootstrap.0`, and returns only npm URLs\n  observed from command output. Success requires public package readback and\n  the exact repository/workflow/environment trusted-publisher binding. For\n  GitHub, the npm coordinate is the workflow filename (`paper-release.yml`),\n  not its `.github/workflows/` repository path.\n- `build` plans the two-clean-build reproducibility proof. Add `--execute` to\n  create and verify the sealed publication bundle.\n- `alpha` plans or opens the protected Alpha pull request; it never merges,\n  publishes, or advances a floating ref.\n- `status` reports only evidence found in the repository or external\n  observations. It never infers a later lifecycle state from an earlier one.\n- `resume` plans or dispatches the repository's thin release workflow; the\n  protected workflow remains the release authority.\n\nThe ordered evidence states are `scaffolded`, `governed`, `admitted`,\n`bootstrapped`, `trust-bound`, `content-ready`, `artifact-sealed`,\n`package-published`, `alpha-complete`, `staging-visible`, and\n`production-visible`. A state can be `satisfied`, `not-reached`, `blocked`, or\n`unknown`; consumers must not collapse those distinctions.\n\nThe corresponding Node surface is\n`@kungfu-tech/buildchain/paper`. Planning and status functions are read-only;\n`writePaperScaffold()`, `writePaperMigration()`, and\n`writePaperFleetUpdate()` are the bounded local writers. Work plans expose\nseparate rechecking executors for local branch creation and normal push, and\n`executePaperNpmBootstrap()` preserves the same confirmation boundary used by\nthe CLI.\n\n`buildchain layout` is the stable machine question for repository layout. Tools\nsuch as Shifu should call it instead of copying `.buildchain/` path constants:\n\n```bash\nbuildchain layout --cwd /path/to/repository --json\n```\n\nThe result identifies the Buildchain version pin, repository root and config,\nthe canonical and currently resolved KFD-3 registry paths, and the KFD field\nused to declare Shifu jurisdiction. A repository is in Shifu's distribution\njurisdiction only when a KFD-3 surface explicitly declares\n`distribution.registrar=\"shifu\"`; the presence of Buildchain configuration is\nnot sufficient. The same contract is available through\n`createBuildchainLayoutDiscovery()` from\n`@kungfu-tech/buildchain/buildchain-layout`.\n\n`buildchain init` writes a starter `.buildchain/buildchain.toml` and a reusable workflow\ncaller at `.github/workflows/build.yml`.\n\n`buildchain portable-cache plan` turns a consumer-owned, secret-free manifest\ninto GitHub Actions cache inputs without letting each consumer invent key or\nrestore-prefix semantics. The exact key binds source SHA and the consumer plan\ndigest; the compatible restore prefix still requires the same provider schema,\nlayer, roots, runner image, platform/architecture, toolchain, dependency lock,\nand build profile.\n\n```bash\nbuildchain portable-cache plan \\\n  --manifest .buildchain/portable-cache.json \\\n  --output .buildchain/portable-cache-plan.json \\\n  --github-output \"$GITHUB_OUTPUT\"\n```\n\nThe emitted `cache-key`, `restore-keys`, and `cache-paths` values are intended\nfor pinned `actions/cache/restore` and `actions/cache/save` actions. After\nrestore and a consumer validation probe, seal the provider result:\n\n```bash\nbuildchain portable-cache receipt \\\n  --plan .buildchain/portable-cache-plan.json \\\n  --matched-key \"$CACHE_MATCHED_KEY\" \\\n  --cache-hit \"$CACHE_HIT\" \\\n  --validation-status pass \\\n  --cold-fallback-status passed \\\n  --output .buildchain/portable-cache-receipt.json\n```\n\nThe receipt distinguishes `exact`, `compatible`, `miss`, and `corrupt`.\nUnknown or contradictory provider evidence fails closed. A miss or corruption\nrequires the consumer's audited cold path; a cache never substitutes for the\nconsumer's current build or tests. Roots must be workspace-relative or under\n`~/`, and manifests cannot carry credentials, absolute host paths, or escape\nsegments. `cold-fallback-status=passed` qualifies a miss only after the current\nsource has completed its normal build and test path.\n\nSupported presets:\n\n- `--type package` for Node package repositories with pnpm, npm, or yarn.\n- `--type native` for CMake-style native projects.\n- `--type web-surface` for preview/staging/production site or app deployments.\n- `--type infra-contract` for provider-agnostic infrastructure contract\n  validation, observation, contract publication, and downstream propagation\n  planning without default mutation. Provider adapters expose built-in command\n  plans by default, and only configured `[infra.commands]` hooks can execute.\n- `--type publication-artifact` for papers, reports, specifications, and other\n  publication repositories that produce PDFs, metadata, source bundles, and\n  site-consumable manifests without becoming web-surface repositories. The\n  scaffold uses Buildchain's pinned\n  `ghcr.io/kungfu-systems/build-images/latex-pdf-builder:v1.2.0` toolchain for\n  LaTeX PDF builds.\n- `--type distribution-index` for Homebrew taps and other index repositories\n  whose files are projections of upstream release passport evidence.\n- `--type anchored-package` for packages whose version is anchored to an\n  explicit upstream release manifest.\n\nThe native preset includes an opt-in `[diagnostics.native]` profile with common\ntool/cache/artifact probes. Consumers can keep it enabled, adjust the tool and\ndirectory lists, or disable it if a repository does not need native diagnostics.\n\n`buildchain validate` parses `.buildchain/buildchain.toml`, checks configured version-state\nfiles, and can require named lifecycle stages:\n\n```bash\nbuildchain validate \\\n  --require-version-state \\\n  --require-lifecycle-stages install,build,verify\n```\n\n`buildchain lifecycle run <stage>` executes a lifecycle stage and writes the\nsame deterministic artifact manifest contract used by the reusable workflow:\n\n```bash\nbuildchain lifecycle run build \\\n  --artifact-path dist \\\n  --artifact-name \"{repo}-{version}-{platform}\"\n```\n\n`buildchain dev merge-queue` plans a GitHub merge-queue policy for a protected\nBuildchain dev channel. Declare every workflow that emits a required check; the\ncommand fails closed unless each file handles both `pull_request` and\n`merge_group` without reading `github.event.pull_request` directly:\n\n```bash\nbuildchain dev merge-queue \\\n  --repository kungfu-systems/example \\\n  --branch dev/v4/v4.0 \\\n  --workflow .github/workflows/source-acceptance.yml \\\n  --workflow .github/workflows/affected-native-pr.yml\n```\n\nThe default output is a read-only plan. Add `--apply` only after reviewing it.\nApply creates the exact-branch merge-queue ruleset before changing classic\nrequired status checks from strict to loose, preserves the required check\nidentities, and is safe to repeat. `gh` must be authenticated with repository\nAdministration write permission for apply mode.\n\nRepositories can make that policy declarative in `buildchain.toml`:\n\n```toml\n[governance.dev.merge_queue]\nmode = \"enabled\" # enabled, inherit, or disabled\nrequired_workflows = [\".github/workflows/verify.yml\"]\ncheck_response_timeout_minutes = 120\nmax_entries_to_build = 1\nbypass_users = [\"release-owner\"]\n```\n\nUse `buildchain dev merge-queue --from-config` to resolve and reconcile the\ndeclaration. `enabled` requires an exact queue on the target dev branch;\n`disabled` suppresses automatic queue creation; `inherit` copies the active\ndefault dev branch's queue parameters and bypass actors. When the table is\nabsent, release-line bootstrap uses the backward-compatible `inherit` mode.\nEvery inherited or explicitly enabled queue still validates each declared\nrequired workflow before any mutation. For a legacy repository with no table,\nan already-active exact queue on the current default dev branch is accepted as\nthe inheritance evidence; new declarations should list the workflows so future\nchanges are revalidated from source.\nThe `Dev Merge Queue Governance` workflow runs this reconciliation after\ngovernance-relevant changes land on a dev branch; its manual dispatch remains\ndry-run by default.\n\n`buildchain release line open` plans or writes the first version-state commit\nfor a new semver minor line. It does not publish anything. The dry-run mode is\nthe default and returns the dev/alpha/release refs, protection contract, default\nbranch action, and initial version before any GitHub mutation happens:\n\n```bash\nbuildchain release line open \\\n  --major 3 \\\n  --minor 1 \\\n  --source-ref release/v3/v3.0 \\\n  --json\n```\n\nThe write mode only updates local version-state files. The repository workflow\n`Release Line Bootstrap` wraps this command and, when `apply=true`, commits the\ninitial version state, creates `dev/vX/vX.Y`, `alpha/vX/vX.Y`, and\n`release/vX/vX.Y`, applies one-review branch protection, reconciles declared or\ninherited merge-queue governance, switches the default branch only after that\nreconciliation succeeds, and opens the first dev-to-alpha channel PR:\n\n```bash\nbuildchain release line open \\\n  --major 3 \\\n  --minor 1 \\\n  --source-ref release/v3/v3.0 \\\n  --write \\\n  --json\n```\n\n`buildchain` also publishes a public surface reverse audit as\n`dist/site/public-surface-audit.json`. The audit enumerates CLI commands from\n`bin/buildchain.mjs`, workflow inputs, action inputs, site pages, and docs\ncommand references, then compares them with the generated registries. Buildchain\nself-checks fail closed when an enumerable public surface is missing from the\nregistry:\n\n```js\nimport {\n  collectPublicSurfaceReverseAudit,\n  assertPublicSurfaceReverseAudit,\n} from \"@kungfu-tech/buildchain/public-surface-audit\";\n\nassertPublicSurfaceReverseAudit(\n  collectPublicSurfaceReverseAudit({ root: process.cwd() }),\n);\n```\n\n`buildchain kfd` is the product-facing KFD namespace. Schema commands expose the\nmachine-readable KFD standards shipped by `@kungfu-tech/kfd`, while versioned\nsubcommands host concrete product workflows. KFD-1, KFD-2, and KFD-3 are\nfirst-class Buildchain surfaces. KFD-4, KFD-5, and KFD-7 expose fail-closed\nproduct-evidence gate and verification protocols; passing those protocols does\nnot itself qualify, certify, activate, or ship support.\n\n`status` reports implemented support and the active repo-owned file layout.\n`migrate-layout` moves legacy root files into `.buildchain/`:\n\n```bash\nbuildchain kfd status --json\nbuildchain kfd migrate-layout --write\nbuildchain kfd 4 gate --input-json kfd-4-gate-input.json --output kfd-4-gate.json\nbuildchain kfd 5 gate --input-json kfd-5-gate-input.json --output kfd-5-gate.json\nbuildchain kfd 7 gate --input-json kfd-7-gate-input.json --output kfd-7-gate.json\nbuildchain kfd support project --matrix-json support-matrix.json \\\n  --gate-json kfd-4-gate.json --gate-json kfd-5-gate.json \\\n  --gate-json kfd-7-gate.json --output kfd-support.json\n```\n\nKFD-1 commands generate and validate contract-world release evidence:\n\n```bash\nbuildchain kfd 1 schema --json\nbuildchain kfd 1 witness --json\nbuildchain kfd 1 gate --witness-json kfd-1-witness.json --json\nbuildchain kfd 1 verify --gate-json kfd-1-gate.json --json\n```\n\nKFD-2 commands validate trust taxonomy entries and generate Buildchain's public\nclaim evidence. Product repositories use the `product-claims` subcommand to\nvalidate and render their own declared KFD-2 release claims under the canonical\nBuildchain KFD layout:\n\n```bash\nbuildchain kfd 2 schema --json\nbuildchain kfd 2 taxonomy --entry-json residual-risk.json --kind residualRisk --json\nbuildchain kfd 2 claims --json\nbuildchain kfd 2 product-claims check --json\nbuildchain kfd 2 product-claims write --json\nbuildchain kfd 2 product-claims render --json\n```\n\nThe default source is `.buildchain/kfd/kfd-2/registry.json`; outputs are\n`.buildchain/kfd/kfd-2/release-claims.json`, per-claim release-passport inputs\nunder `claims/`, and `buildchain-claim-args.txt`. Use `--registry` or\n`--output-dir` only for an explicit product packaging projection. `check` never\nwrites and exits non-zero when outputs drift.\n\nKFD-3 commands are separate from Buildchain's self reverse audit: products can\ndetect standard public surfaces, register the accepted boundary, audit the\ncurrent source or artifact tree, generate a release-passport-compatible witness,\nand expose a capability map for agents:\n\n```bash\nbuildchain kfd schema list --json\nbuildchain kfd schema show kfd-3 --json\nbuildchain kfd 3 detect --kind node-api --kind cli --json\nbuildchain kfd 3 register node-api --product Buildchain\nbuildchain kfd 3 audit --json\nbuildchain kfd 3 witness --kind prebuild --output .buildchain/kfd/kfd-3/collaboration-interface.prebuild.json\nbuildchain kfd 3 query buildchain --json\nbuildchain kfd 4 schema --json\n```\n\nThe public Node API is exported from `@kungfu-tech/buildchain/kfd`. See\n[`kfd-support.md`](kfd-support.md) for the detected / declared / enforced model\nand the agent query flow.\n\nLifecycle runs also write a Buildchain observability JSONL log at\n`.buildchain/logs/events.jsonl` by default. Framework events use\n`source=buildchain`; consumer lifecycle commands use `source=user`. This lets a\nmaintainer tell apart time spent inside Buildchain's artifact/manifest\nframework from time spent in the repository's own build, test, packaging, or\npublish commands. The artifact manifest and summary embed the observability\nsummary for that lifecycle run id, so uploaded artifacts preserve the timing\nfacts without mixing in older JSONL events.\n\n`buildchain log`, `buildchain mark`, and `buildchain span` expose the same event\nprotocol to repository scripts:\n\n```bash\nbuildchain mark --event configure.ready --phase configure --attribute target=release\nbuildchain span --event native.build --phase build -- cmake --build build\nbuildchain log warn --event cache.miss --component conan --attribute token=hidden\nbuildchain log summary --json\nbuildchain verify observability-log .buildchain/logs/events.jsonl --min-events 4 --require-phase build\nbuildchain diagnostics summary .buildchain/artifacts/*/diagnostics.json --json\nbuildchain sample process-tree --label native-build --interval-ms 15000 -- make -j20\n```\n\nDuring `buildchain lifecycle run`, child processes receive\n`BUILDCHAIN_LOG_PATH` and `BUILDCHAIN_LOG_RUN_ID`. A shell, Python, CMake, Conan,\nor JavaScript helper can call `buildchain mark` or `buildchain span` mid-build\nand have those events grouped into the same lifecycle summary.\n`buildchain verify observability-log` is a release gate: it fails when the log\nis missing, has too few events, contains error events, or does not include\nrequired phases, components, or event names.\n\nThe JSON summary also includes an additive `controlPlane` block. It counts\nworkflow-friction incident outcomes and production release-intent outcomes,\nincluding incident reuse rate, release-intent suppression rate, and suppression\nreasons. Buildchain writes those outcome events locally; it does not send\ntelemetry outside the runner.\n\nThe event protocol is JSONL and is also available from the SDK:\n\n```js\nimport { createBuildchainLogger } from \"@kungfu-tech/buildchain/logging\";\n\nconst logger = createBuildchainLogger({\n  source: \"user\",\n  component: \"native-build\",\n});\nlogger.mark(\"configure.ready\", { phase: \"configure\" });\n```\n\nSecret-looking attribute keys such as `token`, `password`, `secret`,\n`authorization`, `cookie`, and `private-key` are redacted before they are written.\nFull command strings are not recorded by `span`; scripts should provide stable\nevent names and safe attributes instead.\n\n`buildchain diagnostics summary` reads one or more small diagnostics artifacts\nand emits the same cross-platform summary as the diagnostics SDK:\n\n```bash\nbuildchain diagnostics summary \\\n  .buildchain/artifacts/linux-x64/diagnostics.json \\\n  .buildchain/artifacts/macos-arm64/diagnostics.json \\\n  --output .buildchain/artifacts/diagnostics-summary.json \\\n  --json\n```\n\nThe JSON summary keeps per-platform lifecycle stage tables, adds lifecycle\ntotal durations, carries top slow spans, aggregates warning/error counts, and\nsorts the slowest platforms. Each platform row carries compact runner facts,\nchecked tool versions/missing tools, package manager/cache directory details,\ncompiler-cache availability, and a compact process sampler summary: requested\nparallelism, observed max active processes, the ratio between them, sample\ncount, process categories, and the top sampled command basenames. This lets\nmaintainers inspect matrix timing, runner, tool, cache, and concurrency context\nwithout downloading large platform binaries or process sidecars first.\nWhen a sibling `diagnostics-manifest.json` is available, the summary also records\nits file list and verifies the listed `diagnostics.json` byte count and sha256.\nMissing, unreadable, or mismatched sidecar manifests are reported through\n`diagnosticsManifestWarningCount` and the per-platform `diagnosticsManifest`\nfield without failing the timing rollup.\nThe summary also compares each `diagnostics.json` contract to\n`BUILDCHAIN_DIAGNOSTICS_CONTRACT`; mismatches are reported through\n`diagnosticsContractWarningCount` and the per-platform `diagnosticsContract`\nfield so reviewers can separate diagnostics schema drift from lifecycle\nwarnings or build failures.\n\nWithout `--json`, the command prints a compact lifecycle timing table with\ninstall/build/verify/publish, artifact scan/upload, total, warning, and error\ncolumns for each platform, plus `jobs` and `active` columns for requested and\nobserved process concurrency when sampler data is present.\n\n`buildchain facts` collects and verifies source/version/output facts for\nmodules and products:\n\n```bash\nbuildchain facts module \\\n  --module native-core \\\n  --output .buildchain/facts/native-core.json \\\n  --legacy-kungfu-buildinfo framework/core/src/kungfu/yijinjing/kungfubuildinfo.json\n\nbuildchain facts aggregate \\\n  --product kungfu \\\n  --module-fact .buildchain/facts/native-core.json \\\n  --artifact dist/kungfu.zip \\\n  --output .buildchain/facts/kungfu.json\n\nbuildchain facts verify --fact .buildchain/facts/kungfu.json\n```\n\nThe same implementation is available from\n`@kungfu-tech/buildchain/build-facts`. Release passports can include these\nfacts with repeated `--build-facts-json` arguments to\n`buildchain collect github-release`. See\n[`build-facts.md`](build-facts.md) for the config schema and Node API.\n\n`buildchain sample process-tree` wraps a long-running command and periodically\nwrites process-tree snapshots:\n\n```bash\nbuildchain sample process-tree \\\n  --label native-build \\\n  --interval-ms 15000 \\\n  --output .buildchain/diagnostics/process-samples.jsonl \\\n  --summary-output .buildchain/diagnostics/process-summary.json \\\n  -- \\\n  make -j20\n```\n\nThe command returns the wrapped command's exit status. The JSONL file contains\nsmall timestamped samples; the summary JSON records requested parallelism,\nobserved concurrency, sampled CPU, command categories, and top command\nbasenames. Use it when a native build requests high parallelism but appears to\nspend long stretches in low-concurrency compile, archive, link, or cache steps.\n\n`buildchain doctor` checks repository readiness before remote side effects:\n\n```bash\nbuildchain doctor --json\n```\n\nIt validates `.buildchain/buildchain.toml`, package-manager detection, Git repository state,\nand the reusable workflow caller. For `version.strategy = \"anchored\"` with\n`version.next = \"manual\"`, it also embeds the anchored package release contract\ncheck: anchor manifest readability, configured version files, trusted\npublishing, package publish order, and required lifecycle stages. Add\n`--require-publish-source-lock` inside a publish job when the doctor report\nshould also fail unless the job is running from a resolved `publish-gate/*`\nsource lock.\n\nAnchored/manual package publish jobs can run the narrower source-lock gate\ndirectly:\n\n```bash\nbuildchain publish-source validate-anchored-release --json\n```\n\nThe command requires `BUILDCHAIN_PUBLISH_SOURCE_REF`,\n`BUILDCHAIN_PUBLISH_SOURCE_SHA`, and `BUILDCHAIN_PUBLISH_SOURCE_LOCKED` from the\nreusable build workflow outputs. It fails closed for direct `alpha/*` or\n`release/*` channel-branch publication, and checks the publish-gate consumer\nversion against configured version files and the anchor manifest. The JSON\nresult is shaped for future `buildchain.libkungfu.dev` fact ingestion.\n\n`buildchain release`, `buildchain web-surface`, `buildchain infra-contract`,\n`buildchain publication-artifact`, `buildchain publish-source`,\n`buildchain badges`, `buildchain homebrew`, and `buildchain build-contract`\nroute to the same implementation used by\nBuildchain's package APIs or GitHub Actions workflows. This keeps local\ninspection and CI behavior on the same implementation path.\n\nGenerate publication artifact metadata after building a paper or report:\n\n```bash\nbuildchain publication-artifact manifest \\\n  --source-sha \"$(git rev-parse HEAD)\" \\\n  --json\n```\n\nRun the fail-closed clean-room gate before Alpha or release admission:\n\n```bash\nbuildchain publication-artifact reproducibility \\\n  --source-sha \"$(git rev-parse HEAD)\" \\\n  --promote \\\n  --json\n```\n\nThe command checks two independent clones of the exact commit, isolates caches,\nderives `SOURCE_DATE_EPOCH` from Git, and compares every declared artifact,\nsource bundle, publication evidence file, npm package file, and actual npm\ntarball. It writes\n`.buildchain/publication/reproducibility-receipt.json`. Only a byte-identical\nbuild using the digest-pinned `latex-docker` toolchain is qualifying.\n`--allow-unpinned-toolchain` exists for local diagnostics and never changes the\nreceipt's `qualifying` field.\n\nGenerate the Buildchain-owned npm paper package contents from declared\npublication facts:\n\n```bash\nbuildchain publication-artifact npm-package --json\n```\n\nThis command reads `project.type = \"publication-artifact\"`,\n`publication.version`, and `[publish] kind = \"npm-paper-package\"` plus\n`publish.package`; it writes `.buildchain/publication/npm-package` by default.\nThe `paper-release.yml@v3` reusable workflow uses the same command before\nrunning the standard npm publish transaction.\n\nThe command writes `.buildchain/publication/publication-artifact.json`,\n`.buildchain/publication/publication-artifact-passport.json`, a source bundle,\nand, when `[publication.archive]` is configured,\n`.buildchain/publication/publication-registry.json` by default. See\n[`publication-artifacts.md`](publication-artifacts.md) for the repository\ncontract, pinned LaTeX builder, and reusable workflow.\n\nGenerate, check, or update the managed README badge block:\n\n```bash\nbuildchain badges readme --json\nbuildchain badges readme --check\nbuildchain badges readme --write\nbuildchain badges bundle --json\nbuildchain badges bundle --check\nbuildchain badges bundle --write\nbuildchain badges bundle --claims kfd-1,release-passport --write\n```\n\nThe `--json` form emits the `kungfu-buildchain-readme-badge-facts` object.\n`--check` fails closed when the README marker block is missing or stale.\n`--write` inserts or replaces only the marked block. KFD passed badges come\nfrom the repository's own verified release passport; unreleased repositories\ndowngrade to explicit local declarations such as `declared`, `aligned`, or\n`planned`. `buildchain badges bundle` is the focused trust-badge entrypoint: it\nemits `kungfu-buildchain-badge-bundle-facts` and defaults to KFD-1, KFD-2,\nKFD-3, and Release Passport. See [`readme-badges.md`](readme-badges.md) for the\nmarker contract and `[badges]` / `[badges.bundle]` configuration.\n\nGenerate or check Homebrew tap projections from upstream release passports:\n\n```bash\nbuildchain homebrew update-formula \\\n  --package buildchain \\\n  --release-passport https://github.com/kungfu-systems/buildchain/releases/download/v3.0.0/buildchain.release.json \\\n  --write\n\nbuildchain homebrew check --json\n```\n\n`update-formula` writes `Formula/buildchain.rb` and `tap-manifest.json` from\nupstream release passport evidence. `check` fails closed when the Formula,\nmanifest, artifact digests, or KFD status drift from the upstream passport. See\n[`homebrew.md`](homebrew.md) for the distribution-index project contract.\n\n`buildchain collect github-release` creates a release passport bundle from\nGitHub Release assets or a local asset directory:\n\n```bash\nbuildchain collect github-release \\\n  --tag v3.0.0 \\\n  --repository kungfu-systems/buildchain \\\n  --assets-dir dist \\\n  --output-dir .buildchain/release-passport\n```\n\nThe bundle includes `buildchain.release.json`, `artifact-evidence.json`,\n`impact.json`, `agent-index.json`, `product-mechanism.json`, `check-report.json`,\nand `llms.txt`. Production binary distribution defaults to GitHub-hosted\nrunners so other projects can reproduce the release lane; self-hosted runners\nremain compatibility fixtures and are recorded as runner facts when used.\n\nFor publish-transaction releases, pass the additional evidence inputs so\n`buildchain.release.json` becomes the unified passport instead of a binary-only\nasset summary:\n\n```bash\nbuildchain collect github-release \\\n  --tag v3.0.0 \\\n  --repository kungfu-systems/buildchain \\\n  --assets-dir dist \\\n  --publish-evidence-json .buildchain/release-evidence/v3.0.0/evidence.json \\\n  --transaction-json .buildchain/release-state/v3.0.0/state.json \\\n  --package-set-json package-set.json \\\n  --impact-json impact.json \\\n  --trusted-publishing-json trusted-publishing.json \\\n  --anchor-manifest-json libnode.release.json \\\n  --build-summary-json .buildchain/artifacts/build-summary.json \\\n  --platform-manifest-json .buildchain/artifacts/linux-x64/manifest.json \\\n  --platform-manifest-json .buildchain/artifacts/darwin-arm64/manifest.json \\\n  --platform-manifest-json .buildchain/artifacts/win32-x64/manifest.json \\\n  --dist-tag-evidence-json .buildchain/release-evidence/v3.0.0/dist-tag-evidence.json \\\n  --kfd-1-witness-json .buildchain/kfd/kfd-1/contract-world.witness.json \\\n  --kfd-2-claim-json .buildchain/kfd/kfd-2/release-claims.json \\\n  --kfd-3-prebuild-witness-json .buildchain/kfd/kfd-3/collaboration-interface.prebuild.json \\\n  --kfd-3-artifact-verify-cmd \"kungfu agent verify --json\" \\\n  --release-extra-json '{\"channel\":\"release\",\"targetRef\":\"release/v3/v3.0\"}' \\\n  --output-dir .buildchain/release-passport\n```\n\nThe generated passport records the main and platform packages, npm dist-tags,\npublished versions, release source/ref state, anchor manifest digest, registry\nartifact digests, trusted publishing evidence, and Buildchain transaction\nresult. It also records `buildSummary`, `platformArtifactManifests`, and\n`distTagPromotion` when those JSON inputs are supplied. `packageSet` keeps the\nordered package set; `publish.packages[]` is the agent-readable npm publication\nsummary for each main/platform package. For Buildchain releases, verification\nexpects the supplied package set to include the main package plus the three\nplatform packages with version, dist-tag, and digest evidence. Verification\nfails closed if supplied sections are internally incomplete or point to\nartifacts without matching evidence.\n\n`--kfd-1-witness-json` attaches a KFD-1 contract-world release gate. The witness\nis structured JSON: consumers declare the contract world, canonical JSON policy,\nartifact paths, and expected SHA-256 digests. Buildchain imports KFD-owned\nmetadata from `@kungfu-tech/kfd`, freezes the witness before build publication,\nthen verifies the resulting artifact bytes itself and writes the evidence under\nthe KFD-provided top-level key currently named `kfd-1`. Consumers should not\nduplicate this by running repository-specific scripts or invoking the Kungfu\nSDK from their release workflow.\n\nFor the KFD repository, KFD-1 witnesses may be self-hosted standard-contract\nwitnesses: docs, schemas, standards metadata, package exports, and\nsite-consumption entrypoints are checked from source hashes to packaged artifact\nhashes, and the passport records schema IDs, self-hosting boundary, result, and\nresponsibility state.\n\n`--kfd-2-claim-json` attaches explicit public release claims to the KFD-2\nrelease trust passport audit. Buildchain also derives KFD-2 claims from KFD-1\nand KFD-3 gate evidence. Public claims must bind declared sources,\nmachine-readable evidence, hashes, artifact coordinates, verification results,\naudit boundary, responsibility state, and residual risk. Unbound claims fail\npassport verification; prose-only claims downgrade the KFD-2 audit and emit a\nwarning.\n\n`--kfd-3-prebuild-witness-json` attaches a KFD-3 collaboration-interface\nrelease gate. The product remains the source of truth: it emits a pre-build\nwitness that contains or points to its KFD-3 collaboration interface, declared\nparticipant-facing public surfaces, and registry digest. Buildchain freezes\nthat declaration before publication. The artifact side is supplied either by\n`--kfd-3-artifact-witness-json` or by a product-owned command such as\n`--kfd-3-artifact-verify-cmd \"kungfu agent verify --json\"`. Buildchain then\nchecks closure: every declared shipped public surface must be present in the\nartifact witness, and every artifact-exposed participant-facing public surface\nmust have been declared. The generated passport writes this evidence under the\nKFD-provided top-level key currently named `kfd-3`.\n\nThis gate is useful for agent-facing products because it turns KFD-3 from prose\ninto release evidence. A package cannot claim KFD-3 collaboration-interface\nsupport merely because the docs mention it; the release passport must show the\nfrozen declaration, the artifact-side witness digest, and a passing closure\ncomparison.\n\n`--invariant-passport-json` attaches a product-owned invariant Passport to the\nrelease gate and may be repeated. `--invariant-passport-cmd` runs a product\ncommand that emits one Passport JSON document. Buildchain verifies the\nPassport root, exact clean source identity, `verified` verdict, complete\nplatform coverage, and residual-risk shape; it does not redefine the product's\ninvariant semantics. Declared invariant Passport input is fail-closed.\nFor the KFD repository itself, the witness can declare docs, schemas, standards\nmetadata, package exports, and site-consumption contracts as grouped public\nsurfaces; the artifact witness must expose the same enumerable package/site\nsurfaces or verification fails closed.\n\n`--impact-json` supplies the surface-aware impact ledger. Production release\npassports (`release/*`) and major publish-gate passports require\n`surfaceImpacts[]`; alpha, local, and legacy passport contexts keep it\noptional. When `surfaceImpacts[]` is required or supplied, the verifier requires\neach entry to include an id, impact, and rationale, and requires\n`versionImpact.final` to match the highest declared surface impact. The\ncollector copies `versionImpact` plus `surfaceImpacts` into\n`buildchain.release.json`. This lets\n`buildchain explain release --for agent --json` state why a release is patch,\nminor, or major instead of relying on file-path memory.\n\nFor a promote-only stable transaction, Buildchain can derive a patch-level\nrelease-governance ledger when the PR-stage release-candidate passport proves\nthe stable source tree is exactly the previously qualified candidate tree.\nThis fallback is unavailable when candidate evidence is absent, stale, or not\ntree-equivalent.\n\nBuildchain dogfoods its observability toolkit in this lane. The standalone\nbuilder writes API-generated events, while the workflow uses `buildchain mark`,\n`buildchain span`, `buildchain verify observability-log`, and `buildchain log\nsummary`; the event logs and summaries are published as release passport assets.\n\nVerify and explain release passports:\n\n```bash\nbuildchain verify release-passport .buildchain/release-passport/buildchain.release.json\nbuildchain explain release --passport .buildchain/release-passport/buildchain.release.json --for agent --json\nbuildchain inspect release --passport .buildchain/release-passport/buildchain.release.json\n```\n\nThe verifier fails closed when required protocol files are absent, artifacts are\nnot covered by evidence, or digests disagree. The explanation output is shaped\nfor agents: trust, completeness, impact, recovery route, and next action.\n\nVerify a published artifact by subject:\n\n```bash\nbuildchain verify artifact ./Kungfu-2.8.0-windows-x64.exe\nbuildchain inspect artifact ./Kungfu-2.8.0-windows-x64.exe --json\nbuildchain explain artifact ./Kungfu-2.8.0-windows-x64.exe --for agent --json\nbuildchain verify artifact npm:@kungfu-tech/libnode@22.22.3-kf.3-alpha.18 \\\n  --repository kungfu-systems/libnode \\\n  --tag v22.22.3-kf.3-alpha.18 \\\n  --json\n```\n\n`verify artifact` computes or obtains the subject digest, discovers the\ndetached release passport, verifies the passport, then requires that the\nsubject digest appears in the passport's release assets, package set, publish\nevidence, or artifact evidence. Outcomes are explicit: `pass`, `fail`, or\n`unverifiable`. A filename is only a hint; trust comes from digest equality.\nFor `npm:<name>@<version>` subjects, Buildchain resolves `dist.integrity` from\nthe npm registry before matching passport evidence. Use `--npm-registry <url>`\nto verify packages from a custom registry; otherwise Buildchain uses\n`npm_config_registry` or `https://registry.npmjs.org/`.\n\nDiscovery is fail-closed and ordered:\n\n1. `--passport <file-or-url>`.\n2. Sidecar pointer, such as `<artifact>.buildchain-passport.json`.\n3. Embedded/package pointer, such as `package.json` `buildchain.releasePassport`.\n4. Local config or org index, such as `.buildchain/artifact-passport-locators.json`.\n5. GitHub Release default discovery from `github-release:` subjects, GitHub\n   Release asset URLs, or `--repository <owner/repo> --tag <tag>`.\n6. Custom `--locator-config <json-or-url>`.\n7. `unverifiable` with retry guidance.\n\nLocator files are policy, not protocol. They map subject fields such as\n`name`, `kind`, `version`, `digest`, `repository`, or `tag` to a detached\npassport location:\n\n```json\n{\n  \"schemaVersion\": 1,\n  \"contract\": \"kungfu-buildchain-artifact-passport-locator\",\n  \"locators\": [\n    {\n      \"match\": {\n        \"name\": \"Kungfu-2.8.0-windows-x64.exe\",\n        \"digest\": \"sha256:...\"\n      },\n      \"passport\": \"../release-passport/buildchain.release.json\"\n    }\n  ]\n}\n```\n\nSupported subject shapes include local files and directories, URLs,\n`npm:<name>@<version>`, `oci:...`, `s3:...`,\n`github-release:<owner/repo>@<tag>/<asset>`, and deployment endpoints. Local\nfiles, directories, and URLs are digestable directly; remote package, OCI,\nobject storage, and deployment subjects should provide a digest or resolve to a\nlocator that records one.\n\nSeal an exact artifact verification with the Node API, then verify or project\nthe resulting KFX admission envelope without reconstructing its roots:\n\n```bash\nbuildchain verify artifact-envelope envelope.json \\\n  --assessment-time 150 \\\n  --expected-root sha256:... \\\n  --expected-issuer buildchain.libkungfu.dev \\\n  --expected-publisher kungfu-systems \\\n  --expected-contract buildchain.release/v1 \\\n  --json\n\nbuildchain project kfx-admission envelope.json \\\n  --assessment-time 150 \\\n  --json\n```\n\nBoth commands call the public artifact-verification-envelope verifier. The\nprojected `attestation`, `trustInputs`, and `kfdAssessment` are direct copies of\nthe sealed envelope, and `envelopeRoot` stays identical across Node and CLI.\nSee [`artifact-verification-envelope.md`](artifact-verification-envelope.md).\n\nVerify infra-contract lifecycle evidence bundles:\n\n```bash\nbuildchain infra-contract --mode ci --source-sha \"$GITHUB_SHA\"\nbuildchain verify infra-contract-evidence-bundle .buildchain/infra-contract-evidence-bundle.json\n```\n\nThe infra-contract `ci` mode is mutation-free. It writes validate, plan,\ncontract, propagation dry-run, evidence bundle, and verification JSON artifacts\nunder `.buildchain/`, giving reusable workflows one standard responsibility\nchain instead of hand-written command sequences.\n\nThe infra-contract verifier is read-only. It recomputes the bundle hash and\nchecks that desired, plan, approval, apply, observe, contract, and propagate\nevidence remain bound to the same contract artifact. It also recomputes the\nbundle validation summary, so stale or misleading summary booleans fail closed\neven when the bundle hash has been refreshed.\n\n`buildchain release --dry-run` explains the release-line state machine before a\nmaintainer opens or merges a channel PR:\n\n```bash\nbuildchain release --dry-run --target-ref alpha/v3/v3.0\nbuildchain release --dry-run --target-ref release/v3/v3.0 --sha <verified-sha>\nbuildchain release dry-run --target-ref publish-gate/major --source-ref release/v3/v3.0\nbuildchain release explain --target-ref alpha/v3/v3.0 --json\n```\n\nThis is a Buildchain-level dry-run, not an npm dry-run. It explains the legal\nsource branch, exact release or alpha tags, floating tags, channel branches,\nversion-state files, governance checks, and publish transaction behavior that\nwould apply if the corresponding PR merge were promoted. It does not move\nbranches, move tags, edit files, publish npm packages, or run lifecycle publish\ncommands. `release explain` is the same explanation surface with a clearer name.\nPass `--json` for a machine-readable plan.\n\n`buildchain transaction inspect` is the top-level recovery inspection command\nfor the publish transaction state:\n\n```bash\nbuildchain transaction inspect --version v3.0.1-alpha.2\n```\n\nIt reads or locally initializes the durable transaction record and validates\navailable publish evidence. Remote durable refs and public Git ref finalization\nremain owned by `actions/promote-buildchain-ref`; the CLI inspection surface is\nfor preflight and recovery reasoning before a maintainer reruns or resumes a\npromotion.\n\n`buildchain npm dry-run` verifies the package shape before a release tag exists:\n\n```bash\nbuildchain npm dry-run --json\n```\n\nThe command validates `package.json`, infers the exact release tag\n`v${package.json.version}`, chooses npm dist-tag `alpha` for prereleases and\n`latest` for stable releases, runs `npm pack --dry-run --json`, and then runs\n`npm publish --dry-run --access public --tag <alpha|latest>` unless\n`--skip-npm-publish-dry-run` is passed. It never performs a real publish.\n\n## npm Publish Gate\n\nBuildchain's own npm package is published from\n`.github/workflows/buildchain-ref-promotion.yml`, inside the same publish\ntransaction that promotes release refs:\n\n- `v3.0.3-alpha.0` publishes to npm with dist-tag `alpha`.\n- `v3.0.2` publishes to npm with dist-tag `latest`.\n- moving refs such as `v3`, `v3.0`, and `v3.0-alpha` do not match the publish\n  workflow and do not publish.\n\nThe promotion workflow uses npm Trusted Publishing through GitHub Actions OIDC.\nIt runs on a GitHub-hosted runner with `id-token: write`, but it does not\nmanually run the release-candidate resolver or promote action. Buildchain's own\ndogfood path calls the declarative `release-candidate-promote.yml` wrapper with\nchannel, target ref/SHA, PR-stage workflow, artifact, status-check, and passport\ninputs. The wrapper generates the version-state commit, runs\n`lifecycle.verify`, runs `lifecycle.publish`, writes Buildchain publish\nevidence, validates that evidence, and only then moves exact tags and floating\nrefs.\n\n```bash\nnode scripts/npm-publish-transaction.mjs\n```\n\nBefore the first real release, configure npm Trusted Publishing for:\n\n- package: `@kungfu-tech/buildchain`\n- repository: `kungfu-systems/buildchain`\n- workflow: `.github/workflows/buildchain-ref-promotion.yml`\n\nNo npm package is published by manual dispatch or ordinary branch builds.\nManual dispatch on `.github/workflows/npm-publish.yml` remains dry-run only, so\nmaintainers can verify package contents and npm publish shape before opening or\nmerging the release PR."
+    },
+    {
+      "id": "manual:cli-reference",
+      "title": "Buildchain CLI Reference",
+      "route": "/docs/cli-reference",
+      "category": "manual",
+      "capabilityGroup": "api-cli-reference",
+      "audience": [
+        "agent",
+        "developer",
+        "operator"
+      ],
+      "maturity": "stable",
+      "sourcePath": "docs/cli-reference.md",
+      "digest": "sha256:c728fe693ab591ab5b52f4276a817ec5a013c79833f0d20ca2cc137e85ae51ca",
+      "headings": [
+        {
+          "level": 1,
+          "title": "Buildchain CLI Reference",
+          "anchor": "buildchain-cli-reference"
+        },
+        {
+          "level": 2,
+          "title": "`audit`",
+          "anchor": "audit"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain audit`",
+          "anchor": "buildchain-audit"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain audit github-governance`",
+          "anchor": "buildchain-audit-github-governance"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain audit publication-control-plane`",
+          "anchor": "buildchain-audit-publication-control-plane"
+        },
+        {
+          "level": 2,
+          "title": "`badges`",
+          "anchor": "badges"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain badges`",
+          "anchor": "buildchain-badges"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain badges bundle`",
+          "anchor": "buildchain-badges-bundle"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain badges readme`",
+          "anchor": "buildchain-badges-readme"
+        },
+        {
+          "level": 2,
+          "title": "`build-contract`",
+          "anchor": "build-contract"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain build-contract`",
+          "anchor": "buildchain-build-contract"
+        },
+        {
+          "level": 2,
+          "title": "`candidate`",
+          "anchor": "candidate"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain candidate`",
+          "anchor": "buildchain-candidate"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain candidate timeline`",
+          "anchor": "buildchain-candidate-timeline"
+        },
+        {
+          "level": 2,
+          "title": "`collect`",
+          "anchor": "collect"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain collect`",
+          "anchor": "buildchain-collect"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain collect github-release`",
+          "anchor": "buildchain-collect-github-release"
+        },
+        {
+          "level": 2,
+          "title": "`create`",
+          "anchor": "create"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain create`",
+          "anchor": "buildchain-create"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain create github-artifact-attestation-policy`",
+          "anchor": "buildchain-create-github-artifact-attestation-policy"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain create publication-admission`",
+          "anchor": "buildchain-create-publication-admission"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain create runner-provenance`",
+          "anchor": "buildchain-create-runner-provenance"
+        },
+        {
+          "level": 2,
+          "title": "`dev`",
+          "anchor": "dev"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain dev`",
+          "anchor": "buildchain-dev"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain dev merge-queue`",
+          "anchor": "buildchain-dev-merge-queue"
+        },
+        {
+          "level": 2,
+          "title": "`diagnostics`",
+          "anchor": "diagnostics"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain diagnostics`",
+          "anchor": "buildchain-diagnostics"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain diagnostics summary`",
+          "anchor": "buildchain-diagnostics-summary"
+        },
+        {
+          "level": 2,
+          "title": "`doctor`",
+          "anchor": "doctor"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain doctor`",
+          "anchor": "buildchain-doctor"
+        },
+        {
+          "level": 2,
+          "title": "`explain`",
+          "anchor": "explain"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain explain`",
+          "anchor": "buildchain-explain"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain explain artifact`",
+          "anchor": "buildchain-explain-artifact"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain explain release`",
+          "anchor": "buildchain-explain-release"
+        },
+        {
+          "level": 2,
+          "title": "`facts`",
+          "anchor": "facts"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain facts`",
+          "anchor": "buildchain-facts"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain facts aggregate`",
+          "anchor": "buildchain-facts-aggregate"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain facts module`",
+          "anchor": "buildchain-facts-module"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain facts verify`",
+          "anchor": "buildchain-facts-verify"
+        },
+        {
+          "level": 2,
+          "title": "`github-governance`",
+          "anchor": "github-governance"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain github-governance`",
+          "anchor": "buildchain-github-governance"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain github-governance apply`",
+          "anchor": "buildchain-github-governance-apply"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain github-governance plan`",
+          "anchor": "buildchain-github-governance-plan"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain github-governance protection-policy-plan`",
+          "anchor": "buildchain-github-governance-protection-policy-plan"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain github-governance rollback`",
+          "anchor": "buildchain-github-governance-rollback"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain github-governance ruleset-policy-plan`",
+          "anchor": "buildchain-github-governance-ruleset-policy-plan"
+        },
+        {
+          "level": 2,
+          "title": "`help`",
+          "anchor": "help"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain help`",
+          "anchor": "buildchain-help"
+        },
+        {
+          "level": 2,
+          "title": "`homebrew`",
+          "anchor": "homebrew"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain homebrew`",
+          "anchor": "buildchain-homebrew"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain homebrew check`",
+          "anchor": "buildchain-homebrew-check"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain homebrew update-formula`",
+          "anchor": "buildchain-homebrew-update-formula"
+        },
+        {
+          "level": 2,
+          "title": "`infra-contract`",
+          "anchor": "infra-contract"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain infra-contract`",
+          "anchor": "buildchain-infra-contract"
+        },
+        {
+          "level": 2,
+          "title": "`init`",
+          "anchor": "init"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain init`",
+          "anchor": "buildchain-init"
+        },
+        {
+          "level": 2,
+          "title": "`inspect`",
+          "anchor": "inspect"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain inspect`",
+          "anchor": "buildchain-inspect"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain inspect artifact`",
+          "anchor": "buildchain-inspect-artifact"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain inspect release`",
+          "anchor": "buildchain-inspect-release"
+        },
+        {
+          "level": 2,
+          "title": "`kfd`",
+          "anchor": "kfd"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd`",
+          "anchor": "buildchain-kfd"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 1 gate`",
+          "anchor": "buildchain-kfd-1-gate"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 1 schema`",
+          "anchor": "buildchain-kfd-1-schema"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 1 verify`",
+          "anchor": "buildchain-kfd-1-verify"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 1 witness`",
+          "anchor": "buildchain-kfd-1-witness"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 2 claims`",
+          "anchor": "buildchain-kfd-2-claims"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 2 product-claims check`",
+          "anchor": "buildchain-kfd-2-product-claims-check"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 2 product-claims render`",
+          "anchor": "buildchain-kfd-2-product-claims-render"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 2 product-claims write`",
+          "anchor": "buildchain-kfd-2-product-claims-write"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 2 schema`",
+          "anchor": "buildchain-kfd-2-schema"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 2 taxonomy`",
+          "anchor": "buildchain-kfd-2-taxonomy"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 2 trust-assessment`",
+          "anchor": "buildchain-kfd-2-trust-assessment"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 2 trust-claims`",
+          "anchor": "buildchain-kfd-2-trust-claims"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 3`",
+          "anchor": "buildchain-kfd-3"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 3 audit`",
+          "anchor": "buildchain-kfd-3-audit"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 3 detect`",
+          "anchor": "buildchain-kfd-3-detect"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 3 query`",
+          "anchor": "buildchain-kfd-3-query"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 3 register binary`",
+          "anchor": "buildchain-kfd-3-register-binary"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 3 register cli`",
+          "anchor": "buildchain-kfd-3-register-cli"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 3 register documentation`",
+          "anchor": "buildchain-kfd-3-register-documentation"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 3 register node-api`",
+          "anchor": "buildchain-kfd-3-register-node-api"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 3 register python-api`",
+          "anchor": "buildchain-kfd-3-register-python-api"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 3 register site-bundle`",
+          "anchor": "buildchain-kfd-3-register-site-bundle"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 3 witness`",
+          "anchor": "buildchain-kfd-3-witness"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 4 gate`",
+          "anchor": "buildchain-kfd-4-gate"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 4 schema`",
+          "anchor": "buildchain-kfd-4-schema"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 4 verify`",
+          "anchor": "buildchain-kfd-4-verify"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 5 gate`",
+          "anchor": "buildchain-kfd-5-gate"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 5 schema`",
+          "anchor": "buildchain-kfd-5-schema"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 5 verify`",
+          "anchor": "buildchain-kfd-5-verify"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 7 gate`",
+          "anchor": "buildchain-kfd-7-gate"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 7 schema`",
+          "anchor": "buildchain-kfd-7-schema"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd 7 verify`",
+          "anchor": "buildchain-kfd-7-verify"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd aggregate`",
+          "anchor": "buildchain-kfd-aggregate"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd hub explain`",
+          "anchor": "buildchain-kfd-hub-explain"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd hub init`",
+          "anchor": "buildchain-kfd-hub-init"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd hub inspect`",
+          "anchor": "buildchain-kfd-hub-inspect"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd hub test`",
+          "anchor": "buildchain-kfd-hub-test"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd migrate-layout`",
+          "anchor": "buildchain-kfd-migrate-layout"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd schema list`",
+          "anchor": "buildchain-kfd-schema-list"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd schema show kfd-1`",
+          "anchor": "buildchain-kfd-schema-show-kfd-1"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd schema show kfd-2`",
+          "anchor": "buildchain-kfd-schema-show-kfd-2"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd schema show kfd-3`",
+          "anchor": "buildchain-kfd-schema-show-kfd-3"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd schema show kfd-4`",
+          "anchor": "buildchain-kfd-schema-show-kfd-4"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd status`",
+          "anchor": "buildchain-kfd-status"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd support project`",
+          "anchor": "buildchain-kfd-support-project"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd support verify`",
+          "anchor": "buildchain-kfd-support-verify"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd upstream check`",
+          "anchor": "buildchain-kfd-upstream-check"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd upstream collect`",
+          "anchor": "buildchain-kfd-upstream-collect"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain kfd upstream roles`",
+          "anchor": "buildchain-kfd-upstream-roles"
+        },
+        {
+          "level": 2,
+          "title": "`layout`",
+          "anchor": "layout"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain layout`",
+          "anchor": "buildchain-layout"
+        },
+        {
+          "level": 2,
+          "title": "`lifecycle`",
+          "anchor": "lifecycle"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain lifecycle`",
+          "anchor": "buildchain-lifecycle"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain lifecycle run`",
+          "anchor": "buildchain-lifecycle-run"
+        },
+        {
+          "level": 2,
+          "title": "`log`",
+          "anchor": "log"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain log`",
+          "anchor": "buildchain-log"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain log error`",
+          "anchor": "buildchain-log-error"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain log info`",
+          "anchor": "buildchain-log-info"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain log summary`",
+          "anchor": "buildchain-log-summary"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain log warn`",
+          "anchor": "buildchain-log-warn"
+        },
+        {
+          "level": 2,
+          "title": "`mark`",
+          "anchor": "mark"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain mark`",
+          "anchor": "buildchain-mark"
+        },
+        {
+          "level": 2,
+          "title": "`npm`",
+          "anchor": "npm"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain npm`",
+          "anchor": "buildchain-npm"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain npm dry-run`",
+          "anchor": "buildchain-npm-dry-run"
+        },
+        {
+          "level": 2,
+          "title": "`paper`",
+          "anchor": "paper"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain paper`",
+          "anchor": "buildchain-paper"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain paper agent verify`",
+          "anchor": "buildchain-paper-agent-verify"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain paper alpha`",
+          "anchor": "buildchain-paper-alpha"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain paper bootstrap npm`",
+          "anchor": "buildchain-paper-bootstrap-npm"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain paper build`",
+          "anchor": "buildchain-paper-build"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain paper fleet audit`",
+          "anchor": "buildchain-paper-fleet-audit"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain paper fleet update`",
+          "anchor": "buildchain-paper-fleet-update"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain paper migrate`",
+          "anchor": "buildchain-paper-migrate"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain paper preflight`",
+          "anchor": "buildchain-paper-preflight"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain paper resume`",
+          "anchor": "buildchain-paper-resume"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain paper scaffold`",
+          "anchor": "buildchain-paper-scaffold"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain paper status`",
+          "anchor": "buildchain-paper-status"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain paper work start`",
+          "anchor": "buildchain-paper-work-start"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain paper work submit`",
+          "anchor": "buildchain-paper-work-submit"
+        },
+        {
+          "level": 2,
+          "title": "`portable-cache`",
+          "anchor": "portable-cache"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain portable-cache`",
+          "anchor": "buildchain-portable-cache"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain portable-cache plan`",
+          "anchor": "buildchain-portable-cache-plan"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain portable-cache receipt`",
+          "anchor": "buildchain-portable-cache-receipt"
+        },
+        {
+          "level": 2,
+          "title": "`project`",
+          "anchor": "project"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain project`",
+          "anchor": "buildchain-project"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain project kfx-admission`",
+          "anchor": "buildchain-project-kfx-admission"
+        },
+        {
+          "level": 2,
+          "title": "`publication-artifact`",
+          "anchor": "publication-artifact"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain publication-artifact`",
+          "anchor": "buildchain-publication-artifact"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain publication-artifact manifest`",
+          "anchor": "buildchain-publication-artifact-manifest"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain publication-artifact npm-package`",
+          "anchor": "buildchain-publication-artifact-npm-package"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain publication-artifact reproducibility`",
+          "anchor": "buildchain-publication-artifact-reproducibility"
+        },
+        {
+          "level": 2,
+          "title": "`publish-source`",
+          "anchor": "publish-source"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain publish-source`",
+          "anchor": "buildchain-publish-source"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain publish-source lock`",
+          "anchor": "buildchain-publish-source-lock"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain publish-source manifest`",
+          "anchor": "buildchain-publish-source-manifest"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain publish-source validate-anchored-release`",
+          "anchor": "buildchain-publish-source-validate-anchored-release"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain publish-source verify-channel-ref`",
+          "anchor": "buildchain-publish-source-verify-channel-ref"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain publish-source verify-lock`",
+          "anchor": "buildchain-publish-source-verify-lock"
+        },
+        {
+          "level": 2,
+          "title": "`release`",
+          "anchor": "release"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain release`",
+          "anchor": "buildchain-release"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain release --dry-run`",
+          "anchor": "buildchain-release-dry-run"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain release abort`",
+          "anchor": "buildchain-release-abort"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain release dry-run`",
+          "anchor": "buildchain-release-dry-run"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain release explain`",
+          "anchor": "buildchain-release-explain"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain release finalize`",
+          "anchor": "buildchain-release-finalize"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain release inspect`",
+          "anchor": "buildchain-release-inspect"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain release line open`",
+          "anchor": "buildchain-release-line-open"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain release recover`",
+          "anchor": "buildchain-release-recover"
+        },
+        {
+          "level": 2,
+          "title": "`release-governance`",
+          "anchor": "release-governance"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain release-governance`",
+          "anchor": "buildchain-release-governance"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain release-governance reconcile`",
+          "anchor": "buildchain-release-governance-reconcile"
+        },
+        {
+          "level": 2,
+          "title": "`release-propagation`",
+          "anchor": "release-propagation"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain release-propagation`",
+          "anchor": "buildchain-release-propagation"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain release-propagation plan`",
+          "anchor": "buildchain-release-propagation-plan"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain release-propagation write-lock`",
+          "anchor": "buildchain-release-propagation-write-lock"
+        },
+        {
+          "level": 2,
+          "title": "`sample`",
+          "anchor": "sample"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain sample`",
+          "anchor": "buildchain-sample"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain sample process-tree`",
+          "anchor": "buildchain-sample-process-tree"
+        },
+        {
+          "level": 2,
+          "title": "`span`",
+          "anchor": "span"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain span`",
+          "anchor": "buildchain-span"
+        },
+        {
+          "level": 2,
+          "title": "`transaction`",
+          "anchor": "transaction"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain transaction`",
+          "anchor": "buildchain-transaction"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain transaction inspect`",
+          "anchor": "buildchain-transaction-inspect"
+        },
+        {
+          "level": 2,
+          "title": "`validate`",
+          "anchor": "validate"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain validate`",
+          "anchor": "buildchain-validate"
+        },
+        {
+          "level": 2,
+          "title": "`verify`",
+          "anchor": "verify"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain verify`",
+          "anchor": "buildchain-verify"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain verify artifact dir`",
+          "anchor": "buildchain-verify-artifact-dir"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain verify artifact file`",
+          "anchor": "buildchain-verify-artifact-file"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain verify artifact github-release:...`",
+          "anchor": "buildchain-verify-artifact-github-release"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain verify artifact npm:...`",
+          "anchor": "buildchain-verify-artifact-npm"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain verify artifact oci:...`",
+          "anchor": "buildchain-verify-artifact-oci"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain verify artifact url`",
+          "anchor": "buildchain-verify-artifact-url"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain verify artifact-envelope`",
+          "anchor": "buildchain-verify-artifact-envelope"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain verify github-artifact-attestation`",
+          "anchor": "buildchain-verify-github-artifact-attestation"
         },
         {
-          "level": 2,
-          "title": "Kungfu Legacy Projection",
-          "anchor": "kungfu-legacy-projection"
-        }
-      ],
-      "markdown": "# Build Facts\n\nBuild Facts are Buildchain's machine-readable record of what a repository\nbuilt. They sit between lifecycle logs and release passports:\n\n- lifecycle logs explain what ran and how long it took;\n- module build facts bind one module to its Git source digest, version source,\n  platform, lifecycle invocation, and output digests;\n- product build facts aggregate module facts and product artifacts;\n- release passports can carry build facts as first-class evidence.\n\nThe goal is to remove handwritten build metadata from consumer repositories.\nConsumers declare where their version and outputs live; Buildchain collects and\nverifies the facts.\n\n## Config\n\nDeclare build facts in `buildchain.toml`:\n\n```toml\nschema = 1\n\n[[facts.version_sources]]\nid = \"package\"\ntype = \"json\"\npath = \"package.json\"\nkey = \"version\"\n\n[[facts.modules]]\nid = \"native-core\"\nroot = \"src/core\"\nscope = \"core\"\nversion_source = \"package\"\nlifecycle = \"build\"\noutputs = [\"dist/core.node\"]\n\n[[facts.products]]\nid = \"kungfu\"\nmodule_facts = [\".buildchain/facts/native-core.json\"]\nartifacts = [\"dist/kungfu.zip\"]\n\n[[facts.legacy_projections]]\ntype = \"kungfu-buildinfo\"\nmodule = \"native-core\"\npath = \"framework/core/src/kungfu/yijinjing/kungfubuildinfo.json\"\n```\n\nSupported version sources:\n\n- `static`: an explicit `value`;\n- `json`: a JSON file plus dotted `key`;\n- `toml`: a TOML file plus dotted `key`;\n- `regex`: a text file plus regex `pattern`, using a named `version` group or\n  the first capture group;\n- `command`: an explicit command whose output is the version.\n\nPrefer file-based sources. Command sources are allowed for legacy projects but\nare marked as less reproducible because the command output is not a static\nsource file.\n\n## CLI\n\nCollect a module fact:\n\n```bash\nbuildchain facts module \\\n  --module native-core \\\n  --output .buildchain/facts/native-core.json\n```\n\nOverride declarative config from a workflow step when needed:\n\n```bash\nbuildchain facts module \\\n  --cwd \"$GITHUB_WORKSPACE\" \\\n  --module native-core \\\n  --module-root src/core \\\n  --version-source package \\\n  --output-path dist/core.node \\\n  --output .buildchain/facts/native-core.json \\\n  --json\n```\n\nWrite the Kungfu legacy `kungfubuildinfo.json` projection from the same module\nfact:\n\n```bash\nbuildchain facts module \\\n  --module native-core \\\n  --output .buildchain/facts/native-core.json \\\n  --legacy-kungfu-buildinfo framework/core/src/kungfu/yijinjing/kungfubuildinfo.json\n```\n\nAggregate product facts:\n\n```bash\nbuildchain facts aggregate \\\n  --product kungfu \\\n  --module-fact .buildchain/facts/native-core.json \\\n  --artifact dist/kungfu.zip \\\n  --output .buildchain/facts/kungfu.json\n```\n\nVerify a fact before publishing:\n\n```bash\nbuildchain facts verify --fact .buildchain/facts/kungfu.json\n```\n\nVerification fails closed when a declared output is missing, an output digest is\nstale, a module fact was collected from a different Git `HEAD`, or a source\ndigest no longer matches the tracked source files.\n\n## Node API\n\n```js\nimport {\n  aggregateBuildFacts,\n  collectModuleBuildFacts,\n  verifyBuildFacts,\n  writeBuildFacts,\n  writeKungfuBuildInfoProjection,\n} from \"@kungfu-tech/buildchain/build-facts\";\n\nconst moduleFact = collectModuleBuildFacts({ moduleId: \"native-core\" });\nwriteBuildFacts({ fact: moduleFact, output: \".buildchain/facts/native-core.json\" });\n\nconst productFact = aggregateBuildFacts({ productId: \"kungfu\" });\nconst verification = verifyBuildFacts({ fact: productFact });\n```\n\nThe root package export also re-exports these APIs from\n`@kungfu-tech/buildchain`.\n\n## Release Passport Integration\n\nPass build facts into a release passport:\n\n```bash\nbuildchain collect github-release \\\n  --tag \"$TAG\" \\\n  --assets-dir dist \\\n  --build-facts-json .buildchain/facts/native-core.json \\\n  --build-facts-json .buildchain/facts/kungfu.json \\\n  --output-dir .buildchain/release-passport\n```\n\nThe passport records the full build facts in `buildFacts[]` and a compact\nevidence index in `evidence.buildFacts[]`. Agents can start from\n`buildchain.release.json`, discover the module/product facts, and verify that\nthe released artifacts still match the declared source, version, and output\nfacts.\n\n## Kungfu Legacy Projection\n\nKungfu historically consumes `kungfubuildinfo.json`. Buildchain now treats that\nfile as a projection of module build facts, not as an independent source of\ntruth. The projection preserves legacy fields such as `version`,\n`python_version`, `git_branch`, `git_revision`, and `git_pristine`, while adding\na `buildchain` section that points back to the module fact digest, version\nsource digest, and source digest.\n\nRepositories that no longer need the legacy file should consume the module and\nproduct facts directly."
-    },
-    {
-      "id": "manual:cli",
-      "title": "Buildchain CLI, npm Package, and Toolkit API",
-      "route": "/docs/cli",
-      "category": "manual",
-      "capabilityGroup": "api-cli-reference",
-      "audience": [
-        "agent",
-        "developer"
-      ],
-      "maturity": "stable",
-      "sourcePath": "docs/cli.md",
-      "digest": "sha256:009640d0f4d5a670d8e5a73e4a14250d62c3cc0c3bd165aa84200e0098ef898e",
-      "headings": [
+          "level": 3,
+          "title": "`buildchain verify infra-contract-evidence-bundle`",
+          "anchor": "buildchain-verify-infra-contract-evidence-bundle"
+        },
         {
-          "level": 1,
-          "title": "Buildchain CLI, npm Package, and Toolkit API",
-          "anchor": "buildchain-cli-npm-package-and-toolkit-api"
+          "level": 3,
+          "title": "`buildchain verify observability-log`",
+          "anchor": "buildchain-verify-observability-log"
         },
         {
-          "level": 2,
-          "title": "Install and Run",
-          "anchor": "install-and-run"
+          "level": 3,
+          "title": "`buildchain verify publication-admission`",
+          "anchor": "buildchain-verify-publication-admission"
         },
         {
-          "level": 2,
-          "title": "Node API and Package Exports",
-          "anchor": "node-api-and-package-exports"
+          "level": 3,
+          "title": "`buildchain verify release-passport`",
+          "anchor": "buildchain-verify-release-passport"
         },
         {
           "level": 2,
-          "title": "Commands",
-          "anchor": "commands"
+          "title": "`version`",
+          "anchor": "version"
         },
         {
           "level": 3,
-          "title": "Governed paper lifecycle",
-          "anchor": "governed-paper-lifecycle"
+          "title": "`buildchain version`",
+          "anchor": "buildchain-version"
         },
         {
           "level": 2,
-          "title": "npm Publish Gate",
-          "anchor": "npm-publish-gate"
+          "title": "`web-surface`",
+          "anchor": "web-surface"
+        },
+        {
+          "level": 3,
+          "title": "`buildchain web-surface`",
+          "anchor": "buildchain-web-surface"
         }
       ],
-      "markdown": "---\nstatus: active\nperiod: ongoing\ntheme: buildchain-cli\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: unreviewed\nlast_reviewed: 2026-07-31\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-07-31\n  invisible_context: not asserted\n---\n\n# Buildchain CLI, npm Package, and Toolkit API\n\nBuildchain is published as the public npm package\n`@kungfu-tech/buildchain`. The package contains the `buildchain` command,\nthe importable ESM toolkit APIs, and the local scripts needed to initialize and\nvalidate repositories before they use the reusable GitHub workflow surface.\n\nThe npm package is not the release authority. Release authority still comes\nfrom the protected Buildchain branch and tag state machine. npm publishing is a\nside effect of an exact release tag that has already been produced by that\nstate machine.\n\n## Install and Run\n\nUse the published package directly:\n\n```bash\nnpx @kungfu-tech/buildchain --help\nnpx @kungfu-tech/buildchain init --type package\nnpx @kungfu-tech/buildchain validate --require-version-state\n```\n\nOr install it in a repository:\n\n```bash\npnpm add -D @kungfu-tech/buildchain\npnpm exec buildchain validate\n```\n\nConsumers should pin the exact Buildchain version that was validated in their\nrepository. When dogfooding a fresh Buildchain release immediately after it is\npublished, pnpm may block the install through a minimum release-age policy. In\nthat case, add a temporary package/version-specific `minimumReleaseAgeExclude`\nentry, such as `@kungfu-tech/buildchain@3.0.0`, and remove it once the package\nhas aged past the normal policy window. Do not replace that with a broad\nregistry or scope-wide exclude.\n\nUse the package API directly inside JavaScript build scripts:\n\n```js\nimport { createBuildchainLogger } from \"@kungfu-tech/buildchain/logging\";\n\nconst logger = createBuildchainLogger({ source: \"user\", component: \"build\" });\nawait logger.span(\"build.native\", { phase: \"build\" }, async () => {\n  await buildNativeArtifacts();\n});\n```\n\nThe standalone binary and CLI are for workflow steps, shell scripts, and\nnon-JavaScript environments. JavaScript code that already depends on\n`@kungfu-tech/buildchain` should import the toolkit API instead of spawning\n`npx buildchain` or a downloaded binary.\n\n## Node API and Package Exports\n\nBuildchain's public Node API is the package `exports` surface, not arbitrary\ninternal file paths. The npm package also ships\n`dist/site/node-api-registry.json` and exports it as\n`@kungfu-tech/buildchain/site/node-api-registry.json` so agents can enumerate\nthe supported imports from the installed package.\nFor navigation, start with `dist/site/capability-registry.json`: it groups\nmanuals, CLI commands, workflow/action inputs, Node exports, site pages, and KFD\nclaim facts by product capability before an agent chooses a concrete command or\nmanual.\n\nCurrent public import families include:\n\n```js\nimport * as buildchain from \"@kungfu-tech/buildchain\";\nimport { createBuildchainLogger } from \"@kungfu-tech/buildchain/logging\";\nimport { collectModuleBuildFacts } from \"@kungfu-tech/buildchain/build-facts\";\nimport { checkHomebrewTap } from \"@kungfu-tech/buildchain/homebrew\";\nimport { verifyKfd1ReleaseGate } from \"@kungfu-tech/buildchain/kfd-gate\";\nimport { collectBadgeBundleFacts } from \"@kungfu-tech/buildchain/badges\";\nimport { collectReadmeBadgeFacts } from \"@kungfu-tech/buildchain/readme-badges\";\nimport { verifyReleasePassport } from \"@kungfu-tech/buildchain/release-passport\";\nimport { verifyGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain/github-artifact-attestation\";\nimport { createReleasePropagationPlan } from \"@kungfu-tech/buildchain/release-propagation\";\nimport { verifyPublicationReproducibility } from \"@kungfu-tech/buildchain/publication-reproducibility\";\nimport { collectPaperStatus } from \"@kungfu-tech/buildchain/paper\";\nimport { planReleaseLineBootstrap } from \"@kungfu-tech/buildchain/release-line-bootstrap\";\nimport { collectPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain/public-surface-audit\";\nimport { createBuildchainLayoutDiscovery } from \"@kungfu-tech/buildchain/buildchain-layout\";\nimport { createPortableDevCachePlan } from \"@kungfu-tech/buildchain/portable-dev-cache\";\nimport contractWorld from \"@kungfu-tech/buildchain/site/buildchain-contract.json\" with { type: \"json\" };\nimport capabilityRegistry from \"@kungfu-tech/buildchain/site/capability-registry.json\" with { type: \"json\" };\nimport manualRegistry from \"@kungfu-tech/buildchain/site/manual-registry.json\" with { type: \"json\" };\nimport nodeApiRegistry from \"@kungfu-tech/buildchain/site/node-api-registry.json\" with { type: \"json\" };\nimport publicSurfaceAudit from \"@kungfu-tech/buildchain/site/public-surface-audit.json\" with { type: \"json\" };\n```\n\nUse `dist/site/manual-registry.json` to find the packaged operating manuals and\ntheir SHA-256 digests. Use `dist/site/buildchain-contract.json` to verify the\nfloating-ref contract world for a runtime such as `@v3`.\n\n## Commands\n\n`buildchain create github-artifact-attestation-policy` seals the expected\nartifact, caller source, original Linux build, immutable Buildchain signer, and\nGitHub permission set before the Release Passport is collected.\n`buildchain verify github-artifact-attestation` invokes `gh attestation verify`\nwith the exact signer/source policy and then verifies the retained bundle,\npredicate, platform manifest, Passport, and Buildchain evidence locally. See\n[`github-artifact-attestation.md`](github-artifact-attestation.md).\n\n### Governed paper lifecycle\n\n`buildchain paper` is the unified operator surface for one paper repository or\na discovered fleet. Every subcommand returns a versioned JSON contract with\n`--json`:\n\n```bash\nbuildchain paper scaffold --package @kungfu-tech/paper-example \\\n  --repository kungfu-systems/paper-example\nbuildchain paper migrate --json\nbuildchain paper agent verify --json\nbuildchain paper work start golden-path --json\nbuildchain paper work submit --json\nbuildchain paper fleet audit --root ../papers --json\nbuildchain paper fleet update --root ../paper-worktrees --json\nbuildchain paper preflight --offline --json\nbuildchain paper bootstrap npm --json\nbuildchain paper build --json\nbuildchain paper alpha --json\nbuildchain paper status --json\nbuildchain paper resume --json\n```\n\nThe safety and authority boundary is explicit:\n\n- `scaffold` plans a 17-file, no-overwrite repository shape by default; add\n  `--write` to create only missing files.\n- `migrate` plans the Buildchain-owned authority, workflow, contract lock,\n  version pin, package, agent-entry policy, managed `AGENTS.md` section, and\n  required-check changes needed by an existing paper repository. It pins an\n  exact v3 dependency and adds pnpm-backed paper scripts.\n  Add `--write` only after reviewing exact old and new digests; paper content\n  and publication configuration are never rewritten. Refresh\n  `pnpm-lock.yaml` with `pnpm install --lockfile-only` after a write.\n- `agent verify` is the mandatory resume check on an existing work branch. It\n  verifies the digest-bound `.buildchain/paper/agent-entry.json`, the single\n  managed `AGENTS.md` section, exact package scripts and v3 dependency, runtime\n  source SHA, development target, and current branch lineage. `--ci` derives\n  the pull-request source and target from GitHub context and fails closed on a\n  non-work source branch or a target other than the configured development\n  line.\n- `work start` derives the protected development branch from the configured\n  publication semver line and creates a safe local work branch only when the\n  worktree is clean, the sole `origin` is the canonical `kungfu-systems`\n  repository, and local HEAD equals the exact remotely observed development\n  SHA. It never fetches or merges silently.\n- `work submit` accepts only an allowed non-protected work branch that contains\n  the exact remote development commit. It rejects divergent remote work,\n  wrong-base pull requests, dirty trees, forks, and ambiguous remotes; execution\n  uses a normal non-force push and opens or reuses a PR to the derived\n  development branch.\n- `fleet audit` discovers `paper-*` repositories from a root and emits one\n  deterministic audit root over exact runtime, dependency, lockfile, workflow,\n  authority, and repository observations. `fleet update` reuses the migration\n  contract for every discovered repository, remains dry-run by default, and\n  refuses protected or non-work branches.\n- The scaffolded `.buildchain/paper/provisioning-authority.json` binds both\n  build/release caller workflow byte digests, the required verify caller, the\n  agent-entry policy and instructions, their exact reusable-workflow SHA, the\n  runtime SHA, contract-lock bytes, npm registry and trusted-publisher\n  coordinates, and the repository Actions/generated-write policy under one\n  digest. A floating Buildchain ref cannot change release policy after that\n  authority is accepted.\n- The reusable `check.yml` detects publication-artifact repositories and runs\n  `paper preflight --offline --ci` inside the existing required check context.\n  Skipping the local CLI therefore cannot admit a missing entry contract,\n  drifted Buildchain-owned surface, unsafe source branch, or wrong PR target.\n- `preflight` separates local readiness from readiness for external mutation.\n  `--offline` skips live GitHub and npm observations without treating them as\n  local failures. Live readiness requires default workflow permissions `read`,\n  Actions pull-request approval disabled, and GitHub App or equivalent narrow\n  generated-write credential metadata.\n- `bootstrap npm` always performs npm pack and publish dry-runs first. A real\n  public bootstrap requires both `--execute` and\n  `--confirm-public-package <exact-name>`, uses only the official npm registry,\n  fixes the bootstrap version at `0.0.0-bootstrap.0`, and returns only npm URLs\n  observed from command output. Success requires public package readback and\n  the exact repository/workflow/environment trusted-publisher binding. For\n  GitHub, the npm coordinate is the workflow filename (`paper-release.yml`),\n  not its `.github/workflows/` repository path.\n- `build` plans the two-clean-build reproducibility proof. Add `--execute` to\n  create and verify the sealed publication bundle.\n- `alpha` plans or opens the protected Alpha pull request; it never merges,\n  publishes, or advances a floating ref.\n- `status` reports only evidence found in the repository or external\n  observations. It never infers a later lifecycle state from an earlier one.\n- `resume` plans or dispatches the repository's thin release workflow; the\n  protected workflow remains the release authority.\n\nThe ordered evidence states are `scaffolded`, `governed`, `admitted`,\n`bootstrapped`, `trust-bound`, `content-ready`, `artifact-sealed`,\n`package-published`, `alpha-complete`, `staging-visible`, and\n`production-visible`. A state can be `satisfied`, `not-reached`, `blocked`, or\n`unknown`; consumers must not collapse those distinctions.\n\nThe corresponding Node surface is\n`@kungfu-tech/buildchain/paper`. Planning and status functions are read-only;\n`writePaperScaffold()`, `writePaperMigration()`, and\n`writePaperFleetUpdate()` are the bounded local writers. Work plans expose\nseparate rechecking executors for local branch creation and normal push, and\n`executePaperNpmBootstrap()` preserves the same confirmation boundary used by\nthe CLI.\n\n`buildchain layout` is the stable machine question for repository layout. Tools\nsuch as Shifu should call it instead of copying `.buildchain/` path constants:\n\n```bash\nbuildchain layout --cwd /path/to/repository --json\n```\n\nThe result identifies the Buildchain version pin, repository root and config,\nthe canonical and currently resolved KFD-3 registry paths, and the KFD field\nused to declare Shifu jurisdiction. A repository is in Shifu's distribution\njurisdiction only when a KFD-3 surface explicitly declares\n`distribution.registrar=\"shifu\"`; the presence of Buildchain configuration is\nnot sufficient. The same contract is available through\n`createBuildchainLayoutDiscovery()` from\n`@kungfu-tech/buildchain/buildchain-layout`.\n\n`buildchain init` writes a starter `.buildchain/buildchain.toml` and a reusable workflow\ncaller at `.github/workflows/build.yml`.\n\n`buildchain portable-cache plan` turns a consumer-owned, secret-free manifest\ninto GitHub Actions cache inputs without letting each consumer invent key or\nrestore-prefix semantics. The exact key binds source SHA and the consumer plan\ndigest; the compatible restore prefix still requires the same provider schema,\nlayer, roots, runner image, platform/architecture, toolchain, dependency lock,\nand build profile.\n\n```bash\nbuildchain portable-cache plan \\\n  --manifest .buildchain/portable-cache.json \\\n  --output .buildchain/portable-cache-plan.json \\\n  --github-output \"$GITHUB_OUTPUT\"\n```\n\nThe emitted `cache-key`, `restore-keys`, and `cache-paths` values are intended\nfor pinned `actions/cache/restore` and `actions/cache/save` actions. After\nrestore and a consumer validation probe, seal the provider result:\n\n```bash\nbuildchain portable-cache receipt \\\n  --plan .buildchain/portable-cache-plan.json \\\n  --matched-key \"$CACHE_MATCHED_KEY\" \\\n  --cache-hit \"$CACHE_HIT\" \\\n  --validation-status pass \\\n  --cold-fallback-status passed \\\n  --output .buildchain/portable-cache-receipt.json\n```\n\nThe receipt distinguishes `exact`, `compatible`, `miss`, and `corrupt`.\nUnknown or contradictory provider evidence fails closed. A miss or corruption\nrequires the consumer's audited cold path; a cache never substitutes for the\nconsumer's current build or tests. Roots must be workspace-relative or under\n`~/`, and manifests cannot carry credentials, absolute host paths, or escape\nsegments. `cold-fallback-status=passed` qualifies a miss only after the current\nsource has completed its normal build and test path.\n\nSupported presets:\n\n- `--type package` for Node package repositories with pnpm, npm, or yarn.\n- `--type native` for CMake-style native projects.\n- `--type web-surface` for preview/staging/production site or app deployments.\n- `--type infra-contract` for provider-agnostic infrastructure contract\n  validation, observation, contract publication, and downstream propagation\n  planning without default mutation. Provider adapters expose built-in command\n  plans by default, and only configured `[infra.commands]` hooks can execute.\n- `--type publication-artifact` for papers, reports, specifications, and other\n  publication repositories that produce PDFs, metadata, source bundles, and\n  site-consumable manifests without becoming web-surface repositories. The\n  scaffold uses Buildchain's pinned\n  `ghcr.io/kungfu-systems/build-images/latex-pdf-builder:v1.2.0` toolchain for\n  LaTeX PDF builds.\n- `--type distribution-index` for Homebrew taps and other index repositories\n  whose files are projections of upstream release passport evidence.\n- `--type anchored-package` for packages whose version is anchored to an\n  explicit upstream release manifest.\n\nThe native preset includes an opt-in `[diagnostics.native]` profile with common\ntool/cache/artifact probes. Consumers can keep it enabled, adjust the tool and\ndirectory lists, or disable it if a repository does not need native diagnostics.\n\n`buildchain validate` parses `.buildchain/buildchain.toml`, checks configured version-state\nfiles, and can require named lifecycle stages:\n\n```bash\nbuildchain validate \\\n  --require-version-state \\\n  --require-lifecycle-stages install,build,verify\n```\n\n`buildchain lifecycle run <stage>` executes a lifecycle stage and writes the\nsame deterministic artifact manifest contract used by the reusable workflow:\n\n```bash\nbuildchain lifecycle run build \\\n  --artifact-path dist \\\n  --artifact-name \"{repo}-{version}-{platform}\"\n```\n\n`buildchain dev merge-queue` plans a GitHub merge-queue policy for a protected\nBuildchain dev channel. Declare every workflow that emits a required check; the\ncommand fails closed unless each file handles both `pull_request` and\n`merge_group` without reading `github.event.pull_request` directly:\n\n```bash\nbuildchain dev merge-queue \\\n  --repository kungfu-systems/example \\\n  --branch dev/v4/v4.0 \\\n  --workflow .github/workflows/source-acceptance.yml \\\n  --workflow .github/workflows/affected-native-pr.yml\n```\n\nThe default output is a read-only plan. Add `--apply` only after reviewing it.\nApply creates the exact-branch merge-queue ruleset before changing classic\nrequired status checks from strict to loose, preserves the required check\nidentities, and is safe to repeat. `gh` must be authenticated with repository\nAdministration write permission for apply mode.\n\nRepositories can make that policy declarative in `buildchain.toml`:\n\n```toml\n[governance.dev.merge_queue]\nmode = \"enabled\" # enabled, inherit, or disabled\nrequired_workflows = [\".github/workflows/verify.yml\"]\ncheck_response_timeout_minutes = 120\nmax_entries_to_build = 1\nbypass_users = [\"release-owner\"]\n```\n\nUse `buildchain dev merge-queue --from-config` to resolve and reconcile the\ndeclaration. `enabled` requires an exact queue on the target dev branch;\n`disabled` suppresses automatic queue creation; `inherit` copies the active\ndefault dev branch's queue parameters and bypass actors. When the table is\nabsent, release-line bootstrap uses the backward-compatible `inherit` mode.\nEvery inherited or explicitly enabled queue still validates each declared\nrequired workflow before any mutation. For a legacy repository with no table,\nan already-active exact queue on the current default dev branch is accepted as\nthe inheritance evidence; new declarations should list the workflows so future\nchanges are revalidated from source.\nThe `Dev Merge Queue Governance` workflow runs this reconciliation after\ngovernance-relevant changes land on a dev branch; its manual dispatch remains\ndry-run by default.\n\n`buildchain release line open` plans or writes the first version-state commit\nfor a new semver minor line. It does not publish anything. The dry-run mode is\nthe default and returns the dev/alpha/release refs, protection contract, default\nbranch action, and initial version before any GitHub mutation happens:\n\n```bash\nbuildchain release line open \\\n  --major 3 \\\n  --minor 1 \\\n  --source-ref release/v3/v3.0 \\\n  --json\n```\n\nThe write mode only updates local version-state files. The repository workflow\n`Release Line Bootstrap` wraps this command and, when `apply=true`, commits the\ninitial version state, creates `dev/vX/vX.Y`, `alpha/vX/vX.Y`, and\n`release/vX/vX.Y`, applies one-review branch protection, reconciles declared or\ninherited merge-queue governance, switches the default branch only after that\nreconciliation succeeds, and opens the first dev-to-alpha channel PR:\n\n```bash\nbuildchain release line open \\\n  --major 3 \\\n  --minor 1 \\\n  --source-ref release/v3/v3.0 \\\n  --write \\\n  --json\n```\n\n`buildchain` also publishes a public surface reverse audit as\n`dist/site/public-surface-audit.json`. The audit enumerates CLI commands from\n`bin/buildchain.mjs`, workflow inputs, action inputs, site pages, and docs\ncommand references, then compares them with the generated registries. Buildchain\nself-checks fail closed when an enumerable public surface is missing from the\nregistry:\n\n```js\nimport {\n  collectPublicSurfaceReverseAudit,\n  assertPublicSurfaceReverseAudit,\n} from \"@kungfu-tech/buildchain/public-surface-audit\";\n\nassertPublicSurfaceReverseAudit(\n  collectPublicSurfaceReverseAudit({ root: process.cwd() }),\n);\n```\n\n`buildchain kfd` is the product-facing KFD namespace. Schema commands expose the\nmachine-readable KFD standards shipped by `@kungfu-tech/kfd`, while versioned\nsubcommands host concrete product workflows. KFD-1, KFD-2, and KFD-3 are\nfirst-class Buildchain surfaces. KFD-4, KFD-5, and KFD-7 expose fail-closed\nproduct-evidence gate and verification protocols; passing those protocols does\nnot itself qualify, certify, activate, or ship support.\n\n`status` reports implemented support and the active repo-owned file layout.\n`migrate-layout` moves legacy root files into `.buildchain/`:\n\n```bash\nbuildchain kfd status --json\nbuildchain kfd migrate-layout --write\nbuildchain kfd 4 gate --input-json kfd-4-gate-input.json --output kfd-4-gate.json\nbuildchain kfd 5 gate --input-json kfd-5-gate-input.json --output kfd-5-gate.json\nbuildchain kfd 7 gate --input-json kfd-7-gate-input.json --output kfd-7-gate.json\nbuildchain kfd support project --matrix-json support-matrix.json \\\n  --gate-json kfd-4-gate.json --gate-json kfd-5-gate.json \\\n  --gate-json kfd-7-gate.json --output kfd-support.json\n```\n\nKFD-1 commands generate and validate contract-world release evidence:\n\n```bash\nbuildchain kfd 1 schema --json\nbuildchain kfd 1 witness --json\nbuildchain kfd 1 gate --witness-json kfd-1-witness.json --json\nbuildchain kfd 1 verify --gate-json kfd-1-gate.json --json\n```\n\nKFD-2 commands validate trust taxonomy entries and generate Buildchain's public\nclaim evidence. Product repositories use the `product-claims` subcommand to\nvalidate and render their own declared KFD-2 release claims under the canonical\nBuildchain KFD layout:\n\n```bash\nbuildchain kfd 2 schema --json\nbuildchain kfd 2 taxonomy --entry-json residual-risk.json --kind residualRisk --json\nbuildchain kfd 2 claims --json\nbuildchain kfd 2 product-claims check --json\nbuildchain kfd 2 product-claims write --json\nbuildchain kfd 2 product-claims render --json\n```\n\nThe default source is `.buildchain/kfd/kfd-2/registry.json`; outputs are\n`.buildchain/kfd/kfd-2/release-claims.json`, per-claim release-passport inputs\nunder `claims/`, and `buildchain-claim-args.txt`. Use `--registry` or\n`--output-dir` only for an explicit product packaging projection. `check` never\nwrites and exits non-zero when outputs drift.\n\nKFD-3 commands are separate from Buildchain's self reverse audit: products can\ndetect standard public surfaces, register the accepted boundary, audit the\ncurrent source or artifact tree, generate a release-passport-compatible witness,\nand expose a capability map for agents:\n\n```bash\nbuildchain kfd schema list --json\nbuildchain kfd schema show kfd-3 --json\nbuildchain kfd 3 detect --kind node-api --kind cli --json\nbuildchain kfd 3 register node-api --product Buildchain\nbuildchain kfd 3 audit --json\nbuildchain kfd 3 witness --kind prebuild --output .buildchain/kfd/kfd-3/collaboration-interface.prebuild.json\nbuildchain kfd 3 query buildchain --json\nbuildchain kfd 4 schema --json\n```\n\nThe public Node API is exported from `@kungfu-tech/buildchain/kfd`. See\n[`kfd-support.md`](kfd-support.md) for the detected / declared / enforced model\nand the agent query flow.\n\nLifecycle runs also write a Buildchain observability JSONL log at\n`.buildchain/logs/events.jsonl` by default. Framework events use\n`source=buildchain`; consumer lifecycle commands use `source=user`. This lets a\nmaintainer tell apart time spent inside Buildchain's artifact/manifest\nframework from time spent in the repository's own build, test, packaging, or\npublish commands. The artifact manifest and summary embed the observability\nsummary for that lifecycle run id, so uploaded artifacts preserve the timing\nfacts without mixing in older JSONL events.\n\n`buildchain log`, `buildchain mark`, and `buildchain span` expose the same event\nprotocol to repository scripts:\n\n```bash\nbuildchain mark --event configure.ready --phase configure --attribute target=release\nbuildchain span --event native.build --phase build -- cmake --build build\nbuildchain log warn --event cache.miss --component conan --attribute token=hidden\nbuildchain log summary --json\nbuildchain verify observability-log .buildchain/logs/events.jsonl --min-events 4 --require-phase build\nbuildchain diagnostics summary .buildchain/artifacts/*/diagnostics.json --json\nbuildchain sample process-tree --label native-build --interval-ms 15000 -- make -j20\n```\n\nDuring `buildchain lifecycle run`, child processes receive\n`BUILDCHAIN_LOG_PATH` and `BUILDCHAIN_LOG_RUN_ID`. A shell, Python, CMake, Conan,\nor JavaScript helper can call `buildchain mark` or `buildchain span` mid-build\nand have those events grouped into the same lifecycle summary.\n`buildchain verify observability-log` is a release gate: it fails when the log\nis missing, has too few events, contains error events, or does not include\nrequired phases, components, or event names.\n\nThe JSON summary also includes an additive `controlPlane` block. It counts\nworkflow-friction incident outcomes and production release-intent outcomes,\nincluding incident reuse rate, release-intent suppression rate, and suppression\nreasons. Buildchain writes those outcome events locally; it does not send\ntelemetry outside the runner.\n\nThe event protocol is JSONL and is also available from the SDK:\n\n```js\nimport { createBuildchainLogger } from \"@kungfu-tech/buildchain/logging\";\n\nconst logger = createBuildchainLogger({\n  source: \"user\",\n  component: \"native-build\",\n});\nlogger.mark(\"configure.ready\", { phase: \"configure\" });\n```\n\nSecret-looking attribute keys such as `token`, `password`, `secret`,\n`authorization`, `cookie`, and `private-key` are redacted before they are written.\nFull command strings are not recorded by `span`; scripts should provide stable\nevent names and safe attributes instead.\n\n`buildchain diagnostics summary` reads one or more small diagnostics artifacts\nand emits the same cross-platform summary as the diagnostics SDK:\n\n```bash\nbuildchain diagnostics summary \\\n  .buildchain/artifacts/linux-x64/diagnostics.json \\\n  .buildchain/artifacts/macos-arm64/diagnostics.json \\\n  --output .buildchain/artifacts/diagnostics-summary.json \\\n  --json\n```\n\nThe JSON summary keeps per-platform lifecycle stage tables, adds lifecycle\ntotal durations, carries top slow spans, aggregates warning/error counts, and\nsorts the slowest platforms. Each platform row carries compact runner facts,\nchecked tool versions/missing tools, package manager/cache directory details,\ncompiler-cache availability, and a compact process sampler summary: requested\nparallelism, observed max active processes, the ratio between them, sample\ncount, process categories, and the top sampled command basenames. This lets\nmaintainers inspect matrix timing, runner, tool, cache, and concurrency context\nwithout downloading large platform binaries or process sidecars first.\nWhen a sibling `diagnostics-manifest.json` is available, the summary also records\nits file list and verifies the listed `diagnostics.json` byte count and sha256.\nMissing, unreadable, or mismatched sidecar manifests are reported through\n`diagnosticsManifestWarningCount` and the per-platform `diagnosticsManifest`\nfield without failing the timing rollup.\nThe summary also compares each `diagnostics.json` contract to\n`BUILDCHAIN_DIAGNOSTICS_CONTRACT`; mismatches are reported through\n`diagnosticsContractWarningCount` and the per-platform `diagnosticsContract`\nfield so reviewers can separate diagnostics schema drift from lifecycle\nwarnings or build failures.\n\nWithout `--json`, the command prints a compact lifecycle timing table with\ninstall/build/verify/publish, artifact scan/upload, total, warning, and error\ncolumns for each platform, plus `jobs` and `active` columns for requested and\nobserved process concurrency when sampler data is present.\n\n`buildchain facts` collects and verifies source/version/output facts for\nmodules and products:\n\n```bash\nbuildchain facts module \\\n  --module native-core \\\n  --output .buildchain/facts/native-core.json \\\n  --legacy-kungfu-buildinfo framework/core/src/kungfu/yijinjing/kungfubuildinfo.json\n\nbuildchain facts aggregate \\\n  --product kungfu \\\n  --module-fact .buildchain/facts/native-core.json \\\n  --artifact dist/kungfu.zip \\\n  --output .buildchain/facts/kungfu.json\n\nbuildchain facts verify --fact .buildchain/facts/kungfu.json\n```\n\nThe same implementation is available from\n`@kungfu-tech/buildchain/build-facts`. Release passports can include these\nfacts with repeated `--build-facts-json` arguments to\n`buildchain collect github-release`. See\n[`build-facts.md`](build-facts.md) for the config schema and Node API.\n\n`buildchain sample process-tree` wraps a long-running command and periodically\nwrites process-tree snapshots:\n\n```bash\nbuildchain sample process-tree \\\n  --label native-build \\\n  --interval-ms 15000 \\\n  --output .buildchain/diagnostics/process-samples.jsonl \\\n  --summary-output .buildchain/diagnostics/process-summary.json \\\n  -- \\\n  make -j20\n```\n\nThe command returns the wrapped command's exit status. The JSONL file contains\nsmall timestamped samples; the summary JSON records requested parallelism,\nobserved concurrency, sampled CPU, command categories, and top command\nbasenames. Use it when a native build requests high parallelism but appears to\nspend long stretches in low-concurrency compile, archive, link, or cache steps.\n\n`buildchain doctor` checks repository readiness before remote side effects:\n\n```bash\nbuildchain doctor --json\n```\n\nIt validates `.buildchain/buildchain.toml`, package-manager detection, Git repository state,\nand the reusable workflow caller. For `version.strategy = \"anchored\"` with\n`version.next = \"manual\"`, it also embeds the anchored package release contract\ncheck: anchor manifest readability, configured version files, trusted\npublishing, package publish order, and required lifecycle stages. Add\n`--require-publish-source-lock` inside a publish job when the doctor report\nshould also fail unless the job is running from a resolved `publish-gate/*`\nsource lock.\n\nAnchored/manual package publish jobs can run the narrower source-lock gate\ndirectly:\n\n```bash\nbuildchain publish-source validate-anchored-release --json\n```\n\nThe command requires `BUILDCHAIN_PUBLISH_SOURCE_REF`,\n`BUILDCHAIN_PUBLISH_SOURCE_SHA`, and `BUILDCHAIN_PUBLISH_SOURCE_LOCKED` from the\nreusable build workflow outputs. It fails closed for direct `alpha/*` or\n`release/*` channel-branch publication, and checks the publish-gate consumer\nversion against configured version files and the anchor manifest. The JSON\nresult is shaped for future `buildchain.libkungfu.dev` fact ingestion.\n\n`buildchain release`, `buildchain web-surface`, `buildchain infra-contract`,\n`buildchain publication-artifact`, `buildchain publish-source`,\n`buildchain badges`, `buildchain homebrew`, and `buildchain build-contract`\nroute to the same implementation used by\nBuildchain's package APIs or GitHub Actions workflows. This keeps local\ninspection and CI behavior on the same implementation path.\n\nGenerate publication artifact metadata after building a paper or report:\n\n```bash\nbuildchain publication-artifact manifest \\\n  --source-sha \"$(git rev-parse HEAD)\" \\\n  --json\n```\n\nRun the fail-closed clean-room gate before Alpha or release admission:\n\n```bash\nbuildchain publication-artifact reproducibility \\\n  --source-sha \"$(git rev-parse HEAD)\" \\\n  --promote \\\n  --json\n```\n\nThe command checks two independent clones of the exact commit, isolates caches,\nderives `SOURCE_DATE_EPOCH` from Git, and compares every declared artifact,\nsource bundle, publication evidence file, npm package file, and actual npm\ntarball. It writes\n`.buildchain/publication/reproducibility-receipt.json`. Only a byte-identical\nbuild using the digest-pinned `latex-docker` toolchain is qualifying.\n`--allow-unpinned-toolchain` exists for local diagnostics and never changes the\nreceipt's `qualifying` field.\n\nGenerate the Buildchain-owned npm paper package contents from declared\npublication facts:\n\n```bash\nbuildchain publication-artifact npm-package --json\n```\n\nThis command reads `project.type = \"publication-artifact\"`,\n`publication.version`, and `[publish] kind = \"npm-paper-package\"` plus\n`publish.package`; it writes `.buildchain/publication/npm-package` by default.\nThe `paper-release.yml@v3` reusable workflow uses the same command before\nrunning the standard npm publish transaction.\n\nThe command writes `.buildchain/publication/publication-artifact.json`,\n`.buildchain/publication/publication-artifact-passport.json`, a source bundle,\nand, when `[publication.archive]` is configured,\n`.buildchain/publication/publication-registry.json` by default. See\n[`publication-artifacts.md`](publication-artifacts.md) for the repository\ncontract, pinned LaTeX builder, and reusable workflow.\n\nGenerate, check, or update the managed README badge block:\n\n```bash\nbuildchain badges readme --json\nbuildchain badges readme --check\nbuildchain badges readme --write\nbuildchain badges bundle --json\nbuildchain badges bundle --check\nbuildchain badges bundle --write\nbuildchain badges bundle --claims kfd-1,release-passport --write\n```\n\nThe `--json` form emits the `kungfu-buildchain-readme-badge-facts` object.\n`--check` fails closed when the README marker block is missing or stale.\n`--write` inserts or replaces only the marked block. KFD passed badges come\nfrom the repository's own verified release passport; unreleased repositories\ndowngrade to explicit local declarations such as `declared`, `aligned`, or\n`planned`. `buildchain badges bundle` is the focused trust-badge entrypoint: it\nemits `kungfu-buildchain-badge-bundle-facts` and defaults to KFD-1, KFD-2,\nKFD-3, and Release Passport. See [`readme-badges.md`](readme-badges.md) for the\nmarker contract and `[badges]` / `[badges.bundle]` configuration.\n\nGenerate or check Homebrew tap projections from upstream release passports:\n\n```bash\nbuildchain homebrew update-formula \\\n  --package buildchain \\\n  --release-passport https://github.com/kungfu-systems/buildchain/releases/download/v3.0.0/buildchain.release.json \\\n  --write\n\nbuildchain homebrew check --json\n```\n\n`update-formula` writes `Formula/buildchain.rb` and `tap-manifest.json` from\nupstream release passport evidence. `check` fails closed when the Formula,\nmanifest, artifact digests, or KFD status drift from the upstream passport. See\n[`homebrew.md`](homebrew.md) for the distribution-index project contract.\n\n`buildchain collect github-release` creates a release passport bundle from\nGitHub Release assets or a local asset directory:\n\n```bash\nbuildchain collect github-release \\\n  --tag v3.0.0 \\\n  --repository kungfu-systems/buildchain \\\n  --assets-dir dist \\\n  --output-dir .buildchain/release-passport\n```\n\nThe bundle includes `buildchain.release.json`, `artifact-evidence.json`,\n`impact.json`, `agent-index.json`, `product-mechanism.json`, `check-report.json`,\nand `llms.txt`. Production binary distribution defaults to GitHub-hosted\nrunners so other projects can reproduce the release lane; self-hosted runners\nremain compatibility fixtures and are recorded as runner facts when used.\n\nFor publish-transaction releases, pass the additional evidence inputs so\n`buildchain.release.json` becomes the unified passport instead of a binary-only\nasset summary:\n\n```bash\nbuildchain collect github-release \\\n  --tag v3.0.0 \\\n  --repository kungfu-systems/buildchain \\\n  --assets-dir dist \\\n  --publish-evidence-json .buildchain/release-evidence/v3.0.0/evidence.json \\\n  --transaction-json .buildchain/release-state/v3.0.0/state.json \\\n  --package-set-json package-set.json \\\n  --impact-json impact.json \\\n  --trusted-publishing-json trusted-publishing.json \\\n  --anchor-manifest-json libnode.release.json \\\n  --build-summary-json .buildchain/artifacts/build-summary.json \\\n  --platform-manifest-json .buildchain/artifacts/linux-x64/manifest.json \\\n  --platform-manifest-json .buildchain/artifacts/darwin-arm64/manifest.json \\\n  --platform-manifest-json .buildchain/artifacts/win32-x64/manifest.json \\\n  --dist-tag-evidence-json .buildchain/release-evidence/v3.0.0/dist-tag-evidence.json \\\n  --kfd-1-witness-json .buildchain/kfd/kfd-1/contract-world.witness.json \\\n  --kfd-2-claim-json .buildchain/kfd/kfd-2/release-claims.json \\\n  --kfd-3-prebuild-witness-json .buildchain/kfd/kfd-3/collaboration-interface.prebuild.json \\\n  --kfd-3-artifact-verify-cmd \"kungfu agent verify --json\" \\\n  --release-extra-json '{\"channel\":\"release\",\"targetRef\":\"release/v3/v3.0\"}' \\\n  --output-dir .buildchain/release-passport\n```\n\nThe generated passport records the main and platform packages, npm dist-tags,\npublished versions, release source/ref state, anchor manifest digest, registry\nartifact digests, trusted publishing evidence, and Buildchain transaction\nresult. It also records `buildSummary`, `platformArtifactManifests`, and\n`distTagPromotion` when those JSON inputs are supplied. `packageSet` keeps the\nordered package set; `publish.packages[]` is the agent-readable npm publication\nsummary for each main/platform package. For Buildchain releases, verification\nexpects the supplied package set to include the main package plus the three\nplatform packages with version, dist-tag, and digest evidence. Verification\nfails closed if supplied sections are internally incomplete or point to\nartifacts without matching evidence.\n\n`--kfd-1-witness-json` attaches a KFD-1 contract-world release gate. The witness\nis structured JSON: consumers declare the contract world, canonical JSON policy,\nartifact paths, and expected SHA-256 digests. Buildchain imports KFD-owned\nmetadata from `@kungfu-tech/kfd`, freezes the witness before build publication,\nthen verifies the resulting artifact bytes itself and writes the evidence under\nthe KFD-provided top-level key currently named `kfd-1`. Consumers should not\nduplicate this by running repository-specific scripts or invoking the Kungfu\nSDK from their release workflow.\n\nFor the KFD repository, KFD-1 witnesses may be self-hosted standard-contract\nwitnesses: docs, schemas, standards metadata, package exports, and\nsite-consumption entrypoints are checked from source hashes to packaged artifact\nhashes, and the passport records schema IDs, self-hosting boundary, result, and\nresponsibility state.\n\n`--kfd-2-claim-json` attaches explicit public release claims to the KFD-2\nrelease trust passport audit. Buildchain also derives KFD-2 claims from KFD-1\nand KFD-3 gate evidence. Public claims must bind declared sources,\nmachine-readable evidence, hashes, artifact coordinates, verification results,\naudit boundary, responsibility state, and residual risk. Unbound claims fail\npassport verification; prose-only claims downgrade the KFD-2 audit and emit a\nwarning.\n\n`--kfd-3-prebuild-witness-json` attaches a KFD-3 collaboration-interface\nrelease gate. The product remains the source of truth: it emits a pre-build\nwitness that contains or points to its KFD-3 collaboration interface, declared\nparticipant-facing public surfaces, and registry digest. Buildchain freezes\nthat declaration before publication. The artifact side is supplied either by\n`--kfd-3-artifact-witness-json` or by a product-owned command such as\n`--kfd-3-artifact-verify-cmd \"kungfu agent verify --json\"`. Buildchain then\nchecks closure: every declared shipped public surface must be present in the\nartifact witness, and every artifact-exposed participant-facing public surface\nmust have been declared. The generated passport writes this evidence under the\nKFD-provided top-level key currently named `kfd-3`.\n\nThis gate is useful for agent-facing products because it turns KFD-3 from prose\ninto release evidence. A package cannot claim KFD-3 collaboration-interface\nsupport merely because the docs mention it; the release passport must show the\nfrozen declaration, the artifact-side witness digest, and a passing closure\ncomparison.\n\n`--invariant-passport-json` attaches a product-owned invariant Passport to the\nrelease gate and may be repeated. `--invariant-passport-cmd` runs a product\ncommand that emits one Passport JSON document. Buildchain verifies the\nPassport root, exact clean source identity, `verified` verdict, complete\nplatform coverage, and residual-risk shape; it does not redefine the product's\ninvariant semantics. Declared invariant Passport input is fail-closed.\nFor the KFD repository itself, the witness can declare docs, schemas, standards\nmetadata, package exports, and site-consumption contracts as grouped public\nsurfaces; the artifact witness must expose the same enumerable package/site\nsurfaces or verification fails closed.\n\n`--impact-json` supplies the surface-aware impact ledger. Production release\npassports (`release/*`) and major publish-gate passports require\n`surfaceImpacts[]`; alpha, local, and legacy passport contexts keep it\noptional. When `surfaceImpacts[]` is required or supplied, the verifier requires\neach entry to include an id, impact, and rationale, and requires\n`versionImpact.final` to match the highest declared surface impact. The\ncollector copies `versionImpact` plus `surfaceImpacts` into\n`buildchain.release.json`. This lets\n`buildchain explain release --for agent --json` state why a release is patch,\nminor, or major instead of relying on file-path memory.\n\nFor a promote-only stable transaction, Buildchain can derive a patch-level\nrelease-governance ledger when the PR-stage release-candidate passport proves\nthe stable source tree is exactly the previously qualified candidate tree.\nThis fallback is unavailable when candidate evidence is absent, stale, or not\ntree-equivalent.\n\nBuildchain dogfoods its observability toolkit in this lane. The standalone\nbuilder writes API-generated events, while the workflow uses `buildchain mark`,\n`buildchain span`, `buildchain verify observability-log`, and `buildchain log\nsummary`; the event logs and summaries are published as release passport assets.\n\nVerify and explain release passports:\n\n```bash\nbuildchain verify release-passport .buildchain/release-passport/buildchain.release.json\nbuildchain explain release --passport .buildchain/release-passport/buildchain.release.json --for agent --json\nbuildchain inspect release --passport .buildchain/release-passport/buildchain.release.json\n```\n\nThe verifier fails closed when required protocol files are absent, artifacts are\nnot covered by evidence, or digests disagree. The explanation output is shaped\nfor agents: trust, completeness, impact, recovery route, and next action.\n\nVerify a published artifact by subject:\n\n```bash\nbuildchain verify artifact ./Kungfu-2.8.0-windows-x64.exe\nbuildchain inspect artifact ./Kungfu-2.8.0-windows-x64.exe --json\nbuildchain explain artifact ./Kungfu-2.8.0-windows-x64.exe --for agent --json\nbuildchain verify artifact npm:@kungfu-tech/libnode@22.22.3-kf.3-alpha.18 \\\n  --repository kungfu-systems/libnode \\\n  --tag v22.22.3-kf.3-alpha.18 \\\n  --json\n```\n\n`verify artifact` computes or obtains the subject digest, discovers the\ndetached release passport, verifies the passport, then requires that the\nsubject digest appears in the passport's release assets, package set, publish\nevidence, or artifact evidence. Outcomes are explicit: `pass`, `fail`, or\n`unverifiable`. A filename is only a hint; trust comes from digest equality.\nFor `npm:<name>@<version>` subjects, Buildchain resolves `dist.integrity` from\nthe npm registry before matching passport evidence. Use `--npm-registry <url>`\nto verify packages from a custom registry; otherwise Buildchain uses\n`npm_config_registry` or `https://registry.npmjs.org/`.\n\nDiscovery is fail-closed and ordered:\n\n1. `--passport <file-or-url>`.\n2. Sidecar pointer, such as `<artifact>.buildchain-passport.json`.\n3. Embedded/package pointer, such as `package.json` `buildchain.releasePassport`.\n4. Local config or org index, such as `.buildchain/artifact-passport-locators.json`.\n5. GitHub Release default discovery from `github-release:` subjects, GitHub\n   Release asset URLs, or `--repository <owner/repo> --tag <tag>`.\n6. Custom `--locator-config <json-or-url>`.\n7. `unverifiable` with retry guidance.\n\nLocator files are policy, not protocol. They map subject fields such as\n`name`, `kind`, `version`, `digest`, `repository`, or `tag` to a detached\npassport location:\n\n```json\n{\n  \"schemaVersion\": 1,\n  \"contract\": \"kungfu-buildchain-artifact-passport-locator\",\n  \"locators\": [\n    {\n      \"match\": {\n        \"name\": \"Kungfu-2.8.0-windows-x64.exe\",\n        \"digest\": \"sha256:...\"\n      },\n      \"passport\": \"../release-passport/buildchain.release.json\"\n    }\n  ]\n}\n```\n\nSupported subject shapes include local files and directories, URLs,\n`npm:<name>@<version>`, `oci:...`, `s3:...`,\n`github-release:<owner/repo>@<tag>/<asset>`, and deployment endpoints. Local\nfiles, directories, and URLs are digestable directly; remote package, OCI,\nobject storage, and deployment subjects should provide a digest or resolve to a\nlocator that records one.\n\nSeal an exact artifact verification with the Node API, then verify or project\nthe resulting KFX admission envelope without reconstructing its roots:\n\n```bash\nbuildchain verify artifact-envelope envelope.json \\\n  --assessment-time 150 \\\n  --expected-root sha256:... \\\n  --expected-issuer buildchain.libkungfu.dev \\\n  --expected-publisher kungfu-systems \\\n  --expected-contract buildchain.release/v1 \\\n  --json\n\nbuildchain project kfx-admission envelope.json \\\n  --assessment-time 150 \\\n  --json\n```\n\nBoth commands call the public artifact-verification-envelope verifier. The\nprojected `attestation`, `trustInputs`, and `kfdAssessment` are direct copies of\nthe sealed envelope, and `envelopeRoot` stays identical across Node and CLI.\nSee [`artifact-verification-envelope.md`](artifact-verification-envelope.md).\n\nVerify infra-contract lifecycle evidence bundles:\n\n```bash\nbuildchain infra-contract --mode ci --source-sha \"$GITHUB_SHA\"\nbuildchain verify infra-contract-evidence-bundle .buildchain/infra-contract-evidence-bundle.json\n```\n\nThe infra-contract `ci` mode is mutation-free. It writes validate, plan,\ncontract, propagation dry-run, evidence bundle, and verification JSON artifacts\nunder `.buildchain/`, giving reusable workflows one standard responsibility\nchain instead of hand-written command sequences.\n\nThe infra-contract verifier is read-only. It recomputes the bundle hash and\nchecks that desired, plan, approval, apply, observe, contract, and propagate\nevidence remain bound to the same contract artifact. It also recomputes the\nbundle validation summary, so stale or misleading summary booleans fail closed\neven when the bundle hash has been refreshed.\n\n`buildchain release --dry-run` explains the release-line state machine before a\nmaintainer opens or merges a channel PR:\n\n```bash\nbuildchain release --dry-run --target-ref alpha/v3/v3.0\nbuildchain release --dry-run --target-ref release/v3/v3.0 --sha <verified-sha>\nbuildchain release dry-run --target-ref publish-gate/major --source-ref release/v3/v3.0\nbuildchain release explain --target-ref alpha/v3/v3.0 --json\n```\n\nThis is a Buildchain-level dry-run, not an npm dry-run. It explains the legal\nsource branch, exact release or alpha tags, floating tags, channel branches,\nversion-state files, governance checks, and publish transaction behavior that\nwould apply if the corresponding PR merge were promoted. It does not move\nbranches, move tags, edit files, publish npm packages, or run lifecycle publish\ncommands. `release explain` is the same explanation surface with a clearer name.\nPass `--json` for a machine-readable plan.\n\n`buildchain transaction inspect` is the top-level recovery inspection command\nfor the publish transaction state:\n\n```bash\nbuildchain transaction inspect --version v3.0.1-alpha.2\n```\n\nIt reads or locally initializes the durable transaction record and validates\navailable publish evidence. Remote durable refs and public Git ref finalization\nremain owned by `actions/promote-buildchain-ref`; the CLI inspection surface is\nfor preflight and recovery reasoning before a maintainer reruns or resumes a\npromotion.\n\n`buildchain npm dry-run` verifies the package shape before a release tag exists:\n\n```bash\nbuildchain npm dry-run --json\n```\n\nThe command validates `package.json`, infers the exact release tag\n`v${package.json.version}`, chooses npm dist-tag `alpha` for prereleases and\n`latest` for stable releases, runs `npm pack --dry-run --json`, and then runs\n`npm publish --dry-run --access public --tag <alpha|latest>` unless\n`--skip-npm-publish-dry-run` is passed. It never performs a real publish.\n\n## npm Publish Gate\n\nBuildchain's own npm package is published from\n`.github/workflows/buildchain-ref-promotion.yml`, inside the same publish\ntransaction that promotes release refs:\n\n- `v3.0.3-alpha.0` publishes to npm with dist-tag `alpha`.\n- `v3.0.2` publishes to npm with dist-tag `latest`.\n- moving refs such as `v3`, `v3.0`, and `v3.0-alpha` do not match the publish\n  workflow and do not publish.\n\nThe promotion workflow uses npm Trusted Publishing through GitHub Actions OIDC.\nIt runs on a GitHub-hosted runner with `id-token: write`, but it does not\nmanually run the release-candidate resolver or promote action. Buildchain's own\ndogfood path calls the declarative `release-candidate-promote.yml` wrapper with\nchannel, target ref/SHA, PR-stage workflow, artifact, status-check, and passport\ninputs. The wrapper generates the version-state commit, runs\n`lifecycle.verify`, runs `lifecycle.publish`, writes Buildchain publish\nevidence, validates that evidence, and only then moves exact tags and floating\nrefs.\n\n```bash\nnode scripts/npm-publish-transaction.mjs\n```\n\nBefore the first real release, configure npm Trusted Publishing for:\n\n- package: `@kungfu-tech/buildchain`\n- repository: `kungfu-systems/buildchain`\n- workflow: `.github/workflows/buildchain-ref-promotion.yml`\n\nNo npm package is published by manual dispatch or ordinary branch builds.\nManual dispatch on `.github/workflows/npm-publish.yml` remains dry-run only, so\nmaintainers can verify package contents and npm publish shape before opening or\nmerging the release PR."
+      "markdown": "---\nstatus: active\nperiod: ongoing\ntheme: buildchain-generated-reference\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: generated\nlast_reviewed: 2026-08-01\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-08-01\n  invisible_context: not asserted\n---\n\n# Buildchain CLI Reference\n\n> Generated from `BUILDCHAIN_USAGE` and the runtime command registry. Do not edit this file by hand.\n\nEvery listed help command is intercepted before dispatch, exits zero, and performs no command side effects.\n\n## `audit`\n\n### `buildchain audit`\n\n- Help: `buildchain audit --help`\n- Canonical id: `audit`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain audit\n```\n\n### `buildchain audit github-governance`\n\n- Help: `buildchain audit github-governance --help`\n- Canonical id: `audit`\n- Options: `--allow-nonqualifying`, `--environment`, `--job`, `--json`, `--npm-trust-json`, `--organization`, `--output`, `--package`, `--provider-audit-json`, `--publisher-mode`, `--repository`, `--require-qualifying`, `--source-sha`, `--workflow`, `--workflow-ref`, `--workflow-repository`\n- Syntax:\n\n```text\nbuildchain audit github-governance [--organization <owner>] [--repository <owner/repo>] [--output <file>] [--require-qualifying] [--json] [--source-sha <merged-branch-sha>] [--workflow-repository <owner/repo>] [--workflow <path>] [--workflow-ref <sha-or-ref>] [--job <id>] [--environment <name>] [--package <name>] [--publisher-mode npm-trusted-publisher|github-token|oidc-role] [--npm-trust-json <file-or-json>] [--provider-audit-json <file>] [--output <file>] [--allow-nonqualifying]\n```\n\n### `buildchain audit publication-control-plane`\n\n- Help: `buildchain audit publication-control-plane --help`\n- Canonical id: `audit`\n- Options: `--branch`, `--repository`\n- Syntax:\n\n```text\nbuildchain audit publication-control-plane --repository <owner/repo> --branch <protected-branch>\n```\n\n## `badges`\n\n### `buildchain badges`\n\n- Help: `buildchain badges --help`\n- Canonical id: `badges`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain badges\n```\n\n### `buildchain badges bundle`\n\n- Help: `buildchain badges bundle --help`\n- Canonical id: `badges-bundle`\n- Options: `--check`, `--claims`, `--cwd`, `--json`, `--readme`, `--write`\n- Syntax:\n\n```text\nbuildchain badges bundle [--cwd <dir>] [--readme <path>] [--claims <csv>] [--check] [--write] [--json]\n```\n\n### `buildchain badges readme`\n\n- Help: `buildchain badges readme --help`\n- Canonical id: `badges-readme`\n- Options: `--check`, `--cwd`, `--json`, `--readme`, `--write`\n- Syntax:\n\n```text\nbuildchain badges readme [--cwd <dir>] [--readme <path>] [--check] [--write] [--json]\n```\n\n## `build-contract`\n\n### `buildchain build-contract`\n\n- Help: `buildchain build-contract --help`\n- Canonical id: `build-contract`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain build-contract ...\n```\n\n## `candidate`\n\n### `buildchain candidate`\n\n- Help: `buildchain candidate --help`\n- Canonical id: `candidate`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain candidate\n```\n\n### `buildchain candidate timeline`\n\n- Help: `buildchain candidate timeline --help`\n- Canonical id: `candidate`\n- Options: `--input`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain candidate timeline --input <file-or-json> [--output <file>] [--json]\n```\n\n## `collect`\n\n### `buildchain collect`\n\n- Help: `buildchain collect --help`\n- Canonical id: `collect`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain collect\n```\n\n### `buildchain collect github-release`\n\n- Help: `buildchain collect github-release --help`\n- Canonical id: `collect-github-release`\n- Options: `--anchor-manifest-json`, `--assets-dir`, `--assets-json`, `--base-passport-json`, `--build-facts-json`, `--build-summary-json`, `--dist-tag-evidence-json`, `--github-artifact-attestation-policy-json`, `--impact-json`, `--invariant-passport-cmd`, `--invariant-passport-json`, `--json`, `--kfd-1-witness-json`, `--kfd-2-claim-json`, `--kfd-3-artifact-verify-cmd`, `--kfd-3-artifact-witness-json`, `--kfd-3-prebuild-witness-json`, `--kfd-agent-hub-evidence-json`, `--kfd-product-gate-json`, `--kfd-support-matrix-json`, `--output-dir`, `--package-set-json`, `--platform-manifest-json`, `--product-name`, `--publish-evidence-json`, `--publish-json`, `--release-evidence-json`, `--release-extra-json`, `--release-json`, `--repository`, `--require-base-kfd`, `--tag`, `--transaction-json`, `--trusted-publishing-json`\n- Syntax:\n\n```text\nbuildchain collect github-release --tag <tag> [--repository <owner/repo>] [--assets-dir <dir>] [--assets-json <json-or-path>] [--release-json <json-or-path>] [--package-set-json <json-or-path>] [--product-name <name>] [--publish-evidence-json <json-or-path>] [--trusted-publishing-json <json-or-path>] [--transaction-json <json-or-path>] [--anchor-manifest-json <json-or-path>] [--impact-json <json-or-path>] [--build-summary-json <json-or-path>] [--build-facts-json <json-or-path>]... [--platform-manifest-json <json-or-path>]... [--dist-tag-evidence-json <json-or-path>] [--kfd-1-witness-json <json-or-path>]... [--kfd-2-claim-json <json-or-path>]... [--kfd-3-prebuild-witness-json <json-or-path>]... [--kfd-3-artifact-witness-json <json-or-path>]... [--kfd-3-artifact-verify-cmd <command>] [--kfd-support-matrix-json <json-or-path>] [--kfd-product-gate-json <json-or-path>]... [--invariant-passport-json <json-or-path>]... [--invariant-passport-cmd <command>] [--release-evidence-json <json-or-path>]... [--github-artifact-attestation-policy-json <json-or-path>]... [--kfd-agent-hub-evidence-json <json-or-path>] [--base-passport-json <json-or-path>] [--require-base-kfd] [--release-extra-json <json-or-path>] [--publish-json <json-or-path>] [--output-dir <dir>] [--json]\n```\n\n## `create`\n\n### `buildchain create`\n\n- Help: `buildchain create --help`\n- Canonical id: `create`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain create\n```\n\n### `buildchain create github-artifact-attestation-policy`\n\n- Help: `buildchain create github-artifact-attestation-policy --help`\n- Canonical id: `create`\n- Options: `--input-json`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain create github-artifact-attestation-policy --input-json <file-or-json> [--output <file>] [--json]\n```\n\n### `buildchain create publication-admission`\n\n- Help: `buildchain create publication-admission --help`\n- Canonical id: `create`\n- Options: `--input-json`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain create publication-admission --input-json <file-or-json> [--output <file>] [--json]\n```\n\n### `buildchain create runner-provenance`\n\n- Help: `buildchain create runner-provenance --help`\n- Canonical id: `create`\n- Options: `--input-json`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain create runner-provenance --input-json <file-or-json> [--output <file>] [--json]\n```\n\n## `dev`\n\n### `buildchain dev`\n\n- Help: `buildchain dev --help`\n- Canonical id: `dev`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain dev\n```\n\n### `buildchain dev merge-queue`\n\n- Help: `buildchain dev merge-queue --help`\n- Canonical id: `dev`\n- Options: `--apply`, `--branch`, `--check-response-timeout-minutes`, `--cwd`, `--from-config`, `--max-entries-to-build`, `--repository`, `--workflow`\n- Syntax:\n\n```text\nbuildchain dev merge-queue --repository <owner/repo> --branch <dev/vN/vN.M> [--from-config | --workflow <required-workflow.yml>...] [--cwd <dir>] [--check-response-timeout-minutes <n>] [--max-entries-to-build <n>] [--apply]\n```\n\n## `diagnostics`\n\n### `buildchain diagnostics`\n\n- Help: `buildchain diagnostics --help`\n- Canonical id: `diagnostics`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain diagnostics\n```\n\n### `buildchain diagnostics summary`\n\n- Help: `buildchain diagnostics summary --help`\n- Canonical id: `diagnostics-summary`\n- Options: `--artifact`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain diagnostics summary <diagnostics.json>... [--artifact <file>]... [--output <file>] [--json]\n```\n\n## `doctor`\n\n### `buildchain doctor`\n\n- Help: `buildchain doctor --help`\n- Canonical id: `doctor`\n- Options: `--cwd`, `--json`, `--require-publish-source-lock`\n- Syntax:\n\n```text\nbuildchain doctor [--cwd <dir>] [--require-publish-source-lock] [--json]\n```\n\n## `explain`\n\n### `buildchain explain`\n\n- Help: `buildchain explain --help`\n- Canonical id: `explain`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain explain\n```\n\n### `buildchain explain artifact`\n\n- Help: `buildchain explain artifact --help`\n- Canonical id: `explain-artifact`\n- Options: `--for`, `--json`, `--npm-registry`, `--passport`\n- Syntax:\n\n```text\nbuildchain explain artifact <subject> [--passport <file-or-url>] [--npm-registry <url>] [--for human|agent] [--json]\n```\n\n### `buildchain explain release`\n\n- Help: `buildchain explain release --help`\n- Canonical id: `explain-release`\n- Options: `--for`, `--json`, `--passport`\n- Syntax:\n\n```text\nbuildchain explain release --passport <file-or-url> [--for human|agent] [--json]\n```\n\n## `facts`\n\n### `buildchain facts`\n\n- Help: `buildchain facts --help`\n- Canonical id: `facts`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain facts\n```\n\n### `buildchain facts aggregate`\n\n- Help: `buildchain facts aggregate --help`\n- Canonical id: `build-facts`\n- Options: `--artifact`, `--cwd`, `--json`, `--module-fact`, `--output`, `--product`\n- Syntax:\n\n```text\nbuildchain facts aggregate [--cwd <dir>] [--product <id>] [--module-fact <file>]... [--artifact <path>]... [--output <file>] [--json]\n```\n\n### `buildchain facts module`\n\n- Help: `buildchain facts module --help`\n- Canonical id: `build-facts`\n- Options: `--cwd`, `--json`, `--legacy-kungfu-buildinfo`, `--module`, `--module-root`, `--output`, `--output-path`, `--version-source`\n- Syntax:\n\n```text\nbuildchain facts module [--cwd <dir>] [--module <id>] [--module-root <path>] [--version-source <id>] [--output <file>] [--output-path <path>]... [--legacy-kungfu-buildinfo <file>] [--json]\n```\n\n### `buildchain facts verify`\n\n- Help: `buildchain facts verify --help`\n- Canonical id: `build-facts`\n- Options: `--cwd`, `--fact`, `--json`\n- Syntax:\n\n```text\nbuildchain facts verify [--cwd <dir>] --fact <file> [--json]\n```\n\n## `github-governance`\n\n### `buildchain github-governance`\n\n- Help: `buildchain github-governance --help`\n- Canonical id: `github-governance`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain github-governance\n```\n\n### `buildchain github-governance apply`\n\n- Help: `buildchain github-governance apply --help`\n- Canonical id: `github-governance`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain github-governance <plan|apply|rollback|protection-policy-plan|ruleset-policy-plan> ...\n```\n\n### `buildchain github-governance plan`\n\n- Help: `buildchain github-governance plan --help`\n- Canonical id: `github-governance`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain github-governance <plan|apply|rollback|protection-policy-plan|ruleset-policy-plan> ...\n```\n\n### `buildchain github-governance protection-policy-plan`\n\n- Help: `buildchain github-governance protection-policy-plan --help`\n- Canonical id: `github-governance`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain github-governance <plan|apply|rollback|protection-policy-plan|ruleset-policy-plan> ...\n```\n\n### `buildchain github-governance rollback`\n\n- Help: `buildchain github-governance rollback --help`\n- Canonical id: `github-governance`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain github-governance <plan|apply|rollback|protection-policy-plan|ruleset-policy-plan> ...\n```\n\n### `buildchain github-governance ruleset-policy-plan`\n\n- Help: `buildchain github-governance ruleset-policy-plan --help`\n- Canonical id: `github-governance`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain github-governance <plan|apply|rollback|protection-policy-plan|ruleset-policy-plan> ...\n```\n\n## `help`\n\n### `buildchain help`\n\n- Help: `buildchain help --help`\n- Canonical id: `help`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain help\n```\n\n## `homebrew`\n\n### `buildchain homebrew`\n\n- Help: `buildchain homebrew --help`\n- Canonical id: `homebrew`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain homebrew\n```\n\n### `buildchain homebrew check`\n\n- Help: `buildchain homebrew check --help`\n- Canonical id: `homebrew-check`\n- Options: `--cwd`, `--json`, `--package`, `--release-passport`\n- Syntax:\n\n```text\nbuildchain homebrew check [--cwd <dir>] [--package <name>] [--release-passport <file-or-url>] [--json]\n```\n\n### `buildchain homebrew update-formula`\n\n- Help: `buildchain homebrew update-formula --help`\n- Canonical id: `homebrew-update-formula`\n- Options: `--json`, `--package`, `--release-passport`, `--write`\n- Syntax:\n\n```text\nbuildchain homebrew update-formula --package <name> --release-passport <file-or-url> [--write] [--json]\n```\n\n## `infra-contract`\n\n### `buildchain infra-contract`\n\n- Help: `buildchain infra-contract --help`\n- Canonical id: `infra-contract`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain infra-contract ...\n```\n\n## `init`\n\n### `buildchain init`\n\n- Help: `buildchain init --help`\n- Canonical id: `init`\n- Options: `--artifact-name`, `--cwd`, `--force`, `--package-manager`, `--runner-preset`, `--type`\n- Syntax:\n\n```text\nbuildchain init [--cwd <dir>] [--type package|native|web-surface|infra-contract|publication-artifact|anchored-package] [--force] [--package-manager pnpm|npm|yarn] [--runner-preset <preset>] [--artifact-name <template>]\n```\n\n## `inspect`\n\n### `buildchain inspect`\n\n- Help: `buildchain inspect --help`\n- Canonical id: `inspect`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain inspect\n```\n\n### `buildchain inspect artifact`\n\n- Help: `buildchain inspect artifact --help`\n- Canonical id: `inspect-artifact`\n- Options: `--json`, `--npm-registry`, `--passport`\n- Syntax:\n\n```text\nbuildchain inspect artifact <subject> [--passport <file-or-url>] [--npm-registry <url>] [--json]\n```\n\n### `buildchain inspect release`\n\n- Help: `buildchain inspect release --help`\n- Canonical id: `inspect-release`\n- Options: `--json`, `--passport`\n- Syntax:\n\n```text\nbuildchain inspect release --passport <file-or-url> [--json]\n```\n\n## `kfd`\n\n### `buildchain kfd`\n\n- Help: `buildchain kfd --help`\n- Canonical id: `kfd`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain kfd ...\n```\n\n### `buildchain kfd 1 gate`\n\n- Help: `buildchain kfd 1 gate --help`\n- Canonical id: `kfd-1-gate`\n- Options: `--artifact-root`, `--cwd`, `--json`, `--output`, `--witness-json`\n- Syntax:\n\n```text\nbuildchain kfd 1 gate --witness-json <file-or-json>... [--cwd <dir>] [--artifact-root <dir>] [--output <file>] [--json]\n```\n\n### `buildchain kfd 1 schema`\n\n- Help: `buildchain kfd 1 schema --help`\n- Canonical id: `kfd-1-schema`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd 1 schema [--schema <name>] [--json]\n```\n\n### `buildchain kfd 1 verify`\n\n- Help: `buildchain kfd 1 verify --help`\n- Canonical id: `kfd-1-verify`\n- Options: `--gate-json`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd 1 verify --gate-json <file-or-json> [--json]\n```\n\n### `buildchain kfd 1 witness`\n\n- Help: `buildchain kfd 1 witness --help`\n- Canonical id: `kfd-1-witness`\n- Options: `--cwd`, `--json`, `--output`, `--source-sha`\n- Syntax:\n\n```text\nbuildchain kfd 1 witness [--cwd <dir>] [--source-sha <sha>] [--output <file>] [--json]\n```\n\n### `buildchain kfd 2 claims`\n\n- Help: `buildchain kfd 2 claims --help`\n- Canonical id: `kfd-2-claims`\n- Options: `--cwd`, `--json`, `--output-dir`\n- Syntax:\n\n```text\nbuildchain kfd 2 claims [--cwd <dir>] [--output-dir <dir>] [--json]\n```\n\n### `buildchain kfd 2 product-claims check`\n\n- Help: `buildchain kfd 2 product-claims check --help`\n- Canonical id: `kfd-2-product-claims`\n- Options: `--channel`, `--cwd`, `--json`, `--output-dir`, `--registry`, `--source-sha`, `--tag`, `--version`\n- Syntax:\n\n```text\nbuildchain kfd 2 product-claims <check|write|render> [--cwd <dir>] [--registry <path>] [--output-dir <dir>] [--version <version>] [--channel <channel>] [--tag <tag>] [--source-sha <sha>] [--json]\n```\n\n### `buildchain kfd 2 product-claims render`\n\n- Help: `buildchain kfd 2 product-claims render --help`\n- Canonical id: `kfd-2-product-claims`\n- Options: `--channel`, `--cwd`, `--json`, `--output-dir`, `--registry`, `--source-sha`, `--tag`, `--version`\n- Syntax:\n\n```text\nbuildchain kfd 2 product-claims <check|write|render> [--cwd <dir>] [--registry <path>] [--output-dir <dir>] [--version <version>] [--channel <channel>] [--tag <tag>] [--source-sha <sha>] [--json]\n```\n\n### `buildchain kfd 2 product-claims write`\n\n- Help: `buildchain kfd 2 product-claims write --help`\n- Canonical id: `kfd-2-product-claims`\n- Options: `--channel`, `--cwd`, `--json`, `--output-dir`, `--registry`, `--source-sha`, `--tag`, `--version`\n- Syntax:\n\n```text\nbuildchain kfd 2 product-claims <check|write|render> [--cwd <dir>] [--registry <path>] [--output-dir <dir>] [--version <version>] [--channel <channel>] [--tag <tag>] [--source-sha <sha>] [--json]\n```\n\n### `buildchain kfd 2 schema`\n\n- Help: `buildchain kfd 2 schema --help`\n- Canonical id: `kfd-2-schema`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd 2 schema [--schema <name>] [--json]\n```\n\n### `buildchain kfd 2 taxonomy`\n\n- Help: `buildchain kfd 2 taxonomy --help`\n- Canonical id: `kfd-2-taxonomy`\n- Options: `--entry-json`, `--json`, `--kind`\n- Syntax:\n\n```text\nbuildchain kfd 2 taxonomy --entry-json <file-or-json>... [--kind residualRisk|downgradeReason] [--json]\n```\n\n### `buildchain kfd 2 trust-assessment`\n\n- Help: `buildchain kfd 2 trust-assessment --help`\n- Canonical id: `kfd-2-trust-assessment`\n- Options: `--assessment-json`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd 2 trust-assessment [--assessment-json <file-or-json>] [--json]\n```\n\n### `buildchain kfd 2 trust-claims`\n\n- Help: `buildchain kfd 2 trust-claims --help`\n- Canonical id: `kfd-2-trust-claims`\n- Options: `--claims-json`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd 2 trust-claims [--claims-json <file-or-json>] [--json]\n```\n\n### `buildchain kfd 3`\n\n- Help: `buildchain kfd 3 --help`\n- Canonical id: `kfd-3`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain kfd 3 ...\n```\n\n### `buildchain kfd 3 audit`\n\n- Help: `buildchain kfd 3 audit --help`\n- Canonical id: `kfd-3-audit`\n- Options: `--artifact`, `--cwd`, `--json`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 audit [--cwd <dir>] [--registry <path>] [--artifact <path>] [--json]\n```\n\n### `buildchain kfd 3 detect`\n\n- Help: `buildchain kfd 3 detect --help`\n- Canonical id: `kfd-3-detect`\n- Options: `--artifact`, `--cwd`, `--json`, `--kind`\n- Syntax:\n\n```text\nbuildchain kfd 3 detect [--cwd <dir>] [--kind <kind>]... [--artifact <path>] [--json]\n```\n\n### `buildchain kfd 3 query`\n\n- Help: `buildchain kfd 3 query --help`\n- Canonical id: `kfd-3-query`\n- Options: `--artifact`, `--cwd`, `--json`, `--passport`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 query [<product>] [--cwd <dir>] [--registry <path>] [--passport <file-or-url>] [--artifact <path>] [--json]\n```\n\n### `buildchain kfd 3 register binary`\n\n- Help: `buildchain kfd 3 register binary --help`\n- Canonical id: `kfd-3-register`\n- Options: `--artifact`, `--cwd`, `--json`, `--product`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 register <node-api|python-api|cli|binary|documentation|site-bundle> [--cwd <dir>] [--registry <path>] [--artifact <path>] [--product <name>] [--json]\n```\n\n### `buildchain kfd 3 register cli`\n\n- Help: `buildchain kfd 3 register cli --help`\n- Canonical id: `kfd-3-register`\n- Options: `--artifact`, `--cwd`, `--json`, `--product`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 register <node-api|python-api|cli|binary|documentation|site-bundle> [--cwd <dir>] [--registry <path>] [--artifact <path>] [--product <name>] [--json]\n```\n\n### `buildchain kfd 3 register documentation`\n\n- Help: `buildchain kfd 3 register documentation --help`\n- Canonical id: `kfd-3-register`\n- Options: `--artifact`, `--cwd`, `--json`, `--product`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 register <node-api|python-api|cli|binary|documentation|site-bundle> [--cwd <dir>] [--registry <path>] [--artifact <path>] [--product <name>] [--json]\n```\n\n### `buildchain kfd 3 register node-api`\n\n- Help: `buildchain kfd 3 register node-api --help`\n- Canonical id: `kfd-3-register`\n- Options: `--artifact`, `--cwd`, `--json`, `--product`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 register <node-api|python-api|cli|binary|documentation|site-bundle> [--cwd <dir>] [--registry <path>] [--artifact <path>] [--product <name>] [--json]\n```\n\n### `buildchain kfd 3 register python-api`\n\n- Help: `buildchain kfd 3 register python-api --help`\n- Canonical id: `kfd-3-register`\n- Options: `--artifact`, `--cwd`, `--json`, `--product`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 register <node-api|python-api|cli|binary|documentation|site-bundle> [--cwd <dir>] [--registry <path>] [--artifact <path>] [--product <name>] [--json]\n```\n\n### `buildchain kfd 3 register site-bundle`\n\n- Help: `buildchain kfd 3 register site-bundle --help`\n- Canonical id: `kfd-3-register`\n- Options: `--artifact`, `--cwd`, `--json`, `--product`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 register <node-api|python-api|cli|binary|documentation|site-bundle> [--cwd <dir>] [--registry <path>] [--artifact <path>] [--product <name>] [--json]\n```\n\n### `buildchain kfd 3 witness`\n\n- Help: `buildchain kfd 3 witness --help`\n- Canonical id: `kfd-3-witness`\n- Options: `--artifact`, `--cwd`, `--json`, `--kind`, `--output`, `--registry`, `--source-sha`\n- Syntax:\n\n```text\nbuildchain kfd 3 witness [--cwd <dir>] [--registry <path>] [--kind prebuild|artifact] [--source-sha <sha>] [--artifact <path>] [--output <file>] [--json]\n```\n\n### `buildchain kfd 4 gate`\n\n- Help: `buildchain kfd 4 gate --help`\n- Canonical id: `kfd-4-gate`\n- Options: `--cwd`, `--input-json`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain kfd 4 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]\n```\n\n### `buildchain kfd 4 schema`\n\n- Help: `buildchain kfd 4 schema --help`\n- Canonical id: `kfd-4-schema`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd 4 schema [--schema <name>] [--json]\n```\n\n### `buildchain kfd 4 verify`\n\n- Help: `buildchain kfd 4 verify --help`\n- Canonical id: `kfd-4-verify`\n- Options: `--expected-source-sha`, `--gate-json`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd 4 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]\n```\n\n### `buildchain kfd 5 gate`\n\n- Help: `buildchain kfd 5 gate --help`\n- Canonical id: `kfd-5-gate`\n- Options: `--cwd`, `--input-json`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain kfd 5 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]\n```\n\n### `buildchain kfd 5 schema`\n\n- Help: `buildchain kfd 5 schema --help`\n- Canonical id: `kfd-5-schema`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd 5 schema [--schema <name>] [--json]\n```\n\n### `buildchain kfd 5 verify`\n\n- Help: `buildchain kfd 5 verify --help`\n- Canonical id: `kfd-5-verify`\n- Options: `--expected-source-sha`, `--gate-json`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd 5 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]\n```\n\n### `buildchain kfd 7 gate`\n\n- Help: `buildchain kfd 7 gate --help`\n- Canonical id: `kfd-7-gate`\n- Options: `--cwd`, `--input-json`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain kfd 7 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]\n```\n\n### `buildchain kfd 7 schema`\n\n- Help: `buildchain kfd 7 schema --help`\n- Canonical id: `kfd-7-schema`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd 7 schema [--schema <name>] [--json]\n```\n\n### `buildchain kfd 7 verify`\n\n- Help: `buildchain kfd 7 verify --help`\n- Canonical id: `kfd-7-verify`\n- Options: `--expected-source-sha`, `--gate-json`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd 7 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]\n```\n\n### `buildchain kfd aggregate`\n\n- Help: `buildchain kfd aggregate --help`\n- Canonical id: `kfd-aggregate`\n- Options: `--cwd`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd aggregate [--cwd <dir>] [--json]\n```\n\n### `buildchain kfd hub explain`\n\n- Help: `buildchain kfd hub explain --help`\n- Canonical id: `kfd-hub`\n- Options: `--cwd`, `--declaration`, `--for`, `--force`, `--json`, `--output-dir`, `--write`\n- Syntax:\n\n```text\nbuildchain kfd hub <init|inspect|test|explain> [--cwd <dir>] [--declaration <path>] [--output-dir <path>] [--write] [--force] [--for agent] [--json]\n```\n\n### `buildchain kfd hub init`\n\n- Help: `buildchain kfd hub init --help`\n- Canonical id: `kfd-hub`\n- Options: `--cwd`, `--declaration`, `--for`, `--force`, `--json`, `--output-dir`, `--write`\n- Syntax:\n\n```text\nbuildchain kfd hub <init|inspect|test|explain> [--cwd <dir>] [--declaration <path>] [--output-dir <path>] [--write] [--force] [--for agent] [--json]\n```\n\n### `buildchain kfd hub inspect`\n\n- Help: `buildchain kfd hub inspect --help`\n- Canonical id: `kfd-hub`\n- Options: `--cwd`, `--declaration`, `--for`, `--force`, `--json`, `--output-dir`, `--write`\n- Syntax:\n\n```text\nbuildchain kfd hub <init|inspect|test|explain> [--cwd <dir>] [--declaration <path>] [--output-dir <path>] [--write] [--force] [--for agent] [--json]\n```\n\n### `buildchain kfd hub test`\n\n- Help: `buildchain kfd hub test --help`\n- Canonical id: `kfd-hub`\n- Options: `--cwd`, `--declaration`, `--for`, `--force`, `--json`, `--output-dir`, `--write`\n- Syntax:\n\n```text\nbuildchain kfd hub <init|inspect|test|explain> [--cwd <dir>] [--declaration <path>] [--output-dir <path>] [--write] [--force] [--for agent] [--json]\n```\n\n### `buildchain kfd migrate-layout`\n\n- Help: `buildchain kfd migrate-layout --help`\n- Canonical id: `kfd-migrate-layout`\n- Options: `--cwd`, `--force`, `--json`, `--write`\n- Syntax:\n\n```text\nbuildchain kfd migrate-layout [--cwd <dir>] [--write] [--force] [--json]\n```\n\n### `buildchain kfd schema list`\n\n- Help: `buildchain kfd schema list --help`\n- Canonical id: `kfd-schema-list`\n- Options: `--json`, `--standard`\n- Syntax:\n\n```text\nbuildchain kfd schema list [--standard kfd-1|kfd-2|kfd-3|kfd-4] [--json]\n```\n\n### `buildchain kfd schema show kfd-1`\n\n- Help: `buildchain kfd schema show kfd-1 --help`\n- Canonical id: `kfd-schema-show`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd schema show <kfd-1|kfd-2|kfd-3|kfd-4> [--schema <name>] [--json]\n```\n\n### `buildchain kfd schema show kfd-2`\n\n- Help: `buildchain kfd schema show kfd-2 --help`\n- Canonical id: `kfd-schema-show`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd schema show <kfd-1|kfd-2|kfd-3|kfd-4> [--schema <name>] [--json]\n```\n\n### `buildchain kfd schema show kfd-3`\n\n- Help: `buildchain kfd schema show kfd-3 --help`\n- Canonical id: `kfd-schema-show`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd schema show <kfd-1|kfd-2|kfd-3|kfd-4> [--schema <name>] [--json]\n```\n\n### `buildchain kfd schema show kfd-4`\n\n- Help: `buildchain kfd schema show kfd-4 --help`\n- Canonical id: `kfd-schema-show`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd schema show <kfd-1|kfd-2|kfd-3|kfd-4> [--schema <name>] [--json]\n```\n\n### `buildchain kfd status`\n\n- Help: `buildchain kfd status --help`\n- Canonical id: `kfd-status`\n- Options: `--cwd`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd status [--cwd <dir>] [--json]\n```\n\n### `buildchain kfd support project`\n\n- Help: `buildchain kfd support project --help`\n- Canonical id: `kfd-support`\n- Options: `--checked-at`, `--expected-source-sha`, `--gate-json`, `--json`, `--matrix-json`, `--output`\n- Syntax:\n\n```text\nbuildchain kfd support project --matrix-json <file-or-json> --gate-json <file-or-json>... [--expected-source-sha <sha>] [--checked-at <date-time>] [--output <file>] [--json]\n```\n\n### `buildchain kfd support verify`\n\n- Help: `buildchain kfd support verify --help`\n- Canonical id: `kfd-support`\n- Options: `--checked-at`, `--expected-source-sha`, `--json`, `--projection-json`\n- Syntax:\n\n```text\nbuildchain kfd support verify --projection-json <file-or-json> [--expected-source-sha <sha>] [--checked-at <date-time>] [--json]\n```\n\n### `buildchain kfd upstream check`\n\n- Help: `buildchain kfd upstream check --help`\n- Canonical id: `kfd-upstream-check`\n- Options: `--aggregate-json`, `--cwd`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd upstream check [--cwd <dir>] [--aggregate-json <file-or-json>] [--json]\n```\n\n### `buildchain kfd upstream collect`\n\n- Help: `buildchain kfd upstream collect --help`\n- Canonical id: `kfd-upstream-collect`\n- Options: `--cwd`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain kfd upstream collect [--cwd <dir>] [--output <file>] [--json]\n```\n\n### `buildchain kfd upstream roles`\n\n- Help: `buildchain kfd upstream roles --help`\n- Canonical id: `kfd-upstream-roles`\n- Options: `--json`\n- Syntax:\n\n```text\nbuildchain kfd upstream roles [--json]\n```\n\n## `layout`\n\n### `buildchain layout`\n\n- Help: `buildchain layout --help`\n- Canonical id: `layout`\n- Options: `--cwd`, `--json`\n- Syntax:\n\n```text\nbuildchain layout [--cwd <dir>] [--json]\n```\n\n## `lifecycle`\n\n### `buildchain lifecycle`\n\n- Help: `buildchain lifecycle --help`\n- Canonical id: `lifecycle`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain lifecycle\n```\n\n### `buildchain lifecycle run`\n\n- Help: `buildchain lifecycle run --help`\n- Canonical id: `lifecycle`\n- Options: `--artifact-name`, `--artifact-path`, `--cwd`, `--manifest-path`, `--process-summary`, `--required`, `--summary-path`\n- Syntax:\n\n```text\nbuildchain lifecycle run <stage> [--cwd <dir>] [--required] [--artifact-name <name>] [--artifact-path <path>]... [--manifest-path <path>] [--summary-path <path>] [--process-summary <json>]\n```\n\n## `log`\n\n### `buildchain log`\n\n- Help: `buildchain log --help`\n- Canonical id: `log`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain log\n```\n\n### `buildchain log error`\n\n- Help: `buildchain log error --help`\n- Canonical id: `logging`\n- Options: `--attribute`, `--component`, `--event`, `--json`, `--path`, `--phase`, `--source`\n- Syntax:\n\n```text\nbuildchain log <info|warn|error> --event <name> [--phase <phase>] [--component <name>] [--source <name>] [--attribute key=value]... [--path <jsonl>] [--json]\n```\n\n### `buildchain log info`\n\n- Help: `buildchain log info --help`\n- Canonical id: `logging`\n- Options: `--attribute`, `--component`, `--event`, `--json`, `--path`, `--phase`, `--source`\n- Syntax:\n\n```text\nbuildchain log <info|warn|error> --event <name> [--phase <phase>] [--component <name>] [--source <name>] [--attribute key=value]... [--path <jsonl>] [--json]\n```\n\n### `buildchain log summary`\n\n- Help: `buildchain log summary --help`\n- Canonical id: `logging`\n- Options: `--json`, `--path`\n- Syntax:\n\n```text\nbuildchain log summary [--path <jsonl>] [--json]\n```\n\n### `buildchain log warn`\n\n- Help: `buildchain log warn --help`\n- Canonical id: `logging`\n- Options: `--attribute`, `--component`, `--event`, `--json`, `--path`, `--phase`, `--source`\n- Syntax:\n\n```text\nbuildchain log <info|warn|error> --event <name> [--phase <phase>] [--component <name>] [--source <name>] [--attribute key=value]... [--path <jsonl>] [--json]\n```\n\n## `mark`\n\n### `buildchain mark`\n\n- Help: `buildchain mark --help`\n- Canonical id: `mark`\n- Options: `--attribute`, `--component`, `--event`, `--json`, `--path`, `--phase`\n- Syntax:\n\n```text\nbuildchain mark --event <name> [--phase <phase>] [--component <name>] [--attribute key=value]... [--path <jsonl>] [--json]\n```\n\n## `npm`\n\n### `buildchain npm`\n\n- Help: `buildchain npm --help`\n- Canonical id: `npm`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain npm\n```\n\n### `buildchain npm dry-run`\n\n- Help: `buildchain npm dry-run --help`\n- Canonical id: `npm-dry-run`\n- Options: `--cwd`, `--dist-tag`, `--expected-tag`, `--json`, `--registry`, `--skip-npm-publish-dry-run`\n- Syntax:\n\n```text\nbuildchain npm dry-run [--cwd <dir>] [--expected-tag <tag>] [--registry <url>] [--dist-tag <tag>] [--skip-npm-publish-dry-run] [--json]\n```\n\n## `paper`\n\n### `buildchain paper`\n\n- Help: `buildchain paper --help`\n- Canonical id: `paper`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain paper\n```\n\n### `buildchain paper agent verify`\n\n- Help: `buildchain paper agent verify --help`\n- Canonical id: `paper-agent`\n- Options: `--cwd`, `--json`, `--offline`\n- Syntax:\n\n```text\nbuildchain paper agent verify [--cwd <dir>] [--offline] [--json]\n```\n\n### `buildchain paper alpha`\n\n- Help: `buildchain paper alpha --help`\n- Canonical id: `paper-alpha`\n- Options: `--cwd`, `--execute`, `--json`, `--source-ref`, `--target-ref`\n- Syntax:\n\n```text\nbuildchain paper alpha [--cwd <dir>] [--source-ref <ref>] [--target-ref <ref>] [--execute] [--json]\n```\n\n### `buildchain paper bootstrap npm`\n\n- Help: `buildchain paper bootstrap npm --help`\n- Canonical id: `paper-bootstrap-npm`\n- Options: `--confirm-public-package`, `--cwd`, `--execute`, `--json`\n- Syntax:\n\n```text\nbuildchain paper bootstrap npm [--cwd <dir>] [--execute] [--confirm-public-package <name>] [--json]\n```\n\n### `buildchain paper build`\n\n- Help: `buildchain paper build --help`\n- Canonical id: `paper-build`\n- Options: `--cwd`, `--execute`, `--json`\n- Syntax:\n\n```text\nbuildchain paper build [--cwd <dir>] [--execute] [--json]\n```\n\n### `buildchain paper fleet audit`\n\n- Help: `buildchain paper fleet audit --help`\n- Canonical id: `paper-fleet-audit`\n- Options: `--json`, `--offline`, `--root`\n- Syntax:\n\n```text\nbuildchain paper fleet audit [--root <dir>] [--offline] [--json]\n```\n\n### `buildchain paper fleet update`\n\n- Help: `buildchain paper fleet update --help`\n- Canonical id: `paper-fleet-update`\n- Options: `--json`, `--root`, `--write`\n- Syntax:\n\n```text\nbuildchain paper fleet update [--root <dir>] [--write] [--json]\n```\n\n### `buildchain paper migrate`\n\n- Help: `buildchain paper migrate --help`\n- Canonical id: `paper-migrate`\n- Options: `--cwd`, `--json`, `--write`\n- Syntax:\n\n```text\nbuildchain paper migrate [--cwd <dir>] [--write] [--json]\n```\n\n### `buildchain paper preflight`\n\n- Help: `buildchain paper preflight --help`\n- Canonical id: `paper-preflight`\n- Options: `--cwd`, `--json`, `--offline`\n- Syntax:\n\n```text\nbuildchain paper preflight [--cwd <dir>] [--offline] [--json]\n```\n\n### `buildchain paper resume`\n\n- Help: `buildchain paper resume --help`\n- Canonical id: `paper-resume`\n- Options: `--buildchain-ref`, `--cwd`, `--execute`, `--json`\n- Syntax:\n\n```text\nbuildchain paper resume [--cwd <dir>] [--buildchain-ref <ref>] [--execute] [--json]\n```\n\n### `buildchain paper scaffold`\n\n- Help: `buildchain paper scaffold --help`\n- Canonical id: `paper-scaffold`\n- Options: `--json`, `--package`, `--repository`, `--write`\n- Syntax:\n\n```text\nbuildchain paper scaffold --package <name> --repository <owner/repo> [--write] [--json]\n```\n\n### `buildchain paper status`\n\n- Help: `buildchain paper status --help`\n- Canonical id: `paper-status`\n- Options: `--cwd`, `--json`\n- Syntax:\n\n```text\nbuildchain paper status [--cwd <dir>] [--json]\n```\n\n### `buildchain paper work start`\n\n- Help: `buildchain paper work start --help`\n- Canonical id: `paper-work-start`\n- Options: `--branch`, `--cwd`, `--execute`, `--json`\n- Syntax:\n\n```text\nbuildchain paper work start <topic> [--cwd <dir>] [--branch <branch>] [--execute] [--json]\n```\n\n### `buildchain paper work submit`\n\n- Help: `buildchain paper work submit --help`\n- Canonical id: `paper-work-submit`\n- Options: `--body`, `--cwd`, `--execute`, `--json`, `--title`\n- Syntax:\n\n```text\nbuildchain paper work submit [--cwd <dir>] [--title <title>] [--body <body>] [--execute] [--json]\n```\n\n## `portable-cache`\n\n### `buildchain portable-cache`\n\n- Help: `buildchain portable-cache --help`\n- Canonical id: `portable-cache`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain portable-cache\n```\n\n### `buildchain portable-cache plan`\n\n- Help: `buildchain portable-cache plan --help`\n- Canonical id: `portable-cache`\n- Options: `--github-output`, `--json`, `--manifest`, `--output`\n- Syntax:\n\n```text\nbuildchain portable-cache plan --manifest <file-or-json> [--output <file>] [--github-output <file>] [--json]\n```\n\n### `buildchain portable-cache receipt`\n\n- Help: `buildchain portable-cache receipt --help`\n- Canonical id: `portable-cache`\n- Options: `--cache-hit`, `--cold-fallback-status`, `--json`, `--matched-key`, `--output`, `--plan`, `--validation-reason`, `--validation-status`\n- Syntax:\n\n```text\nbuildchain portable-cache receipt --plan <file-or-json> [--matched-key <key>] [--cache-hit true|false] [--validation-status pass|fail] [--validation-reason <text>] [--cold-fallback-status not-run|passed|failed] [--output <file>] [--json]\n```\n\n## `project`\n\n### `buildchain project`\n\n- Help: `buildchain project --help`\n- Canonical id: `project`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain project\n```\n\n### `buildchain project kfx-admission`\n\n- Help: `buildchain project kfx-admission --help`\n- Canonical id: `project`\n- Options: `--assessment-time`, `--expected-contract`, `--expected-issuer`, `--expected-publisher`, `--expected-root`, `--json`\n- Syntax:\n\n```text\nbuildchain project kfx-admission <file-or-json> [--assessment-time <epoch>] [--expected-root <sha256:...>] [--expected-issuer <issuer>] [--expected-publisher <publisher>] [--expected-contract <version>] [--json]\n```\n\n## `publication-artifact`\n\n### `buildchain publication-artifact`\n\n- Help: `buildchain publication-artifact --help`\n- Canonical id: `publication-artifact`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain publication-artifact\n```\n\n### `buildchain publication-artifact manifest`\n\n- Help: `buildchain publication-artifact manifest --help`\n- Canonical id: `publication-artifact-manifest`\n- Options: `--cwd`, `--json`, `--no-source-bundle`, `--output`, `--passport-output`, `--registry-output`, `--source-bundle`, `--source-sha`\n- Syntax:\n\n```text\nbuildchain publication-artifact manifest [--cwd <dir>] [--source-sha <sha>] [--output <file>] [--passport-output <file>] [--registry-output <file>] [--source-bundle <file>] [--no-source-bundle] [--json]\n```\n\n### `buildchain publication-artifact npm-package`\n\n- Help: `buildchain publication-artifact npm-package --help`\n- Canonical id: `publication-artifact-npm-package`\n- Options: `--cwd`, `--json`, `--output-dir`, `--package-name`\n- Syntax:\n\n```text\nbuildchain publication-artifact npm-package [--cwd <dir>] [--output-dir <dir>] [--package-name <name>] [--json]\n```\n\n### `buildchain publication-artifact reproducibility`\n\n- Help: `buildchain publication-artifact reproducibility --help`\n- Canonical id: `publication-artifact-reproducibility`\n- Options: `--allow-unpinned-toolchain`, `--cwd`, `--json`, `--no-toolchain-pull`, `--output`, `--promote`, `--source-sha`\n- Syntax:\n\n```text\nbuildchain publication-artifact reproducibility [--cwd <dir>] [--source-sha <sha>] [--output <file>] [--promote] [--no-toolchain-pull] [--allow-unpinned-toolchain] [--json]\n```\n\n## `publish-source`\n\n### `buildchain publish-source`\n\n- Help: `buildchain publish-source --help`\n- Canonical id: `publish-source`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain publish-source\n```\n\n### `buildchain publish-source lock`\n\n- Help: `buildchain publish-source lock --help`\n- Canonical id: `publish-source`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain publish-source <lock|manifest|verify-lock|verify-channel-ref|validate-anchored-release> ...\n```\n\n### `buildchain publish-source manifest`\n\n- Help: `buildchain publish-source manifest --help`\n- Canonical id: `publish-source`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain publish-source <lock|manifest|verify-lock|verify-channel-ref|validate-anchored-release> ...\n```\n\n### `buildchain publish-source validate-anchored-release`\n\n- Help: `buildchain publish-source validate-anchored-release --help`\n- Canonical id: `publish-source`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain publish-source <lock|manifest|verify-lock|verify-channel-ref|validate-anchored-release> ...\n```\n\n### `buildchain publish-source verify-channel-ref`\n\n- Help: `buildchain publish-source verify-channel-ref --help`\n- Canonical id: `publish-source`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain publish-source <lock|manifest|verify-lock|verify-channel-ref|validate-anchored-release> ...\n```\n\n### `buildchain publish-source verify-lock`\n\n- Help: `buildchain publish-source verify-lock --help`\n- Canonical id: `publish-source`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain publish-source <lock|manifest|verify-lock|verify-channel-ref|validate-anchored-release> ...\n```\n\n## `release`\n\n### `buildchain release`\n\n- Help: `buildchain release --help`\n- Canonical id: `release-transaction`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release\n```\n\n### `buildchain release --dry-run`\n\n- Help: `buildchain release --dry-run --help`\n- Canonical id: `release-dry-run`\n- Options: `--dry-run`, `--json`, `--sha`, `--source-ref`, `--tags`, `--target-ref`\n- Syntax:\n\n```text\nbuildchain release --dry-run --target-ref <ref> [--sha <sha>] [--source-ref <ref>] [--tags <comma-list>] [--json]\n```\n\n### `buildchain release abort`\n\n- Help: `buildchain release abort --help`\n- Canonical id: `release-transaction`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release <inspect|recover|finalize|abort> ...\n```\n\n### `buildchain release dry-run`\n\n- Help: `buildchain release dry-run --help`\n- Canonical id: `release-dry-run`\n- Options: `--json`, `--sha`, `--source-ref`, `--tags`, `--target-ref`\n- Syntax:\n\n```text\nbuildchain release dry-run --target-ref <ref> [--sha <sha>] [--source-ref <ref>] [--tags <comma-list>] [--json]\n```\n\n### `buildchain release explain`\n\n- Help: `buildchain release explain --help`\n- Canonical id: `release-dry-run`\n- Options: `--json`, `--sha`, `--source-ref`, `--tags`, `--target-ref`\n- Syntax:\n\n```text\nbuildchain release explain --target-ref <ref> [--sha <sha>] [--source-ref <ref>] [--tags <comma-list>] [--json]\n```\n\n### `buildchain release finalize`\n\n- Help: `buildchain release finalize --help`\n- Canonical id: `release-transaction`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release <inspect|recover|finalize|abort> ...\n```\n\n### `buildchain release inspect`\n\n- Help: `buildchain release inspect --help`\n- Canonical id: `release-transaction`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release <inspect|recover|finalize|abort> ...\n```\n\n### `buildchain release line open`\n\n- Help: `buildchain release line open --help`\n- Canonical id: `release-line-open`\n- Options: `--initial-version`, `--json`, `--major`, `--minor`, `--source-ref`, `--write`\n- Syntax:\n\n```text\nbuildchain release line open --major <n> --minor <n> [--source-ref <ref>] [--initial-version <version>] [--write] [--json]\n```\n\n### `buildchain release recover`\n\n- Help: `buildchain release recover --help`\n- Canonical id: `release-transaction`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release <inspect|recover|finalize|abort> ...\n```\n\n## `release-governance`\n\n### `buildchain release-governance`\n\n- Help: `buildchain release-governance --help`\n- Canonical id: `release-governance`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release-governance\n```\n\n### `buildchain release-governance reconcile`\n\n- Help: `buildchain release-governance reconcile --help`\n- Canonical id: `release-governance`\n- Options: `--apply`, `--branch`, `--candidate-sha`, `--json`, `--repository`\n- Syntax:\n\n```text\nbuildchain release-governance reconcile --repository <owner/repo> --branch <dev|alpha|release/vN/vN.N> --candidate-sha <sha> [--apply] [--json]\n```\n\n## `release-propagation`\n\n### `buildchain release-propagation`\n\n- Help: `buildchain release-propagation --help`\n- Canonical id: `release-propagation`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release-propagation\n```\n\n### `buildchain release-propagation plan`\n\n- Help: `buildchain release-propagation plan --help`\n- Canonical id: `release-propagation`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release-propagation <plan|write-lock> ...\n```\n\n### `buildchain release-propagation write-lock`\n\n- Help: `buildchain release-propagation write-lock --help`\n- Canonical id: `release-propagation`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release-propagation <plan|write-lock> ...\n```\n\n## `sample`\n\n### `buildchain sample`\n\n- Help: `buildchain sample --help`\n- Canonical id: `sample`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain sample\n```\n\n### `buildchain sample process-tree`\n\n- Help: `buildchain sample process-tree --help`\n- Canonical id: `sample-process-tree`\n- Options: `--interval-ms`, `--json`, `--label`, `--output`, `--requested-parallelism`, `--summary-output`\n- Syntax:\n\n```text\nbuildchain sample process-tree [--interval-ms <n>] [--label <name>] [--output <jsonl>] [--summary-output <json>] [--requested-parallelism <n>] [--json] -- <command> [args...]\n```\n\n## `span`\n\n### `buildchain span`\n\n- Help: `buildchain span --help`\n- Canonical id: `span`\n- Options: `--component`, `--event`, `--path`, `--phase`\n- Syntax:\n\n```text\nbuildchain span --event <name> [--phase <phase>] [--component <name>] [--path <jsonl>] -- <command> [args...]\n```\n\n## `transaction`\n\n### `buildchain transaction`\n\n- Help: `buildchain transaction --help`\n- Canonical id: `transaction-inspect`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain transaction\n```\n\n### `buildchain transaction inspect`\n\n- Help: `buildchain transaction inspect --help`\n- Canonical id: `transaction-inspect`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain transaction inspect ...\n```\n\n## `validate`\n\n### `buildchain validate`\n\n- Help: `buildchain validate --help`\n- Canonical id: `validate`\n- Options: `--cwd`, `--require-lifecycle-stages`, `--require-version-state`\n- Syntax:\n\n```text\nbuildchain validate [--cwd <dir>] [--require-version-state] [--require-lifecycle-stages <comma-list>]\n```\n\n## `verify`\n\n### `buildchain verify`\n\n- Help: `buildchain verify --help`\n- Canonical id: `verify`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain verify\n```\n\n### `buildchain verify artifact dir`\n\n- Help: `buildchain verify artifact dir --help`\n- Canonical id: `verify-artifact`\n- Options: `--json`, `--locator-config`, `--npm-registry`, `--passport`, `--repository`, `--tag`\n- Syntax:\n\n```text\nbuildchain verify artifact <file|dir|url|npm:...|oci:...|github-release:...> [--passport <file-or-url>] [--locator-config <json>] [--repository <owner/repo>] [--tag <tag>] [--npm-registry <url>] [--json]\n```\n\n### `buildchain verify artifact file`\n\n- Help: `buildchain verify artifact file --help`\n- Canonical id: `verify-artifact`\n- Options: `--json`, `--locator-config`, `--npm-registry`, `--passport`, `--repository`, `--tag`\n- Syntax:\n\n```text\nbuildchain verify artifact <file|dir|url|npm:...|oci:...|github-release:...> [--passport <file-or-url>] [--locator-config <json>] [--repository <owner/repo>] [--tag <tag>] [--npm-registry <url>] [--json]\n```\n\n### `buildchain verify artifact github-release:...`\n\n- Help: `buildchain verify artifact github-release:... --help`\n- Canonical id: `verify-artifact`\n- Options: `--json`, `--locator-config`, `--npm-registry`, `--passport`, `--repository`, `--tag`\n- Syntax:\n\n```text\nbuildchain verify artifact <file|dir|url|npm:...|oci:...|github-release:...> [--passport <file-or-url>] [--locator-config <json>] [--repository <owner/repo>] [--tag <tag>] [--npm-registry <url>] [--json]\n```\n\n### `buildchain verify artifact npm:...`\n\n- Help: `buildchain verify artifact npm:... --help`\n- Canonical id: `verify-artifact`\n- Options: `--json`, `--locator-config`, `--npm-registry`, `--passport`, `--repository`, `--tag`\n- Syntax:\n\n```text\nbuildchain verify artifact <file|dir|url|npm:...|oci:...|github-release:...> [--passport <file-or-url>] [--locator-config <json>] [--repository <owner/repo>] [--tag <tag>] [--npm-registry <url>] [--json]\n```\n\n### `buildchain verify artifact oci:...`\n\n- Help: `buildchain verify artifact oci:... --help`\n- Canonical id: `verify-artifact`\n- Options: `--json`, `--locator-config`, `--npm-registry`, `--passport`, `--repository`, `--tag`\n- Syntax:\n\n```text\nbuildchain verify artifact <file|dir|url|npm:...|oci:...|github-release:...> [--passport <file-or-url>] [--locator-config <json>] [--repository <owner/repo>] [--tag <tag>] [--npm-registry <url>] [--json]\n```\n\n### `buildchain verify artifact url`\n\n- Help: `buildchain verify artifact url --help`\n- Canonical id: `verify-artifact`\n- Options: `--json`, `--locator-config`, `--npm-registry`, `--passport`, `--repository`, `--tag`\n- Syntax:\n\n```text\nbuildchain verify artifact <file|dir|url|npm:...|oci:...|github-release:...> [--passport <file-or-url>] [--locator-config <json>] [--repository <owner/repo>] [--tag <tag>] [--npm-registry <url>] [--json]\n```\n\n### `buildchain verify artifact-envelope`\n\n- Help: `buildchain verify artifact-envelope --help`\n- Canonical id: `verify-artifact-envelope`\n- Options: `--assessment-time`, `--expected-contract`, `--expected-issuer`, `--expected-publisher`, `--expected-root`, `--json`\n- Syntax:\n\n```text\nbuildchain verify artifact-envelope <file-or-json> [--assessment-time <epoch>] [--expected-root <sha256:...>] [--expected-issuer <issuer>] [--expected-publisher <publisher>] [--expected-contract <version>] [--json]\n```\n\n### `buildchain verify github-artifact-attestation`\n\n- Help: `buildchain verify github-artifact-attestation --help`\n- Canonical id: `verify-github-artifact-attestation`\n- Options: `--bundle`, `--evidence`, `--json`, `--platform-manifest`, `--release-passport`\n- Syntax:\n\n```text\nbuildchain verify github-artifact-attestation <artifact> --evidence <file> --bundle <file> --platform-manifest <file> --release-passport <file> [--json]\n```\n\n### `buildchain verify infra-contract-evidence-bundle`\n\n- Help: `buildchain verify infra-contract-evidence-bundle --help`\n- Canonical id: `verify-infra-contract-evidence-bundle`\n- Options: `--json`\n- Syntax:\n\n```text\nbuildchain verify infra-contract-evidence-bundle <file> [--json]\n```\n\n### `buildchain verify observability-log`\n\n- Help: `buildchain verify observability-log --help`\n- Canonical id: `verify-observability-log`\n- Options: `--allow-errors`, `--json`, `--min-events`, `--require-component`, `--require-event`, `--require-phase`\n- Syntax:\n\n```text\nbuildchain verify observability-log <jsonl> [--min-events <n>] [--require-phase <csv>] [--require-component <csv>] [--require-event <csv>] [--allow-errors] [--json]\n```\n\n### `buildchain verify publication-admission`\n\n- Help: `buildchain verify publication-admission --help`\n- Canonical id: `verify-publication-admission`\n- Options: `--control-plane-audit-json`, `--expected-json`, `--json`, `--publication-evidence-json`, `--registry-json`, `--runner-json`, `--used-nonce`\n- Syntax:\n\n```text\nbuildchain verify publication-admission <file-or-json> --registry-json <file-or-json> --runner-json <file-or-json> --control-plane-audit-json <file-or-json> --publication-evidence-json <file-or-json> [--expected-json <file-or-json>] [--used-nonce <nonce>]... [--json]\n```\n\n### `buildchain verify release-passport`\n\n- Help: `buildchain verify release-passport --help`\n- Canonical id: `verify-release-passport`\n- Options: `--json`\n- Syntax:\n\n```text\nbuildchain verify release-passport <file-or-url> [--json]\n```\n\n## `version`\n\n### `buildchain version`\n\n- Help: `buildchain version --help`\n- Canonical id: `version`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain version\n```\n\n## `web-surface`\n\n### `buildchain web-surface`\n\n- Help: `buildchain web-surface --help`\n- Canonical id: `web-surface`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain web-surface ...\n```"
     },
     {
       "id": "manual:consumer-issue-reporting",
@@ -748,6 +1801,73 @@
       ],
       "markdown": "---\nstatus: preview\nperiod: ongoing\ntheme: dev-alpha-candidate-patrol\ndoc_type: architecture-and-usage\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: self-reviewed\nlast_reviewed: 2026-07-29\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-07-29\n  visible_context: Existing Buildchain source locks, Kungfu exact-source Alpha preflight, Dev Patrol, repository release governance, and the consumer-owned settlement renderer threat model.\n  invisible_context_boundary: No credentials, private logs, or private configuration were used.\n---\n\n# Dev to Alpha Candidate Patrol\n\nBuildchain provides a reusable observation and single-flight PR controller for\nrepositories that promote a development branch into a protected Alpha branch.\nIt does not publish Alpha. The read-only observer reads the exact heads of both\nbranches, walks the\nbounded development history from newest to oldest (stopping early at the Alpha\nhead), and selects the newest commit that satisfies all of these conditions:\n\n- the source is strictly ahead of the recorded target head;\n- the latest completed Dev Patrol for that exact commit SHA succeeded;\n- the latest completed Alpha preflight for the same commit SHA succeeded; and\n- both runs are within the caller's evidence age limit.\n\nThe selected commit can be behind the observed development head when newer\ncommits have not completed both workflows yet. The decision binds the observed\nhead, selected SHA, and count of skipped newer commits. This makes a slow native\nverification lane live under continuous development without silently treating\nan unqualified head as releasable.\n\nHistory discovery is bounded to the newest 1000 development commits. The\ncontroller then compares the selected SHA to the exact Alpha head before it can\nbe eligible, so a bounded scan cannot turn a commit outside the promotion\nancestry into a candidate.\n\nThe decision is `kungfu-buildchain-channel-candidate-decision/v1`. It records the\nsource and target branches and SHAs, comparison distance, workflow paths, run\nidentities and attempts, completion times, URLs, policy, and a canonical decision\nroot. Missing, stale, failed, duplicate, or source-mismatched evidence fails\nclosed as an auditable `blocked` or `stale` observation and cannot enter\nsettlement.\n\nThe companion state is\n`kungfu-buildchain-dev-alpha-candidate-state/v1`. Its current state is one of:\n\n- `observed`: no exact candidate is currently settleable;\n- `eligible-for-settlement`: a qualified candidate exists and no managed Alpha\n  candidate PR is active;\n- `active`: exactly one managed candidate PR is open;\n- `retained-next`: an active PR remains authoritative and the newest different\n  qualified SHA is retained as `nextCandidate`;\n- `stale`: the available exact-SHA evidence pair is outside policy age; or\n- `blocked`: qualification or reconciliation failed closed.\n\nWhen a newer qualified SHA replaces an earlier `nextCandidate`, the state also\nrecords that earlier SHA as `supersededCandidate`. Every state carries exact\nrepository, source/target refs and SHAs, workflow-run evidence through the\ncandidate decision, and canonical decision/state roots.\n\n## Reusable workflow\n\nCall `.github/workflows/dev-alpha-candidate-patrol.yml` from a thin repository\nworkflow. Start with `dry-run: true`. The reusable workflow always runs an\n`observe` job with only Actions/content/pull-request read permissions. Once the\nrepository has proven that its two workflow names and branch topology produce\nexact same-SHA evidence, it may set `settlement-authorized: true` and\n`dry-run: false`. The older `create-pull-request` input remains a compatibility\nalias for settlement authorization.\n\nRepositories whose promotion policy requires a machine-readable PR declaration\ncan pass static text through `pull-request-body-prefix`. When the declaration\ndepends on the exact qualified delta, use `pull-request-body-prefix-renderer`\ninstead. It names a repository-relative Node.js file in the consumer checkout.\nThe read-only `observe` job checks out the selected SHA with credentials disabled,\nruns the renderer with a reduced environment, and requires it to write UTF-8 text\nto `BUILDCHAIN_CHANNEL_PATROL_PR_BODY_PREFIX_OUTPUT`. The renderer also receives\nthe selected SHA plus source and target branch names. It may derive a declaration\nfrom the exact checkout and `origin/<target-branch>` without receiving the\npromotion token.\n\nStatic and rendered prefixes are mutually exclusive. A renderer failure, path\nescape, source-SHA mismatch, empty or oversized result, invalid UTF-8, or managed\ncontroller-marker injection fails before the write-permission job can run. The\nrendered bytes are retained with the read-only observation artifact and passed\nto `settle` as a job output, so the candidate PR is created with the correct\ndeclaration on its first write. Buildchain preserves that repository-owned text\nwhen later observations update only the managed state marker. Before any write,\n`settle` also requires its fresh observation to select the same SHA that produced\nthe rendered bytes. Concurrent qualification progress therefore fails closed\nand is recomputed by the next patrol instead of attaching a declaration to the\nwrong candidate.\n\nThe separately permissioned `settle` job re-runs the exact observation before\nany write. With no active managed candidate, it creates one branch named from\nthe target branch and the first 12 characters of the full source SHA. An\nexisting branch must point to the same full SHA or the run fails. With one\nactive managed candidate, it only updates the machine-readable state marker in\nthat PR body so repeated events and rapid dev progress cannot create another\ncandidate PR or another heavy candidate build. Foreign human-authored Alpha PRs\nare ignored. More than one open Buildchain-managed candidate fails closed.\n\nThe PR body is the bounded durable controller state: it preserves the active\ncandidate and newest retained `nextCandidate` without introducing an always-on\nservice. Once the active PR settles or is abandoned, the next execution\nrecomputes current exact-SHA qualification and creates only the newest still\nfresh candidate. It never trusts a `workflow_run` trigger SHA as evidence.\n\nConsumers should invoke this workflow after relevant qualification workflow\ncompletion and from an offset periodic fallback. GitHub may delay scheduled\nruns, so the event path supplies low latency while the fallback supplies\nrecovery. Workflow concurrency plus the server-side open-PR reconciliation\nmakes duplicate or delayed events idempotent.\n\nThe workflow never moves the Alpha ref directly, merges or auto-merges the pull\nrequest, publishes npm, creates a Git tag or GitHub Release, or changes branch\nprotection. Those remain repository-owned protected settlement actions."
     },
+    {
+      "id": "manual:getting-started",
+      "title": "Buildchain Golden Path",
+      "route": "/docs/getting-started",
+      "category": "manual",
+      "capabilityGroup": "getting-started",
+      "audience": [
+        "consumer",
+        "agent"
+      ],
+      "maturity": "stable",
+      "sourcePath": "docs/getting-started.md",
+      "digest": "sha256:806224481f542786ed2e60226417bd1ba673099a3110f564357792bdbf637403",
+      "headings": [
+        {
+          "level": 1,
+          "title": "Buildchain Golden Path",
+          "anchor": "buildchain-golden-path"
+        },
+        {
+          "level": 2,
+          "title": "1. Create a clean consumer and install an exact version",
+          "anchor": "1-create-a-clean-consumer-and-install-an-exact-version"
+        },
+        {
+          "level": 2,
+          "title": "2. Choose the project type and initialize",
+          "anchor": "2-choose-the-project-type-and-initialize"
+        },
+        {
+          "level": 2,
+          "title": "3. Validate the local contract",
+          "anchor": "3-validate-the-local-contract"
+        },
+        {
+          "level": 2,
+          "title": "4. Inspect the reusable workflow and release dry-run",
+          "anchor": "4-inspect-the-reusable-workflow-and-release-dry-run"
+        },
+        {
+          "level": 2,
+          "title": "5. Create and inspect a local Release Passport example",
+          "anchor": "5-create-and-inspect-a-local-release-passport-example"
+        },
+        {
+          "level": 2,
+          "title": "You are done when",
+          "anchor": "you-are-done-when"
+        },
+        {
+          "level": 2,
+          "title": "Choose the next manual",
+          "anchor": "choose-the-next-manual"
+        },
+        {
+          "level": 2,
+          "title": "Troubleshooting",
+          "anchor": "troubleshooting"
+        },
+        {
+          "level": 2,
+          "title": "Small glossary",
+          "anchor": "small-glossary"
+        }
+      ],
+      "markdown": "---\nstatus: active\nperiod: ongoing\ntheme: buildchain-golden-path\ndoc_type: technical-guide\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: self-reviewed\nlast_reviewed: 2026-08-01\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-08-01\n  invisible_context: not asserted\n---\n\n# Buildchain Golden Path\n\nThis path is for a repository maintainer adopting Buildchain for the first\ntime. It takes about 15–30 minutes and ends with five inspectable outcomes: an\nexact package pin, a declared project type, a valid local configuration, a thin\nreusable workflow caller, and a Release Passport inspection.\n\nUse this page for the first successful pass. Move to the advanced manuals only\nafter the local checks below are green.\n\n## 1. Create a clean consumer and install an exact version\n\n```bash\nconsumer_dir=\"$(mktemp -d)\"\ncd \"$consumer_dir\"\nnpm init -y\nbuildchain_version=\"$(npm view @kungfu-tech/buildchain version)\"\npnpm add -D \"@kungfu-tech/buildchain@$buildchain_version\"\npnpm exec buildchain --version\n```\n\nThe package manager records the exact resolved version in `package.json` and\nthe lockfile. Review that version before committing it; do not leave a floating\nrange in a release repository.\n\n## 2. Choose the project type and initialize\n\nStart with `package` for a Node package. Other supported types are `native`,\n`web-surface`, `infra-contract`, `publication-artifact`, and\n`anchored-package`.\n\n```bash\npnpm exec buildchain init --type package --package-manager pnpm\n```\n\nInspect the two generated files before continuing:\n\n```bash\nsed -n '1,220p' .buildchain/buildchain.toml\nsed -n '1,220p' .github/workflows/build.yml\n```\n\n`buildchain.toml` owns repository lifecycle declarations. The workflow is a\nthin caller of Buildchain's reusable workflow; it is not a second release\nimplementation.\n\n## 3. Validate the local contract\n\n```bash\npnpm exec buildchain validate \\\n  --require-version-state \\\n  --require-lifecycle-stages install,build,verify\npnpm exec buildchain doctor --json\n```\n\nIf the generated lifecycle commands do not match the repository, edit only\n`.buildchain/buildchain.toml`, then rerun both checks. See\n[Lifecycle Protocol](lifecycle-protocol.md) for the normative fields.\n\n## 4. Inspect the reusable workflow and release dry-run\n\nThe generated caller should contain one reusable `uses:` edge and a manual\n`buildchain-ref` input for bounded train validation:\n\n```bash\nrg -n 'uses:|buildchain-ref:' .github/workflows/build.yml\npnpm exec buildchain release --dry-run \\\n  --target-ref alpha/v3/v3.0 \\\n  --json\n```\n\nThe dry-run explains legal source refs, tags, version state, and publication\neffects. It does not move refs, edit files, or publish packages.\n\n## 5. Create and inspect a local Release Passport example\n\nThis example creates a source-bound local Passport through the public Node API,\nthen reads it through the CLI. It is learning evidence, not publication\nauthority.\n\n```bash\nmkdir -p .buildchain/golden-path\nnode --input-type=module <<'EOF'\nimport fs from \"node:fs\";\nimport { createReleasePassport } from \"@kungfu-tech/buildchain\";\n\nconst passport = createReleasePassport({\n  repository: \"example/consumer\",\n  tag: \"v0.1.0-alpha.0\",\n  sourceSha: \"a\".repeat(40),\n  assets: [{ name: \"consumer.tgz\", sha256: \"b\".repeat(64) }],\n});\nfs.writeFileSync(\n  \".buildchain/golden-path/buildchain.release.json\",\n  `${JSON.stringify(passport, null, 2)}\\n`,\n);\nEOF\n\npnpm exec buildchain inspect release \\\n  --passport .buildchain/golden-path/buildchain.release.json \\\n  --json\n```\n\nFor a real release, the protected Buildchain workflow creates the Passport from\nthe exact source, artifact, controller, and publication evidence. See\n[Release Passport](release-passport.md); do not promote this local example.\n\n## You are done when\n\n- the dependency and lockfile contain one exact Buildchain version;\n- `.buildchain/buildchain.toml` declares the intended project type and lifecycle;\n- `validate` and `doctor` succeed;\n- `.github/workflows/build.yml` remains a thin reusable-workflow caller;\n- the release dry-run and local Passport inspection both return structured output.\n\nThe repository test `pnpm run check:golden-path` reproduces this path in a new\ntemporary consumer using the locally packed Buildchain package.\n\n## Choose the next manual\n\n| Intent | Next page |\n| --- | --- |\n| Change lifecycle commands or version files | [Lifecycle Protocol](lifecycle-protocol.md) |\n| Configure native matrices, runners, caches, or artifacts | [Reusable Build Surface](reusable-build-surface.md) |\n| Look up a command | [Generated CLI Reference](cli-reference.md) |\n| Import the Node toolkit | [Generated Node API Reference](node-api-reference.md) |\n| Understand protected branches and tags | [Release Flow](release-flow.md) |\n| Verify published evidence | [Release Passport](release-passport.md) |\n\n## Troubleshooting\n\n- `already exists`: initialization is no-overwrite by default. Inspect the\n  existing files; use `--force` only for an intentional replacement.\n- missing lifecycle stage: add the named stage to\n  `.buildchain/buildchain.toml`; do not weaken the validation command.\n- package release-age policy: add a temporary, package-and-version-specific\n  `minimumReleaseAgeExclude`, then remove it after the normal window.\n- unsure about syntax: run `buildchain <path> --help`. Help is intercepted\n  before command dispatch and is side-effect free at every governed path.\n\n## Small glossary\n\n- **project type**: the repository shape selected by `buildchain init`.\n- **lifecycle**: repository-owned install, build, verify, and publish commands.\n- **reusable workflow**: Buildchain-owned GitHub Actions control plane called by\n  a thin consumer workflow.\n- **Release Passport**: source- and artifact-bound release evidence, not a\n  release trigger.\n- **train ref**: a temporary validation runtime; never a production dependency."
+    },
     {
       "id": "manual:github-artifact-attestation",
       "title": "GitHub-native Linux Artifact Attestation",
@@ -1212,13 +2332,18 @@
       ],
       "maturity": "stable",
       "sourcePath": "docs/MAP.md",
-      "digest": "sha256:f6e378d0d583568b0ee90c8805b83b6f0a4faf0d1efa6e4a995482b5ecb8f538",
+      "digest": "sha256:0731b18f6a7aa6a164197080fac3b57ff161640a28433c4cd26adcf145403fb5",
       "headings": [
         {
           "level": 1,
           "title": "Documentation Map",
           "anchor": "documentation-map"
         },
+        {
+          "level": 2,
+          "title": "Start by Role or Intent",
+          "anchor": "start-by-role-or-intent"
+        },
         {
           "level": 2,
           "title": "Capability Coverage",
@@ -1240,7 +2365,7 @@
           "anchor": "how-this-map-is-maintained"
         }
       ],
-      "markdown": "---\nstatus: active\nperiod: ongoing\ntheme: buildchain-documentation-map\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: unreviewed\nlast_reviewed: 2026-07-31\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-07-31\n  invisible_context: not asserted\n---\n\n# Documentation Map\n\nStart here. Find the question you have; follow it to the document that answers\nit. This map is meant to be readable by both a person skimming for the right doc\nand an agent grounding a specific claim.\n\nEach row carries a **plane** - *why* (intent / rationale), *verify* (trust the\nrunning artifact), *use* (consume / extend) - and a **status**:\n\n- `stable` - current and holds.\n- `draft` - exists, rough or incomplete.\n- `to write` - planned; the material exists but is not yet a single doc.\n- `retired` - intentionally not part of the active Buildchain v3 surface.\n\n## Capability Coverage\n\nThis package should be usable by an agent from the npm artifact alone. The\nmachine-readable `dist/site/` bundle is the first fact source; the Markdown\nmanuals explain those facts and give operator examples.\n\n`dist/site/capability-registry.json` is the capability navigation entrypoint.\nIt groups the public surface into stable product areas so sites and agents do\nnot have to infer structure from file names. Each page, manual, CLI command,\nworkflow, action, and Node API export also carries a `capabilityGroup`,\n`audience`, and `maturity` field in its own registry.\n\n| Capability group | Primary facts | Primary manuals |\n| --- | --- | --- |\n| Getting Started | `capability-registry.json`, `product-mechanism.json` | [`install.md`](install.md), [`product-mechanism.md`](product-mechanism.md), [`cli.md`](cli.md) |\n| Release Passport and Trust | `release-model.json`, `artifact-schemas.json`, `publication-authority-registry.json`, `kfd-claims.json` | [`release-passport.md`](release-passport.md), [`github-artifact-attestation.md`](github-artifact-attestation.md), [`publication-authority.md`](publication-authority.md), [`release-candidate.md`](release-candidate.md), [`publish-transaction.md`](publish-transaction.md), [`binary-distribution.md`](binary-distribution.md) |\n| Reusable Build and Lifecycle | `workflow-registry.json`, `controller-registry.json`, `release-model.json` | [`reusable-build-surface.md`](reusable-build-surface.md), [`controller-evidence.md`](controller-evidence.md), [`shifu-gate-profiles.md`](shifu-gate-profiles.md), [`lifecycle-protocol.md`](lifecycle-protocol.md) |\n| KFD Trust and Surface Closure | `kfd-claims.json`, `public-surface-audit.json`, `cli-registry.json`, `node-api-registry.json` | [`kfd-support.md`](kfd-support.md), [`release-passport.md`](release-passport.md) |\n| Site Bundle, Web Surfaces, and Propagation | `buildchain-site.json`, `site-manifest.json`, `page-registry.json`, `release-model.json` | [`site-bundle-contract.md`](site-bundle-contract.md), [`web-surface-deployments.md`](web-surface-deployments.md), [`release-propagation.md`](release-propagation.md) |\n| Publication Artifacts | `publication-registry.json`, `workflow-registry.json`, `node-api-registry.json`, `manual-registry.json`, `kungfu-buildchain-publication-artifact-registry` | [`publication-artifacts.md`](publication-artifacts.md), [`reusable-build-surface.md`](reusable-build-surface.md) |\n| Distribution Indexes and Badges | `badge-endpoint-registry.json`, `node-api-registry.json`, `manual-registry.json` | [`readme-badges.md`](readme-badges.md), [`homebrew.md`](homebrew.md) |\n| Build Facts, Observability, and Diagnostics | `cli-registry.json`, `node-api-registry.json`, lifecycle artifacts | [`build-facts.md`](build-facts.md), [`toolkit-observability.md`](toolkit-observability.md), [`consumer-issue-reporting.md`](consumer-issue-reporting.md) |\n| Governance, Versioning, and Runtime Drift | `buildchain-contract.json`, `workflow-registry.json`, `release-model.json` | [`github-governance-authority.md`](github-governance-authority.md), [`release-governance.md`](release-governance.md), [`release-flow.md`](release-flow.md), [`versioning.md`](versioning.md), [`runtime-train-validation.md`](runtime-train-validation.md), [`cli.md`](cli.md) |\n| CLI and Node API Reference | `cli-registry.json`, `node-api-registry.json`, `workflow-registry.json`, `manual-registry.json` | [`cli.md`](cli.md), [`../packages/core/README.md`](../packages/core/README.md) |\n\n| Capability | Machine-readable entry | Manual entry |\n| --- | --- | --- |\n| Capability-grouped KFD navigation | `dist/site/capability-registry.json`, `dist/site/page-registry.json`, `dist/site/manual-registry.json`, `dist/site/cli-registry.json`, `dist/site/node-api-registry.json` | this map, [`site-bundle-contract.md`](site-bundle-contract.md), [`kfd-support.md`](kfd-support.md) |\n| KFD-1 / KFD-2 / KFD-3 release-passport gates | `dist/site/kfd-claims.json`, `dist/site/buildchain-contract.json`, `dist/site/artifact-schemas.json` | [`release-passport.md`](release-passport.md) |\n| Product invariant Passport release gate | `buildchain.release.json#invariantPassports`, `dist/site/buildchain-contract.json` | [`release-passport.md`](release-passport.md) |\n| GitHub keyless Linux artifact attestation | `buildchain.release.json#githubArtifactAttestations`, `dist/site/workflow-registry.json`, `dist/site/artifact-schemas.json` | [`github-artifact-attestation.md`](github-artifact-attestation.md) |\n| Declarative cross-platform artifact signing | `kungfu-buildchain-artifact-signing-request/v1`, `kungfu-buildchain-artifact-signing-result/v1` | [`reusable-build-surface.md`](reusable-build-surface.md#artifact-signing-authority) |\n| KFD-3 public surface reverse audit | `dist/site/public-surface-audit.json`, `dist/site/cli-registry.json`, `dist/site/workflow-registry.json`, `dist/site/page-registry.json` | [`cli.md`](cli.md), [`site-bundle-contract.md`](site-bundle-contract.md) |\n| KFD-1 / KFD-2 / KFD-3 first-class CLI and Node API | `.buildchain/kfd/kfd-3/surfaces.json`, `dist/site/kfd-claims.json`, `buildchain.release.json`, KFD schemas from `@kungfu-tech/kfd` | [`kfd-support.md`](kfd-support.md), [`cli.md`](cli.md#commands) |\n| Declarative KFD Agent Hub adapter conformance and Passport evidence | `.buildchain/kfd/agent-hub.json`, `.buildchain/artifacts/kfd-agent-hub/evidence.json`, `buildchain.release.json#kfdAgentHub` | [`kfd-agent-hub.md`](kfd-agent-hub.md) |\n| Floating `@v3` drift detection and compatibility issues | `dist/site/buildchain-contract.json` | [`reusable-build-surface.md`](reusable-build-surface.md#floating-ref-contract-lock) |\n| npm publish transactions, evidence, dist-tags, and recovery | `dist/site/release-model.json`, `dist/site/artifact-schemas.json` | [`publish-transaction.md`](publish-transaction.md) |\n| Git/source/version/module/product build facts | `dist/site/node-api-registry.json`, `dist/site/cli-registry.json`, `kungfu-buildchain-module-build-facts`, `kungfu-buildchain-product-build-facts` | [`build-facts.md`](build-facts.md) |\n| GitHub Release passport/evidence publication | `dist/site/release-model.json`, `dist/site/artifact-schemas.json` | [`release-governance.md`](release-governance.md), [`release-candidate.md`](release-candidate.md) |\n| GitHub ownership, effective protection, plan capability, and managed-zone governance receipts | `dist/site/node-api-registry.json`, `dist/site/cli-registry.json`, `kungfu-buildchain-github-governance-receipt` | [`github-governance-authority.md`](github-governance-authority.md) |\n| release propagation for package/publication/site chains | `dist/site/release-model.json` | [`release-propagation.md`](release-propagation.md) |\n| publication artifact manifests, immutable archive registries, source bundles, and paper repository workflows | `dist/site/publication-registry.json`, `dist/site/workflow-registry.json`, `dist/site/node-api-registry.json`, `kungfu-buildchain-publication-artifact-manifest`, `kungfu-buildchain-publication-artifact-registry` | [`publication-artifacts.md`](publication-artifacts.md) |\n| Generated badge bundles, README badge blocks, and badge facts | `dist/site/node-api-registry.json`, `dist/site/manual-registry.json`, `kungfu-buildchain-badge-bundle-facts`, `kungfu-buildchain-readme-badge-facts` | [`readme-badges.md`](readme-badges.md) |\n| Homebrew tap distribution indexes | `dist/site/node-api-registry.json`, `dist/site/buildchain-contract.json` | [`homebrew.md`](homebrew.md) |\n| Buildchain CLI manual | `dist/site/cli-registry.json`, `dist/site/manual-registry.json` | [`cli.md`](cli.md) |\n| Node API / package exports | `dist/site/node-api-registry.json`, `dist/site/release-provenance.json` | [`cli.md`](cli.md#node-api-and-package-exports) |\n\n`dist/site/kfd-claims.json` is generated from\n`packages/core/buildchain-kfd-claims.js`. Treat that module and JSON file as the\nsource claim registry; this map and the manuals explain those claims but do not\nreplace them.\n\n## Map\n\n| Your question | Document | Plane | Status |\n| --- | --- | --- | --- |\n| What is Buildchain, in one idea? | [`../README.md`](../README.md) | - | stable |\n| Why is Buildchain a Release Passport mechanism rather than a generic workflow collection? | [`product-mechanism.md`](product-mechanism.md) | why | stable |\n| How do agents and contributors enter this repo? | [`../AGENTS.md`](../AGENTS.md) + [`../CONTRIBUTING.md`](../CONTRIBUTING.md) | use | stable |\n| How do I install a standalone binary or npm package? | [`install.md`](install.md) | use | stable |\n| How do I run the `buildchain` CLI? | [`cli.md`](cli.md) | use | stable |\n| How do I import Buildchain toolkit APIs from JavaScript build code? | [`toolkit-observability.md`](toolkit-observability.md) + [`../packages/core/README.md`](../packages/core/README.md) | use | stable |\n| How do I initialize a new repository? | [`cli.md`](cli.md) + [`lifecycle-protocol.md`](lifecycle-protocol.md) | use | stable |\n| Why does Buildchain use branch-driven release governance? | [`release-governance.md`](release-governance.md) | why | stable |\n| How do protected dev branches and scheduled ready-PR merging work? | [`release-governance.md`](release-governance.md#protected-dev-branches) | use | stable |\n| How do slow required checks land reliably on a busy dev channel? | [`release-governance.md`](release-governance.md#protected-dev-branches) + [`cli.md`](cli.md#commands) | use | preview |\n| How do I run daily, weekly, or monthly repository patrols? | [`release-governance.md`](release-governance.md#buildchain-patrol) | use | stable |\n| How does Buildchain decide patch, minor, and major release lines? | [`versioning.md`](versioning.md) | why | stable |\n| What exact branch/tag state machine runs on alpha, release, and major gate? | [`release-flow.md`](release-flow.md) | verify | stable |\n| What did Buildchain migrate or retire from old action repositories? | [`migration-inventory.md`](migration-inventory.md) | verify | stable |\n| What is the active action and workflow source of truth? | [`ownership.md`](ownership.md) | verify | stable |\n| How do I declare version files and custom lifecycle commands? | [`lifecycle-protocol.md`](lifecycle-protocol.md) | use | stable |\n| How does publish evidence, recovery, and finalization work? | [`publish-transaction.md`](publish-transaction.md) | verify | stable |\n| How do I collect and verify module/product build facts from Git source, version files, and outputs? | [`build-facts.md`](build-facts.md) + [`cli.md`](cli.md) | use/verify | stable |\n| How do I publish or verify release passport artifacts? | [`release-passport.md`](release-passport.md) | use | stable |\n| How do I keylessly attest Linux release artifacts with GitHub and bind them to a Release Passport? | [`github-artifact-attestation.md`](github-artifact-attestation.md) | verify/use | preview |\n| How do I request detached, Developer ID, or Authenticode signing without consumer credentials? | [`reusable-build-surface.md`](reusable-build-surface.md#artifact-signing-authority) | verify/use | preview |\n| How do I seal exact artifact, identity, lifecycle, and KFD assessment roots for KFX admission? | [`artifact-verification-envelope.md`](artifact-verification-envelope.md) | verify/use | preview |\n| How is product publication authority sealed to an exact workflow, runner, control plane, nonce, and artifact? | [`publication-authority.md`](publication-authority.md) | verify | preview |\n| How are GitHub ownership, independent review, effective protection, and plan capability audited fail-closed? | [`github-governance-authority.md`](github-governance-authority.md) | verify | preview |\n| How do I gate release artifacts with KFD-1 contract-world witnesses? | [`release-passport.md`](release-passport.md#kfd-1-contract-world-release-gate) | verify/use | stable |\n| How do I declare, render, and audit product KFD-2 release trust claims? | [`kfd-support.md`](kfd-support.md#kfd-2) + [`release-passport.md`](release-passport.md#kfd-2-release-trust-passport-audit) + [`cli.md`](cli.md) | verify/use | stable |\n| How do I gate KFD-3 collaboration-interface releases? | [`release-passport.md`](release-passport.md#kfd-3-collaboration-interface-release-gate) + [`cli.md`](cli.md) | verify/use | stable |\n| How do I detect, register, audit, witness, or query KFD-3 product surfaces? | [`kfd-support.md`](kfd-support.md) + [`cli.md`](cli.md) | verify/use | stable |\n| How do I adopt the KFD Agent Hub profile with one declaration and one adapter? | [`kfd-agent-hub.md`](kfd-agent-hub.md) | verify/use | preview |\n| How do I keep `@v3` floating refs while detecting Buildchain contract drift? | [`reusable-build-surface.md`](reusable-build-surface.md#floating-ref-contract-lock) | verify/use | stable |\n| How do reusable workflows bind controller intent, source/runtime identity, outcomes, and receipt evidence? | [`controller-evidence.md`](controller-evidence.md) | verify/use | draft |\n| How does an Agent propagate a finalized upstream release through downstream PR, deployment, production readback, and Work Control completion? | [`release-propagation.md`](release-propagation.md) | use/verify | preview |\n| How do paper or report repositories publish PDFs, metadata, source bundles, site-consumable manifests, npm packages, and GitHub Releases? | [`publication-artifacts.md`](publication-artifacts.md) | use | stable |\n| How do I generate KFD / Release Passport badge bundles without hand-maintaining Markdown? | [`readme-badges.md`](readme-badges.md) + [`cli.md`](cli.md) | use | stable |\n| How do I generate and verify a Homebrew tap from release passport evidence? | [`homebrew.md`](homebrew.md) + [`cli.md`](cli.md) | use/verify | stable |\n| How do I prove a PR-stage reusable build is the artifact source promoted later? | [`release-candidate.md`](release-candidate.md) + [`reusable-build-surface.md`](reusable-build-surface.md) | verify | stable |\n| Why are binary release assets archived by platform, and where is the single bundle? | [`binary-distribution.md`](binary-distribution.md) | verify | stable |\n| How do I add timestamped logs inside build scripts? | [`toolkit-observability.md`](toolkit-observability.md) | use | stable |\n| What package-owned facts should buildchain.libkungfu.dev render? | [`site-bundle-contract.md`](site-bundle-contract.md) | use | stable |\n| How do I call the reusable build workflow? | [`reusable-build-surface.md`](reusable-build-surface.md) | use | stable |\n| How does Buildchain schedule and aggregate a project-owned Shifu Gate profile? | [`shifu-gate-profiles.md`](shifu-gate-profiles.md) | use/verify | draft |\n| How do exact build artifacts become qualified, transcript-traceable demo media? | [`auditable-demo.md`](auditable-demo.md) | use/verify | draft |\n| How do I use one build job that follows alpha during development and stable for releases? | [`reusable-build-surface.md`](reusable-build-surface.md#automatic-channel-router) | use | preview |\n| How do self-hosted runners relay large artifacts through S3 before GitHub artifacts? | [`reusable-build-surface.md`](reusable-build-surface.md#artifact-transfer-relay) | use | stable |\n| How do self-hosted runners reuse local Git checkout caches without weakening source locks? | [`reusable-build-surface.md`](reusable-build-surface.md#locked-source-checkout-cache) | use | stable |\n| How do ephemeral GitHub-hosted runners share exact dependency or compiler caches without fixed-runner affinity? | [`cli.md`](cli.md#commands) | use/verify | preview |\n| How do I validate an unreleased Buildchain runtime train while keeping `@v3`? | [`runtime-train-validation.md`](runtime-train-validation.md) | use | stable |\n| How do I automatically qualify alpha candidates and publish the newest non-revoked qualified candidate at a fixed window? | [`stable-candidate-patrol.md`](stable-candidate-patrol.md) | use | preview |\n| How do I deploy a site/app preview, staging, or production surface? | [`web-surface-deployments.md`](web-surface-deployments.md) | use | stable |\n| How do I publish observed infrastructure contracts for downstream consumers? | [`infra-contract.md`](infra-contract.md) | use | preview |\n| How do I use the active actions directly? | [`../actions/validate-config/README.md`](../actions/validate-config/README.md), [`../actions/run-lifecycle/README.md`](../actions/run-lifecycle/README.md), [`../actions/promote-buildchain-ref/README.md`](../actions/promote-buildchain-ref/README.md), [`../actions/report-buildchain-issue/README.md`](../actions/report-buildchain-issue/README.md), [`../actions/github-artifact-attestation/README.md`](../actions/github-artifact-attestation/README.md), [`../actions/macos-credential-island/README.md`](../actions/macos-credential-island/README.md); `dist/site/workflow-registry.json#actions` is authoritative for the six-entry inventory. | use | stable |\n| How can a consumer workflow report a Buildchain-owned failure back to Buildchain? | [`consumer-issue-reporting.md`](consumer-issue-reporting.md) + [`../actions/report-buildchain-issue/README.md`](../actions/report-buildchain-issue/README.md) | use | stable |\n| What do the fixture repositories demonstrate? | [`../fixtures/libnode-shaped/README.md`](../fixtures/libnode-shaped/README.md), [`../fixtures/publish-transaction-shaped/README.md`](../fixtures/publish-transaction-shaped/README.md), [`../fixtures/web-surface-shaped/README.md`](../fixtures/web-surface-shaped/README.md), [`../fixtures/publication-artifact-shaped/README.md`](../fixtures/publication-artifact-shaped/README.md) | verify | stable |\n| What license and contribution terms apply? | [`../LICENSE`](../LICENSE) + [`../LICENSE-POLICY.md`](../LICENSE-POLICY.md) | use | stable |\n| What trademark, official-service, and provider-compliance boundaries apply? | [`../TRADEMARK.md`](../TRADEMARK.md) + [`../ACCEPTABLE_USE.md`](../ACCEPTABLE_USE.md) + [`../PROVIDER_COMPLIANCE.md`](../PROVIDER_COMPLIANCE.md) | use | stable |\n| How do I report a vulnerability? | [`../SECURITY.md`](../SECURITY.md) | use | stable |\n\n## Also asking about\n\n- **ABV / old workflows / old action repositories** -> [`release-governance.md`](release-governance.md)\n  and [`migration-inventory.md`](migration-inventory.md).\n- **v3 / v3-alpha / v3.0 / v3.0-alpha / exact tags / floating tags** ->\n  [`release-governance.md`](release-governance.md) and\n  [`release-flow.md`](release-flow.md).\n- **Buildchain self-dogfood / released alpha canary / stable compatibility lane** ->\n  [`release-governance.md`](release-governance.md#buildchain-alpha-self-dogfood).\n- **qualified alpha ledger / scheduled stable selection / hold and revoke** ->\n  [`stable-candidate-patrol.md`](stable-candidate-patrol.md).\n- **v3.1 vs v3.2 / when to open a new minor line** ->\n  [`versioning.md`](versioning.md).\n- **dry-run / what would happen if this channel PR merges** -> [`cli.md`](cli.md)\n  and [`release-flow.md`](release-flow.md).\n- **protected dev branches / scheduled ready-PR merge / daily-weekly-monthly patrol** ->\n  [`release-governance.md`](release-governance.md#protected-dev-branches) and\n  [`release-governance.md`](release-governance.md#buildchain-patrol).\n- **pnpm / npm / yarn / package-manager adapters** ->\n  [`lifecycle-protocol.md`](lifecycle-protocol.md).\n- **pip / Conan / CMake / custom commands** -> [`lifecycle-protocol.md`](lifecycle-protocol.md)\n  and [`reusable-build-surface.md`](reusable-build-surface.md).\n- **libnode / native artifacts / self-hosted runner matrix** ->\n  [`reusable-build-surface.md`](reusable-build-surface.md) and\n  [`../fixtures/libnode-shaped/README.md`](../fixtures/libnode-shaped/README.md).\n- **S3 artifact relay / self-hosted runner artifact transfer** ->\n  [`reusable-build-surface.md`](reusable-build-surface.md#artifact-transfer-relay).\n- **local Git checkout cache / self-hosted source transport** ->\n  [`reusable-build-surface.md`](reusable-build-surface.md#locked-source-checkout-cache).\n- **runtime train validation / temporary `buildchain-ref` override** ->\n  [`runtime-train-validation.md`](runtime-train-validation.md) and\n  [`reusable-build-surface.md`](reusable-build-surface.md).\n- **consumer workflow feedback / automatic Buildchain GitHub issues** ->\n  [`consumer-issue-reporting.md`](consumer-issue-reporting.md).\n- **PR-stage RC artifacts / promote-only release candidates** ->\n  [`release-candidate.md`](release-candidate.md) and\n  [`reusable-build-surface.md`](reusable-build-surface.md).\n- **infra contract / observed infrastructure outputs / downstream contract propagation** ->\n  [`infra-contract.md`](infra-contract.md).\n- **standalone binary install / platform archives / GitHub Release bundle** ->\n  [`install.md`](install.md), [`binary-distribution.md`](binary-distribution.md),\n  and [`release-passport.md`](release-passport.md).\n- **Trusted Publishing / npm / publish evidence / recovery** ->\n  [`cli.md`](cli.md) and [`publish-transaction.md`](publish-transaction.md).\n- **Git source digest / module build facts / product build facts / legacy\n  Kungfu build info** -> [`build-facts.md`](build-facts.md) and [`cli.md`](cli.md).\n- **release chains / upstream package or publication artifact as source of truth / site synchronization** ->\n  [`release-propagation.md`](release-propagation.md).\n- **paper repositories / PDFs / publication manifests / immutable archive registries / source bundles** ->\n  [`publication-artifacts.md`](publication-artifacts.md).\n- **README status badges / KFD badge bundles / badge facts JSON** ->\n  [`readme-badges.md`](readme-badges.md) and [`cli.md`](cli.md).\n- **Homebrew taps / distribution indexes / Formula drift checks** ->\n  [`homebrew.md`](homebrew.md) and [`cli.md`](cli.md).\n- **KFD-1 contract worlds / byte-for-byte release gates** ->\n  [`release-passport.md`](release-passport.md#kfd-1-contract-world-release-gate).\n- **KFD-2 public release trust claim audit** ->\n  [`release-passport.md`](release-passport.md#kfd-2-release-trust-passport-audit).\n- **KFD-3 collaboration-interface / agent-facing control surface closure** ->\n  [`release-passport.md`](release-passport.md#kfd-3-collaboration-interface-release-gate).\n- **floating `@v3` / contract lock / compatible drift issue** ->\n  [`reusable-build-surface.md`](reusable-build-surface.md#floating-ref-contract-lock).\n- **GitHub Release passport / binary assets / artifact evidence / agent release checks** ->\n  [`release-passport.md`](release-passport.md),\n  [`binary-distribution.md`](binary-distribution.md), and [`cli.md`](cli.md).\n- **Buildchain logging / timestamps / consumer build phase timing** ->\n  [`toolkit-observability.md`](toolkit-observability.md) for JavaScript API\n  imports, and [`cli.md`](cli.md) for workflow or shell command usage.\n- **buildchain.libkungfu.dev / package-owned site facts** ->\n  [`site-bundle-contract.md`](site-bundle-contract.md).\n- **sites / web previews / staging / production gates** ->\n  [`web-surface-deployments.md`](web-surface-deployments.md).\n- **trademark / fork / official service / provider compliance / release\n  evidence boundary** -> [`../TRADEMARK.md`](../TRADEMARK.md),\n  [`../ACCEPTABLE_USE.md`](../ACCEPTABLE_USE.md), and\n  [`../PROVIDER_COMPLIANCE.md`](../PROVIDER_COMPLIANCE.md).\n\n## How this map is maintained\n\n- A document becomes a row here when it is a stable entrypoint for a user,\n  contributor, or workflow consumer.\n- A row's status must never claim more than the artifact delivers.\n- `why` documents explain intent and design pressure; `verify` and `use`\n  documents should state what is guaranteed, where to verify it, and the current\n  maturity of that guarantee."
+      "markdown": "---\nstatus: active\nperiod: ongoing\ntheme: buildchain-documentation-map\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: unreviewed\nlast_reviewed: 2026-07-31\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-07-31\n  invisible_context: not asserted\n---\n\n# Documentation Map\n\nStart here. Find the question you have; follow it to the document that answers\nit. This map is meant to be readable by both a person skimming for the right doc\nand an agent grounding a specific claim.\n\nEach row carries a **plane** - *why* (intent / rationale), *verify* (trust the\nrunning artifact), *use* (consume / extend) - and a **status**:\n\n- `stable` - current and holds.\n- `draft` - exists, rough or incomplete.\n- `to write` - planned; the material exists but is not yet a single doc.\n- `retired` - intentionally not part of the active Buildchain v3 surface.\n\n## Start by Role or Intent\n\n| Role or intent | First entry | Then |\n| --- | --- | --- |\n| First-time repository adopter | [Golden Path](getting-started.md) | [Lifecycle Protocol](lifecycle-protocol.md) only when the generated defaults need changes |\n| CLI operator or agent | [Generated CLI Reference](cli-reference.md) | [CLI guide](cli.md) for concepts and worked examples |\n| Node toolkit developer | [Generated Node API Reference](node-api-reference.md) | [Core package guide](../packages/core/README.md) for recipes |\n| Build/release operator | [Reusable Build Surface](reusable-build-surface.md) | [Release Flow](release-flow.md) and [Release Passport](release-passport.md) |\n| Product/trust reviewer | [Product Mechanism](product-mechanism.md) | [Release Passport](release-passport.md) and [KFD Support](kfd-support.md) |\n\nThese entrypoints keep common destinations within three meaningful hops:\nREADME or this map, the role entry, and the normative contract or generated\nreference.\n\n## Capability Coverage\n\nThis package should be usable by an agent from the npm artifact alone. The\nmachine-readable `dist/site/` bundle is the first fact source; the Markdown\nmanuals explain those facts and give operator examples.\n\n`dist/site/capability-registry.json` is the capability navigation entrypoint.\nIt groups the public surface into stable product areas so sites and agents do\nnot have to infer structure from file names. Each page, manual, CLI command,\nworkflow, action, and Node API export also carries a `capabilityGroup`,\n`audience`, and `maturity` field in its own registry.\n\n| Capability group | Primary facts | Primary manuals |\n| --- | --- | --- |\n| Getting Started | `capability-registry.json`, `product-mechanism.json` | [`getting-started.md`](getting-started.md), [`install.md`](install.md), [`product-mechanism.md`](product-mechanism.md), [`cli.md`](cli.md) |\n| Release Passport and Trust | `release-model.json`, `artifact-schemas.json`, `publication-authority-registry.json`, `kfd-claims.json` | [`release-passport.md`](release-passport.md), [`github-artifact-attestation.md`](github-artifact-attestation.md), [`publication-authority.md`](publication-authority.md), [`release-candidate.md`](release-candidate.md), [`publish-transaction.md`](publish-transaction.md), [`binary-distribution.md`](binary-distribution.md) |\n| Reusable Build and Lifecycle | `workflow-registry.json`, `controller-registry.json`, `release-model.json` | [`reusable-build-surface.md`](reusable-build-surface.md), [`controller-evidence.md`](controller-evidence.md), [`shifu-gate-profiles.md`](shifu-gate-profiles.md), [`lifecycle-protocol.md`](lifecycle-protocol.md) |\n| KFD Trust and Surface Closure | `kfd-claims.json`, `public-surface-audit.json`, `cli-registry.json`, `node-api-registry.json` | [`kfd-support.md`](kfd-support.md), [`release-passport.md`](release-passport.md) |\n| Site Bundle, Web Surfaces, and Propagation | `buildchain-site.json`, `site-manifest.json`, `page-registry.json`, `release-model.json` | [`site-bundle-contract.md`](site-bundle-contract.md), [`web-surface-deployments.md`](web-surface-deployments.md), [`release-propagation.md`](release-propagation.md) |\n| Publication Artifacts | `publication-registry.json`, `workflow-registry.json`, `node-api-registry.json`, `manual-registry.json`, `kungfu-buildchain-publication-artifact-registry` | [`publication-artifacts.md`](publication-artifacts.md), [`reusable-build-surface.md`](reusable-build-surface.md) |\n| Distribution Indexes and Badges | `badge-endpoint-registry.json`, `node-api-registry.json`, `manual-registry.json` | [`readme-badges.md`](readme-badges.md), [`homebrew.md`](homebrew.md) |\n| Build Facts, Observability, and Diagnostics | `cli-registry.json`, `node-api-registry.json`, lifecycle artifacts | [`build-facts.md`](build-facts.md), [`toolkit-observability.md`](toolkit-observability.md), [`consumer-issue-reporting.md`](consumer-issue-reporting.md) |\n| Governance, Versioning, and Runtime Drift | `buildchain-contract.json`, `workflow-registry.json`, `release-model.json` | [`github-governance-authority.md`](github-governance-authority.md), [`release-governance.md`](release-governance.md), [`release-flow.md`](release-flow.md), [`versioning.md`](versioning.md), [`runtime-train-validation.md`](runtime-train-validation.md), [`cli.md`](cli.md) |\n| CLI and Node API Reference | `cli-registry.json`, `node-api-registry.json`, `workflow-registry.json`, `manual-registry.json` | [`cli-reference.md`](cli-reference.md), [`node-api-reference.md`](node-api-reference.md), [`cli.md`](cli.md), [`../packages/core/README.md`](../packages/core/README.md) |\n\n| Capability | Machine-readable entry | Manual entry |\n| --- | --- | --- |\n| Capability-grouped KFD navigation | `dist/site/capability-registry.json`, `dist/site/page-registry.json`, `dist/site/manual-registry.json`, `dist/site/cli-registry.json`, `dist/site/node-api-registry.json` | this map, [`site-bundle-contract.md`](site-bundle-contract.md), [`kfd-support.md`](kfd-support.md) |\n| KFD-1 / KFD-2 / KFD-3 release-passport gates | `dist/site/kfd-claims.json`, `dist/site/buildchain-contract.json`, `dist/site/artifact-schemas.json` | [`release-passport.md`](release-passport.md) |\n| Product invariant Passport release gate | `buildchain.release.json#invariantPassports`, `dist/site/buildchain-contract.json` | [`release-passport.md`](release-passport.md) |\n| GitHub keyless Linux artifact attestation | `buildchain.release.json#githubArtifactAttestations`, `dist/site/workflow-registry.json`, `dist/site/artifact-schemas.json` | [`github-artifact-attestation.md`](github-artifact-attestation.md) |\n| Declarative cross-platform artifact signing | `kungfu-buildchain-artifact-signing-request/v1`, `kungfu-buildchain-artifact-signing-result/v1` | [`reusable-build-surface.md`](reusable-build-surface.md#artifact-signing-authority) |\n| KFD-3 public surface reverse audit | `dist/site/public-surface-audit.json`, `dist/site/cli-registry.json`, `dist/site/workflow-registry.json`, `dist/site/page-registry.json` | [`cli.md`](cli.md), [`site-bundle-contract.md`](site-bundle-contract.md) |\n| KFD-1 / KFD-2 / KFD-3 first-class CLI and Node API | `.buildchain/kfd/kfd-3/surfaces.json`, `dist/site/kfd-claims.json`, `buildchain.release.json`, KFD schemas from `@kungfu-tech/kfd` | [`kfd-support.md`](kfd-support.md), [`cli.md`](cli.md#commands) |\n| Declarative KFD Agent Hub adapter conformance and Passport evidence | `.buildchain/kfd/agent-hub.json`, `.buildchain/artifacts/kfd-agent-hub/evidence.json`, `buildchain.release.json#kfdAgentHub` | [`kfd-agent-hub.md`](kfd-agent-hub.md) |\n| Floating `@v3` drift detection and compatibility issues | `dist/site/buildchain-contract.json` | [`reusable-build-surface.md`](reusable-build-surface.md#floating-ref-contract-lock) |\n| npm publish transactions, evidence, dist-tags, and recovery | `dist/site/release-model.json`, `dist/site/artifact-schemas.json` | [`publish-transaction.md`](publish-transaction.md) |\n| Git/source/version/module/product build facts | `dist/site/node-api-registry.json`, `dist/site/cli-registry.json`, `kungfu-buildchain-module-build-facts`, `kungfu-buildchain-product-build-facts` | [`build-facts.md`](build-facts.md) |\n| GitHub Release passport/evidence publication | `dist/site/release-model.json`, `dist/site/artifact-schemas.json` | [`release-governance.md`](release-governance.md), [`release-candidate.md`](release-candidate.md) |\n| GitHub ownership, effective protection, plan capability, and managed-zone governance receipts | `dist/site/node-api-registry.json`, `dist/site/cli-registry.json`, `kungfu-buildchain-github-governance-receipt` | [`github-governance-authority.md`](github-governance-authority.md) |\n| release propagation for package/publication/site chains | `dist/site/release-model.json` | [`release-propagation.md`](release-propagation.md) |\n| publication artifact manifests, immutable archive registries, source bundles, and paper repository workflows | `dist/site/publication-registry.json`, `dist/site/workflow-registry.json`, `dist/site/node-api-registry.json`, `kungfu-buildchain-publication-artifact-manifest`, `kungfu-buildchain-publication-artifact-registry` | [`publication-artifacts.md`](publication-artifacts.md) |\n| Generated badge bundles, README badge blocks, and badge facts | `dist/site/node-api-registry.json`, `dist/site/manual-registry.json`, `kungfu-buildchain-badge-bundle-facts`, `kungfu-buildchain-readme-badge-facts` | [`readme-badges.md`](readme-badges.md) |\n| Homebrew tap distribution indexes | `dist/site/node-api-registry.json`, `dist/site/buildchain-contract.json` | [`homebrew.md`](homebrew.md) |\n| Buildchain CLI manual | `dist/site/cli-registry.json`, `dist/site/manual-registry.json` | [`cli.md`](cli.md) |\n| Node API / package exports | `dist/site/node-api-registry.json`, `dist/site/release-provenance.json` | [`cli.md`](cli.md#node-api-and-package-exports) |\n\n`dist/site/kfd-claims.json` is generated from\n`packages/core/buildchain-kfd-claims.js`. Treat that module and JSON file as the\nsource claim registry; this map and the manuals explain those claims but do not\nreplace them.\n\n## Map\n\n| Your question | Document | Plane | Status |\n| --- | --- | --- | --- |\n| What is Buildchain, in one idea? | [`../README.md`](../README.md) | - | stable |\n| How do I complete a first clean adoption in 15–30 minutes? | [`getting-started.md`](getting-started.md) | use | stable |\n| Why is Buildchain a Release Passport mechanism rather than a generic workflow collection? | [`product-mechanism.md`](product-mechanism.md) | why | stable |\n| How do agents and contributors enter this repo? | [`../AGENTS.md`](../AGENTS.md) + [`../CONTRIBUTING.md`](../CONTRIBUTING.md) | use | stable |\n| How do I install a standalone binary or npm package? | [`install.md`](install.md) | use | stable |\n| How do I run or look up the `buildchain` CLI? | [`cli-reference.md`](cli-reference.md) + [`cli.md`](cli.md) | use | stable |\n| How do I import Buildchain toolkit APIs from JavaScript build code? | [`node-api-reference.md`](node-api-reference.md) + [`../packages/core/README.md`](../packages/core/README.md) | use | stable |\n| How do I initialize a new repository? | [`getting-started.md`](getting-started.md) + [`lifecycle-protocol.md`](lifecycle-protocol.md) | use | stable |\n| Why does Buildchain use branch-driven release governance? | [`release-governance.md`](release-governance.md) | why | stable |\n| How do protected dev branches and scheduled ready-PR merging work? | [`release-governance.md`](release-governance.md#protected-dev-branches) | use | stable |\n| How do slow required checks land reliably on a busy dev channel? | [`release-governance.md`](release-governance.md#protected-dev-branches) + [`cli.md`](cli.md#commands) | use | preview |\n| How do I run daily, weekly, or monthly repository patrols? | [`release-governance.md`](release-governance.md#buildchain-patrol) | use | stable |\n| How does Buildchain decide patch, minor, and major release lines? | [`versioning.md`](versioning.md) | why | stable |\n| What exact branch/tag state machine runs on alpha, release, and major gate? | [`release-flow.md`](release-flow.md) | verify | stable |\n| What did Buildchain migrate or retire from old action repositories? | [`migration-inventory.md`](migration-inventory.md) | verify | stable |\n| What is the active action and workflow source of truth? | [`ownership.md`](ownership.md) | verify | stable |\n| How do I declare version files and custom lifecycle commands? | [`lifecycle-protocol.md`](lifecycle-protocol.md) | use | stable |\n| How does publish evidence, recovery, and finalization work? | [`publish-transaction.md`](publish-transaction.md) | verify | stable |\n| How do I collect and verify module/product build facts from Git source, version files, and outputs? | [`build-facts.md`](build-facts.md) + [`cli.md`](cli.md) | use/verify | stable |\n| How do I publish or verify release passport artifacts? | [`release-passport.md`](release-passport.md) | use | stable |\n| How do I keylessly attest Linux release artifacts with GitHub and bind them to a Release Passport? | [`github-artifact-attestation.md`](github-artifact-attestation.md) | verify/use | preview |\n| How do I request detached, Developer ID, or Authenticode signing without consumer credentials? | [`reusable-build-surface.md`](reusable-build-surface.md#artifact-signing-authority) | verify/use | preview |\n| How do I seal exact artifact, identity, lifecycle, and KFD assessment roots for KFX admission? | [`artifact-verification-envelope.md`](artifact-verification-envelope.md) | verify/use | preview |\n| How is product publication authority sealed to an exact workflow, runner, control plane, nonce, and artifact? | [`publication-authority.md`](publication-authority.md) | verify | preview |\n| How are GitHub ownership, independent review, effective protection, and plan capability audited fail-closed? | [`github-governance-authority.md`](github-governance-authority.md) | verify | preview |\n| How do I gate release artifacts with KFD-1 contract-world witnesses? | [`release-passport.md`](release-passport.md#kfd-1-contract-world-release-gate) | verify/use | stable |\n| How do I declare, render, and audit product KFD-2 release trust claims? | [`kfd-support.md`](kfd-support.md#kfd-2) + [`release-passport.md`](release-passport.md#kfd-2-release-trust-passport-audit) + [`cli.md`](cli.md) | verify/use | stable |\n| How do I gate KFD-3 collaboration-interface releases? | [`release-passport.md`](release-passport.md#kfd-3-collaboration-interface-release-gate) + [`cli.md`](cli.md) | verify/use | stable |\n| How do I detect, register, audit, witness, or query KFD-3 product surfaces? | [`kfd-support.md`](kfd-support.md) + [`cli.md`](cli.md) | verify/use | stable |\n| How do I adopt the KFD Agent Hub profile with one declaration and one adapter? | [`kfd-agent-hub.md`](kfd-agent-hub.md) | verify/use | preview |\n| How do I keep `@v3` floating refs while detecting Buildchain contract drift? | [`reusable-build-surface.md`](reusable-build-surface.md#floating-ref-contract-lock) | verify/use | stable |\n| How do reusable workflows bind controller intent, source/runtime identity, outcomes, and receipt evidence? | [`controller-evidence.md`](controller-evidence.md) | verify/use | draft |\n| How does an Agent propagate a finalized upstream release through downstream PR, deployment, production readback, and Work Control completion? | [`release-propagation.md`](release-propagation.md) | use/verify | preview |\n| How do paper or report repositories publish PDFs, metadata, source bundles, site-consumable manifests, npm packages, and GitHub Releases? | [`publication-artifacts.md`](publication-artifacts.md) | use | stable |\n| How do I generate KFD / Release Passport badge bundles without hand-maintaining Markdown? | [`readme-badges.md`](readme-badges.md) + [`cli.md`](cli.md) | use | stable |\n| How do I generate and verify a Homebrew tap from release passport evidence? | [`homebrew.md`](homebrew.md) + [`cli.md`](cli.md) | use/verify | stable |\n| How do I prove a PR-stage reusable build is the artifact source promoted later? | [`release-candidate.md`](release-candidate.md) + [`reusable-build-surface.md`](reusable-build-surface.md) | verify | stable |\n| Why are binary release assets archived by platform, and where is the single bundle? | [`binary-distribution.md`](binary-distribution.md) | verify | stable |\n| How do I add timestamped logs inside build scripts? | [`toolkit-observability.md`](toolkit-observability.md) | use | stable |\n| What package-owned facts should buildchain.libkungfu.dev render? | [`site-bundle-contract.md`](site-bundle-contract.md) | use | stable |\n| How do I call the reusable build workflow? | [`reusable-build-surface.md`](reusable-build-surface.md) | use | stable |\n| How does Buildchain schedule and aggregate a project-owned Shifu Gate profile? | [`shifu-gate-profiles.md`](shifu-gate-profiles.md) | use/verify | draft |\n| How do exact build artifacts become qualified, transcript-traceable demo media? | [`auditable-demo.md`](auditable-demo.md) | use/verify | draft |\n| How do I use one build job that follows alpha during development and stable for releases? | [`reusable-build-surface.md`](reusable-build-surface.md#automatic-channel-router) | use | preview |\n| How do self-hosted runners relay large artifacts through S3 before GitHub artifacts? | [`reusable-build-surface.md`](reusable-build-surface.md#artifact-transfer-relay) | use | stable |\n| How do self-hosted runners reuse local Git checkout caches without weakening source locks? | [`reusable-build-surface.md`](reusable-build-surface.md#locked-source-checkout-cache) | use | stable |\n| How do ephemeral GitHub-hosted runners share exact dependency or compiler caches without fixed-runner affinity? | [`cli.md`](cli.md#commands) | use/verify | preview |\n| How do I validate an unreleased Buildchain runtime train while keeping `@v3`? | [`runtime-train-validation.md`](runtime-train-validation.md) | use | stable |\n| How do I automatically qualify alpha candidates and publish the newest non-revoked qualified candidate at a fixed window? | [`stable-candidate-patrol.md`](stable-candidate-patrol.md) | use | preview |\n| How do I deploy a site/app preview, staging, or production surface? | [`web-surface-deployments.md`](web-surface-deployments.md) | use | stable |\n| How do I publish observed infrastructure contracts for downstream consumers? | [`infra-contract.md`](infra-contract.md) | use | preview |\n| How do I use the active actions directly? | [`../actions/validate-config/README.md`](../actions/validate-config/README.md), [`../actions/run-lifecycle/README.md`](../actions/run-lifecycle/README.md), [`../actions/promote-buildchain-ref/README.md`](../actions/promote-buildchain-ref/README.md), [`../actions/report-buildchain-issue/README.md`](../actions/report-buildchain-issue/README.md), [`../actions/github-artifact-attestation/README.md`](../actions/github-artifact-attestation/README.md), [`../actions/macos-credential-island/README.md`](../actions/macos-credential-island/README.md); `dist/site/workflow-registry.json#actions` is authoritative for the six-entry inventory. | use | stable |\n| How can a consumer workflow report a Buildchain-owned failure back to Buildchain? | [`consumer-issue-reporting.md`](consumer-issue-reporting.md) + [`../actions/report-buildchain-issue/README.md`](../actions/report-buildchain-issue/README.md) | use | stable |\n| What do the fixture repositories demonstrate? | [`../fixtures/libnode-shaped/README.md`](../fixtures/libnode-shaped/README.md), [`../fixtures/publish-transaction-shaped/README.md`](../fixtures/publish-transaction-shaped/README.md), [`../fixtures/web-surface-shaped/README.md`](../fixtures/web-surface-shaped/README.md), [`../fixtures/publication-artifact-shaped/README.md`](../fixtures/publication-artifact-shaped/README.md) | verify | stable |\n| What license and contribution terms apply? | [`../LICENSE`](../LICENSE) + [`../LICENSE-POLICY.md`](../LICENSE-POLICY.md) | use | stable |\n| What trademark, official-service, and provider-compliance boundaries apply? | [`../TRADEMARK.md`](../TRADEMARK.md) + [`../ACCEPTABLE_USE.md`](../ACCEPTABLE_USE.md) + [`../PROVIDER_COMPLIANCE.md`](../PROVIDER_COMPLIANCE.md) | use | stable |\n| How do I report a vulnerability? | [`../SECURITY.md`](../SECURITY.md) | use | stable |\n\n## Also asking about\n\n- **ABV / old workflows / old action repositories** -> [`release-governance.md`](release-governance.md)\n  and [`migration-inventory.md`](migration-inventory.md).\n- **v3 / v3-alpha / v3.0 / v3.0-alpha / exact tags / floating tags** ->\n  [`release-governance.md`](release-governance.md) and\n  [`release-flow.md`](release-flow.md).\n- **Buildchain self-dogfood / released alpha canary / stable compatibility lane** ->\n  [`release-governance.md`](release-governance.md#buildchain-alpha-self-dogfood).\n- **qualified alpha ledger / scheduled stable selection / hold and revoke** ->\n  [`stable-candidate-patrol.md`](stable-candidate-patrol.md).\n- **v3.1 vs v3.2 / when to open a new minor line** ->\n  [`versioning.md`](versioning.md).\n- **dry-run / what would happen if this channel PR merges** -> [`cli.md`](cli.md)\n  and [`release-flow.md`](release-flow.md).\n- **protected dev branches / scheduled ready-PR merge / daily-weekly-monthly patrol** ->\n  [`release-governance.md`](release-governance.md#protected-dev-branches) and\n  [`release-governance.md`](release-governance.md#buildchain-patrol).\n- **pnpm / npm / yarn / package-manager adapters** ->\n  [`lifecycle-protocol.md`](lifecycle-protocol.md).\n- **pip / Conan / CMake / custom commands** -> [`lifecycle-protocol.md`](lifecycle-protocol.md)\n  and [`reusable-build-surface.md`](reusable-build-surface.md).\n- **libnode / native artifacts / self-hosted runner matrix** ->\n  [`reusable-build-surface.md`](reusable-build-surface.md) and\n  [`../fixtures/libnode-shaped/README.md`](../fixtures/libnode-shaped/README.md).\n- **S3 artifact relay / self-hosted runner artifact transfer** ->\n  [`reusable-build-surface.md`](reusable-build-surface.md#artifact-transfer-relay).\n- **local Git checkout cache / self-hosted source transport** ->\n  [`reusable-build-surface.md`](reusable-build-surface.md#locked-source-checkout-cache).\n- **runtime train validation / temporary `buildchain-ref` override** ->\n  [`runtime-train-validation.md`](runtime-train-validation.md) and\n  [`reusable-build-surface.md`](reusable-build-surface.md).\n- **consumer workflow feedback / automatic Buildchain GitHub issues** ->\n  [`consumer-issue-reporting.md`](consumer-issue-reporting.md).\n- **PR-stage RC artifacts / promote-only release candidates** ->\n  [`release-candidate.md`](release-candidate.md) and\n  [`reusable-build-surface.md`](reusable-build-surface.md).\n- **infra contract / observed infrastructure outputs / downstream contract propagation** ->\n  [`infra-contract.md`](infra-contract.md).\n- **standalone binary install / platform archives / GitHub Release bundle** ->\n  [`install.md`](install.md), [`binary-distribution.md`](binary-distribution.md),\n  and [`release-passport.md`](release-passport.md).\n- **Trusted Publishing / npm / publish evidence / recovery** ->\n  [`cli.md`](cli.md) and [`publish-transaction.md`](publish-transaction.md).\n- **Git source digest / module build facts / product build facts / legacy\n  Kungfu build info** -> [`build-facts.md`](build-facts.md) and [`cli.md`](cli.md).\n- **release chains / upstream package or publication artifact as source of truth / site synchronization** ->\n  [`release-propagation.md`](release-propagation.md).\n- **paper repositories / PDFs / publication manifests / immutable archive registries / source bundles** ->\n  [`publication-artifacts.md`](publication-artifacts.md).\n- **README status badges / KFD badge bundles / badge facts JSON** ->\n  [`readme-badges.md`](readme-badges.md) and [`cli.md`](cli.md).\n- **Homebrew taps / distribution indexes / Formula drift checks** ->\n  [`homebrew.md`](homebrew.md) and [`cli.md`](cli.md).\n- **KFD-1 contract worlds / byte-for-byte release gates** ->\n  [`release-passport.md`](release-passport.md#kfd-1-contract-world-release-gate).\n- **KFD-2 public release trust claim audit** ->\n  [`release-passport.md`](release-passport.md#kfd-2-release-trust-passport-audit).\n- **KFD-3 collaboration-interface / agent-facing control surface closure** ->\n  [`release-passport.md`](release-passport.md#kfd-3-collaboration-interface-release-gate).\n- **floating `@v3` / contract lock / compatible drift issue** ->\n  [`reusable-build-surface.md`](reusable-build-surface.md#floating-ref-contract-lock).\n- **GitHub Release passport / binary assets / artifact evidence / agent release checks** ->\n  [`release-passport.md`](release-passport.md),\n  [`binary-distribution.md`](binary-distribution.md), and [`cli.md`](cli.md).\n- **Buildchain logging / timestamps / consumer build phase timing** ->\n  [`toolkit-observability.md`](toolkit-observability.md) for JavaScript API\n  imports, and [`cli.md`](cli.md) for workflow or shell command usage.\n- **buildchain.libkungfu.dev / package-owned site facts** ->\n  [`site-bundle-contract.md`](site-bundle-contract.md).\n- **sites / web previews / staging / production gates** ->\n  [`web-surface-deployments.md`](web-surface-deployments.md).\n- **trademark / fork / official service / provider compliance / release\n  evidence boundary** -> [`../TRADEMARK.md`](../TRADEMARK.md),\n  [`../ACCEPTABLE_USE.md`](../ACCEPTABLE_USE.md), and\n  [`../PROVIDER_COMPLIANCE.md`](../PROVIDER_COMPLIANCE.md).\n\n## How this map is maintained\n\n- A document becomes a row here when it is a stable entrypoint for a user,\n  contributor, or workflow consumer.\n- A row's status must never claim more than the artifact delivers.\n- `why` documents explain intent and design pressure; `verify` and `use`\n  documents should state what is guaranteed, where to verify it, and the current\n  maturity of that guarantee."
     },
     {
       "id": "manual:migration-inventory",
@@ -1304,6 +2429,258 @@
       ],
       "markdown": "---\nstatus: historical\nperiod: 2026-07\ntheme: buildchain-v2-migration-inventory\ndoc_type: migration-inventory\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: unreviewed\nlast_reviewed: 2026-07-31\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-07-31\n  invisible_context: not asserted\n---\n\n# Buildchain v2 Migration Inventory\n\nThis historical inventory records the Buildchain v2 consolidation boundary.\nBuildchain v3 is now the active monorepo source of truth for Kungfu repository\nworkflows, reusable build workflows, and Buildchain-native actions. The v2\nnames below preserve the migration decisions that v3 inherited; they are not a\ncurrent runtime baseline.\nStandalone `workflows` and `action-*` repositories are historical rollback\nanchors, not active Buildchain migration targets.\n\n## Workflow Sources\n\n| Source repository | Previous branch | Buildchain v2 disposition |\n| --- | --- | --- |\n| `workflows` | `dev/v2/v2.0` | root `.github/workflows` sources migrated; reusable workflows linted by actionlint |\n\n## Reusable Workflow Boundaries\n\nThe active Buildchain-native reusable surface is:\n\n| Workflow | Disposition |\n| --- | --- |\n| `.github/workflows/.build.yml` | active reusable build contract: runner presets, trusted event gate, publish source lock, lifecycle commands, deterministic artifacts, aggregate summary, and release manifest outputs |\n\nHidden reusable workflow files from the old `workflows` repository are retained\nonly when they still have an active compatibility or migration boundary. Retired\nPR orchestration paths are not kept in `.github/workflows`; they remain listed\nin the inventory as excluded legacy surfaces. In particular,\n`.batch-pull-request.yml` is removed with the retired batch PR action family,\nand the legacy `.release-new-version.yml` path is not the modern publish\nsurface. New publish integrations should use `.build.yml`, `buildchain.toml`,\n`lifecycle.publish`, and publish transaction evidence.\n\nRelease templates that previously performed direct publishing or deployment are\nnow fail-closed when retained for compatibility discovery. They do not call\nlegacy publish actions, `npm publish`, or deploy providers directly. Callers must\nmigrate to `release-candidate-promote.yml@v3` or a project-owned\n`lifecycle.publish` command behind a publish-gate source lock, so floating\n`@v3` consumers cannot bypass source-lock drift protection.\n\nThe public promotion workflow is now a generated dual-channel router. Existing\ncallers remain source-compatible, while callers that want alpha workflow-shell\nfixes before stable promotion should add `buildchain-channel: auto` plus\n`buildchain-alpha-contract-lock-path` and\n`buildchain-stable-contract-lock-path`. Keep one common promotion declaration;\ndo not duplicate alpha and stable jobs or call\n`.release-candidate-promote.yml` directly.\n\nBuildchain also keeps the workflow-file layout transition declarative in\n`.buildchain/promotion-shell-routing.json`. Stable `v2.14.13` contains the hidden\nadvanced workflow, so the stable lane is pinned to that implementation's\nimmutable release SHA and forwards the full internal identity surface. This is\nprovider-owned compatibility state; consumers still keep the same single public\npromotion job.\n\n## Migrated Actions\n\nNo standalone `action-*` repository is shipped as a Buildchain action anymore.\nOld product, operations, PR-helper, page-generation, dependency-sync, and\nversion-bump actions have either been retired or absorbed into Buildchain's\nnative lifecycle, reusable workflow, and promotion scripts.\n\n## Retired Actions Excluded From v2\n\nThese legacy action repositories are intentionally not shipped as buildchain v2\nactions because the corresponding workflows now reject the retired mechanism or\nbecause the action is part of that retired path.\n\n| Previous repository | Reason |\n| --- | --- |\n| `action-approve` | retired GitHub issue/PR helper; use repository-native GitHub automation |\n| `action-batch-pull-request` | retired PR orchestration helper; not part of the Buildchain reusable contract |\n| `action-bump-version` | replaced by Buildchain release-line scripts and `actions/promote-buildchain-ref` |\n| `action-check-format` | replaced by project-owned `lifecycle.verify` commands |\n| `action-find-dependencies` | retired in workflows v2 or backed by retired Airtable/dependency/collaborator/purge mechanism |\n| `action-generate-download-page` | retired product page generator; model as project-owned lifecycle/deploy work if needed |\n| `action-generate-release-page` | retired product page generator; model as project-owned lifecycle/deploy work if needed |\n| `action-merge-close-issue` | retired GitHub issue/PR helper; use repository-native GitHub automation |\n| `action-package-dependency` | retired in workflows v2 or backed by retired Airtable/dependency/collaborator/purge mechanism |\n| `action-publish-prebuilt` | retired S3 prebuilt publisher; use lifecycle publish plus publish transaction evidence |\n| `action-purge-artifacts` | retired in workflows v2 or backed by retired Airtable/dependency/collaborator/purge mechanism |\n| `action-qa-automated` | retired external QA trigger; model as project-owned lifecycle or workflow logic |\n| `action-release-note` | retired in workflows v2 or backed by retired Airtable/dependency/collaborator/purge mechanism |\n| `action-rollback-release` | replaced by Buildchain publish transaction recover/finalize/repair semantics |\n| `action-set-collaborators` | retired in workflows v2 or backed by retired Airtable/dependency/collaborator/purge mechanism |\n| `action-sync-airtable` | retired in workflows v2 or backed by retired Airtable/dependency/collaborator/purge mechanism |\n| `action-sync-extensions-version` | retired in workflows v2 or backed by retired Airtable/dependency/collaborator/purge mechanism |\n| `action-sync-pr` | retired PR synchronization helper; not part of the Buildchain reusable contract |\n| `action-update-dependencies-version` | retired dependency-version helper; use package-manager adapters and lifecycle commands |\n\n## Retired Workflows Excluded From v2\n\nThese legacy workflow entrypoints are intentionally not shipped from the root\n`.github/workflows` directory.\n\n| Previous workflow | Reason |\n| --- | --- |\n| `.batch-pull-request.yml` | retired PR orchestration helper; v2.5 dev integration governance will use a new protected-dev PR protocol instead |\n| `.release-new-version.yml` | retained as a fail-closed compatibility stub; direct publish model replaced by source-locked release-candidate promotion |\n| `.release-elastic-beanstalk.yml` | retained as a fail-closed compatibility stub; deploy side effects must move behind project lifecycle publish and publish-gate source locks |\n| `.sam-release.yml` | retained as a fail-closed compatibility stub; deploy side effects must move behind project lifecycle publish and publish-gate source locks |\n| `.wheel-release.yml` | retained as a fail-closed compatibility stub; package publish side effects must move behind project lifecycle publish and publish-gate source locks |\n\n## Buildchain-Native Actions\n\nThese actions are new Buildchain v2 surfaces rather than migrations from an\nolder standalone action repository.\n\n| Buildchain path | Purpose |\n| --- | --- |\n| `actions/promote-buildchain-ref` | governance-closed Buildchain release ref promotion |\n| `actions/run-lifecycle` | lifecycle command execution and deterministic artifact manifest generation |\n| `actions/validate-config` | `buildchain.toml` version-state and lifecycle preflight without executing lifecycle commands |\n\n## Current v3 Refs\n\n- Actions: `kungfu-systems/buildchain/actions/<name>@v3`\n- Reusable workflows: `kungfu-systems/buildchain/.github/workflows/<workflow>.yml@v3`\n\n## Verification Gates\n\n- `pnpm install --frozen-lockfile`\n- `pnpm run check`\n- GitHub-hosted `Verify` workflow\n- Manual `Self-hosted Runner Smoke` workflow for trusted self-hosted runner validation"
     },
+    {
+      "id": "manual:node-api-reference",
+      "title": "Buildchain Node API Reference",
+      "route": "/docs/node-api-reference",
+      "category": "manual",
+      "capabilityGroup": "api-cli-reference",
+      "audience": [
+        "agent",
+        "developer"
+      ],
+      "maturity": "stable",
+      "sourcePath": "docs/node-api-reference.md",
+      "digest": "sha256:2df82d2f754898d2f463ec0795e20f903f534dd537ac971e62b140beb21d49ee",
+      "headings": [
+        {
+          "level": 1,
+          "title": "Buildchain Node API Reference",
+          "anchor": "buildchain-node-api-reference"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain`",
+          "anchor": "kungfu-tech-buildchain"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/badges`",
+          "anchor": "kungfu-tech-buildchain-badges"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/build-facts`",
+          "anchor": "kungfu-tech-buildchain-build-facts"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/core`",
+          "anchor": "kungfu-tech-buildchain-core"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/artifact-passport`",
+          "anchor": "kungfu-tech-buildchain-artifact-passport"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/artifact-verification-envelope`",
+          "anchor": "kungfu-tech-buildchain-artifact-verification-envelope"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/github-artifact-attestation`",
+          "anchor": "kungfu-tech-buildchain-github-artifact-attestation"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/artifact-signing`",
+          "anchor": "kungfu-tech-buildchain-artifact-signing"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/artifact-signing-result`",
+          "anchor": "kungfu-tech-buildchain-artifact-signing-result"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/detached-artifact-signature`",
+          "anchor": "kungfu-tech-buildchain-detached-artifact-signature"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/anchored-version-material`",
+          "anchor": "kungfu-tech-buildchain-anchored-version-material"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/buildchain-contract`",
+          "anchor": "kungfu-tech-buildchain-buildchain-contract"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/candidate-timeline`",
+          "anchor": "kungfu-tech-buildchain-candidate-timeline"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/channel-candidate`",
+          "anchor": "kungfu-tech-buildchain-channel-candidate"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/cache-evidence`",
+          "anchor": "kungfu-tech-buildchain-cache-evidence"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/controller-evidence`",
+          "anchor": "kungfu-tech-buildchain-controller-evidence"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/diagnostics`",
+          "anchor": "kungfu-tech-buildchain-diagnostics"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/homebrew`",
+          "anchor": "kungfu-tech-buildchain-homebrew"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/issue-reporting`",
+          "anchor": "kungfu-tech-buildchain-issue-reporting"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/kfd`",
+          "anchor": "kungfu-tech-buildchain-kfd"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/kfd-product-gates`",
+          "anchor": "kungfu-tech-buildchain-kfd-product-gates"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/kfd-agent-hub`",
+          "anchor": "kungfu-tech-buildchain-kfd-agent-hub"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/buildchain-layout`",
+          "anchor": "kungfu-tech-buildchain-buildchain-layout"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/release-line-bootstrap`",
+          "anchor": "kungfu-tech-buildchain-release-line-bootstrap"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/readme-badges`",
+          "anchor": "kungfu-tech-buildchain-readme-badges"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/public-surface-audit`",
+          "anchor": "kungfu-tech-buildchain-public-surface-audit"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/logging`",
+          "anchor": "kungfu-tech-buildchain-logging"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/portable-dev-cache`",
+          "anchor": "kungfu-tech-buildchain-portable-dev-cache"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/publication-artifact`",
+          "anchor": "kungfu-tech-buildchain-publication-artifact"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/publication-package`",
+          "anchor": "kungfu-tech-buildchain-publication-package"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/publication-reproducibility`",
+          "anchor": "kungfu-tech-buildchain-publication-reproducibility"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/publication-sealed-bundle`",
+          "anchor": "kungfu-tech-buildchain-publication-sealed-bundle"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/paper`",
+          "anchor": "kungfu-tech-buildchain-paper"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/publication-authority`",
+          "anchor": "kungfu-tech-buildchain-publication-authority"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/publication-control-plane-audit`",
+          "anchor": "kungfu-tech-buildchain-publication-control-plane-audit"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/buildchain-publication-authority`",
+          "anchor": "kungfu-tech-buildchain-buildchain-publication-authority"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/github-governance-authority`",
+          "anchor": "kungfu-tech-buildchain-github-governance-authority"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/kfd-gate`",
+          "anchor": "kungfu-tech-buildchain-kfd-gate"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/release-candidate`",
+          "anchor": "kungfu-tech-buildchain-release-candidate"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/stable-candidate-ledger`",
+          "anchor": "kungfu-tech-buildchain-stable-candidate-ledger"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/release-passport`",
+          "anchor": "kungfu-tech-buildchain-release-passport"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/release-passport-contract`",
+          "anchor": "kungfu-tech-buildchain-release-passport-contract"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/release-propagation`",
+          "anchor": "kungfu-tech-buildchain-release-propagation"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/release-activation-transaction`",
+          "anchor": "kungfu-tech-buildchain-release-activation-transaction"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/surface-manifest`",
+          "anchor": "kungfu-tech-buildchain-surface-manifest"
+        },
+        {
+          "level": 2,
+          "title": "`@kungfu-tech/buildchain/buildchain-kfd-claims`",
+          "anchor": "kungfu-tech-buildchain-buildchain-kfd-claims"
+        }
+      ],
+      "markdown": "---\nstatus: active\nperiod: ongoing\ntheme: buildchain-generated-reference\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: generated\nlast_reviewed: 2026-08-01\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-08-01\n  invisible_context: not asserted\n---\n\n# Buildchain Node API Reference\n\n> Generated from `package.json#exports` and the exported ESM symbols in each target. Do not edit this file by hand.\n\nSignatures and source locations are mechanical. JavaScript return types remain conservative where the source declares no static type.\n\n## `@kungfu-tech/buildchain`\n\nTarget: `./packages/core/index.js`. Public symbols: 537.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `abortReleaseActivationTransaction` | function: function abortReleaseActivationTransaction(transaction, reason) | transaction, reason | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { abortReleaseActivationTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:277` |\n| `AGENT_INDEX_CONTRACT` | constant: const AGENT_INDEX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { AGENT_INDEX_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:31` |\n| `aggregateBuildFacts` | function: function aggregateBuildFacts({ cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {}) | { cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | subprocess | `import { aggregateBuildFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:458` |\n| `aggregateControllerReceipts` | function: function aggregateControllerReceipts({ plans = [], receipts = [] } = {}) | { plans = [], receipts = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { aggregateControllerReceipts } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:448` |\n| `ANCHORED_VERSION_MATERIAL_CONTRACT` | constant: const ANCHORED_VERSION_MATERIAL_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ANCHORED_VERSION_MATERIAL_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/anchored-version-material.js:15` |\n| `appendBuildchainLogEvent` | function: function appendBuildchainLogEvent(filePath, event) | filePath, event | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { appendBuildchainLogEvent } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:67` |\n| `applySurfaceTimestampPolicy` | function: function applySurfaceTimestampPolicy(manifest, options = {}) | manifest, options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { applySurfaceTimestampPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/surface-manifest.js:79` |\n| `ARTIFACT_EVIDENCE_CONTRACT` | constant: const ARTIFACT_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:29` |\n| `ARTIFACT_PASSPORT_LOCATOR_CONTRACT` | constant: const ARTIFACT_PASSPORT_LOCATOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_LOCATOR_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:11` |\n| `ARTIFACT_PASSPORT_POINTER_CONTRACT` | constant: const ARTIFACT_PASSPORT_POINTER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_POINTER_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:10` |\n| `ARTIFACT_SIGNING_AUTHORITY_CONTRACT` | constant: const ARTIFACT_SIGNING_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:7` |\n| `ARTIFACT_SIGNING_RECEIPT_CONTRACT` | constant: const ARTIFACT_SIGNING_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:5` |\n| `ARTIFACT_SIGNING_REQUEST_CONTRACT` | constant: const ARTIFACT_SIGNING_REQUEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_REQUEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:3` |\n| `ARTIFACT_SIGNING_RESULT_CONTRACT` | constant: const ARTIFACT_SIGNING_RESULT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RESULT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:12` |\n| `ARTIFACT_VERIFICATION_CONTRACT` | constant: const ARTIFACT_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:9` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:5` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:3` |\n| `artifactSigningDigest` | function: function artifactSigningDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactSigningDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:60` |\n| `artifactSigningEvidenceDigest` | function: function artifactSigningEvidenceDigest(evidence = []) | evidence = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { artifactSigningEvidenceDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:58` |\n| `artifactVerificationEnvelopeDigest` | function: function artifactVerificationEnvelopeDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactVerificationEnvelopeDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:50` |\n| `assertPackageManager` | function: function assertPackageManager(manager) | manager | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPackageManager } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:49` |\n| `assertPublicSurfaceReverseAudit` | function: function assertPublicSurfaceReverseAudit(report) | report | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:292` |\n| `auditKfd3Surfaces` | function: function auditKfd3Surfaces({ cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", } = {}) | { cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { auditKfd3Surfaces } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:547` |\n| `BADGE_BUNDLE_DEFAULT_CLAIMS` | constant: const BADGE_BUNDLE_DEFAULT_CLAIMS | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_DEFAULT_CLAIMS } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:17` |\n| `BADGE_BUNDLE_FACTS_CONTRACT` | constant: const BADGE_BUNDLE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:13` |\n| `BUILD_FACTS_GIT_CONTRACT` | constant: const BUILD_FACTS_GIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_GIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:9` |\n| `BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT` | constant: const BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:14` |\n| `BUILD_FACTS_MODULE_CONTRACT` | constant: const BUILD_FACTS_MODULE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_MODULE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:11` |\n| `BUILD_FACTS_PRODUCT_CONTRACT` | constant: const BUILD_FACTS_PRODUCT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_PRODUCT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:12` |\n| `BUILD_FACTS_VERIFY_CONTRACT` | constant: const BUILD_FACTS_VERIFY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERIFY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:13` |\n| `BUILD_FACTS_VERSION_CONTRACT` | constant: const BUILD_FACTS_VERSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERSION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:10` |\n| `BUILDCHAIN_AGENT_MANUALS` | constant: const BUILDCHAIN_AGENT_MANUALS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_AGENT_MANUALS } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-agent-manuals.js:1` |\n| `BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT` | constant: const BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:31` |\n| `BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT` | constant: const BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:5` |\n| `BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT` | constant: const BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:3` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:1` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:3` |\n| `BUILDCHAIN_CONFIG_PATH` | constant: const BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:7` |\n| `BUILDCHAIN_CONSUMER_ISSUE_CONTRACT` | constant: const BUILDCHAIN_CONSUMER_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONSUMER_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:4` |\n| `BUILDCHAIN_CONTRACT_LOCK` | constant: const BUILDCHAIN_CONTRACT_LOCK | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:8` |\n| `BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:9` |\n| `BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:6` |\n| `BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:4` |\n| `BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:3` |\n| `BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:5` |\n| `BUILDCHAIN_DIAGNOSTICS_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:28` |\n| `BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:33` |\n| `BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:35` |\n| `BUILDCHAIN_DIR` | constant: const BUILDCHAIN_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:4` |\n| `BUILDCHAIN_GENERATED_DIRS` | constant: const BUILDCHAIN_GENERATED_DIRS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GENERATED_DIRS } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:36` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1363` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1365` |\n| `BUILDCHAIN_JSON_FORMATTING_POLICY` | constant: const BUILDCHAIN_JSON_FORMATTING_POLICY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_JSON_FORMATTING_POLICY } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:14` |\n| `BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:14` |\n| `BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT` | constant: const BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:15` |\n| `BUILDCHAIN_KFD_ROOT` | constant: const BUILDCHAIN_KFD_ROOT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_ROOT } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:11` |\n| `BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:16` |\n| `BUILDCHAIN_KFD1_DIR` | constant: const BUILDCHAIN_KFD1_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:12` |\n| `BUILDCHAIN_KFD1_RELEASE_GATE_PATH` | constant: const BUILDCHAIN_KFD1_RELEASE_GATE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_RELEASE_GATE_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:17` |\n| `BUILDCHAIN_KFD1_VERIFY_RESULT_PATH` | constant: const BUILDCHAIN_KFD1_VERIFY_RESULT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_VERIFY_RESULT_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:18` |\n| `BUILDCHAIN_KFD2_CLAIM_ARGS_PATH` | constant: const BUILDCHAIN_KFD2_CLAIM_ARGS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIM_ARGS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:21` |\n| `BUILDCHAIN_KFD2_CLAIMS_DIR` | constant: const BUILDCHAIN_KFD2_CLAIMS_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIMS_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:22` |\n| `BUILDCHAIN_KFD2_DIR` | constant: const BUILDCHAIN_KFD2_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:13` |\n| `BUILDCHAIN_KFD2_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD2_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_REGISTRY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:19` |\n| `BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH` | constant: const BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:20` |\n| `BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:26` |\n| `BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH` | constant: const BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:27` |\n| `BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH` | constant: const BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:24` |\n| `BUILDCHAIN_KFD3_DIR` | constant: const BUILDCHAIN_KFD3_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:14` |\n| `BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:25` |\n| `BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:23` |\n| `BUILDCHAIN_KFD4_DIR` | constant: const BUILDCHAIN_KFD4_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD4_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:15` |\n| `BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT` | constant: const BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:6` |\n| `BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT` | constant: const BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:29` |\n| `BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT` | constant: const BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:41` |\n| `BUILDCHAIN_LOG_EVENT_CONTRACT` | constant: const BUILDCHAIN_LOG_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_EVENT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:6` |\n| `BUILDCHAIN_LOG_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_LOG_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:7` |\n| `BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:37` |\n| `BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:39` |\n| `BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT` | constant: const BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:11` |\n| `BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:33` |\n| `BUILDCHAIN_RUNTIME_CONTRACT_WORLD` | constant: const BUILDCHAIN_RUNTIME_CONTRACT_WORLD | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RUNTIME_CONTRACT_WORLD } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:7` |\n| `BUILDCHAIN_VERSION_PIN_PATH` | constant: const BUILDCHAIN_VERSION_PIN_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_VERSION_PIN_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:5` |\n| `BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT` | constant: const BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:5` |\n| `buildchainKfdClaims` | constant: const buildchainKfdClaims | none | value | Import does not declare a throw contract. | none-on-import | `import { buildchainKfdClaims } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:896` |\n| `buildchainPublicationAuthorityDescriptors` | function: function buildchainPublicationAuthorityDescriptors() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildchainPublicationAuthorityDescriptors } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-publication-authority.js:51` |\n| `buildConsumerIssueReport` | function: function buildConsumerIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildConsumerIssueReport } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:104` |\n| `buildFactsDigest` | function: function buildFactsDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { buildFactsDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:45` |\n| `buildWorkflowFrictionIssueReport` | function: function buildWorkflowFrictionIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildWorkflowFrictionIssueReport } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:199` |\n| `cacheEvidenceDigest` | function: function cacheEvidenceDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cacheEvidenceDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:48` |\n| `CHANNEL_CANDIDATE_DECISION_SCHEMA` | constant: const CHANNEL_CANDIDATE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { CHANNEL_CANDIDATE_DECISION_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/channel-candidate.js:5` |\n| `channelCandidateSourceLockRef` | function: function channelCandidateSourceLockRef(targetBranch, sourceSha) | targetBranch, sourceSha | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { channelCandidateSourceLockRef } from \"@kungfu-tech/buildchain\";` | `packages/core/channel-candidate.js:84` |\n| `checkBadgeBundleBlock` | function: function checkBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkBadgeBundleBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:867` |\n| `checkHomebrewTap` | function: async function checkHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkHomebrewTap } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:335` |\n| `checkKfd2ProductClaimOutputs` | function: function checkKfd2ProductClaimOutputs(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:415` |\n| `checkReadmeBadgeBlock` | function: function checkReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkReadmeBadgeBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:848` |\n| `claimReleasePropagationWork` | function: function claimReleasePropagationWork({ work, expectedWorkRoot, authority, familyState, } = {}) | { work, expectedWorkRoot, authority, familyState, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { claimReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-transitions.js:17` |\n| `classifyProcessCommand` | function: function classifyProcessCommand(command = \"\") | command = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyProcessCommand } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1085` |\n| `codeownersForPath` | function: function codeownersForPath(source, candidatePath) | source, candidatePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { codeownersForPath } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:417` |\n| `collectBadgeBundleFacts` | function: async function collectBadgeBundleFacts({ cwd = process.cwd(), claims = undefined } = {}) | { cwd = process.cwd(), claims = undefined } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBadgeBundleFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:790` |\n| `collectBuildchainDiagnostics` | function: function collectBuildchainDiagnostics({ cwd = process.cwd(), artifactPaths = [] } = {}) | { cwd = process.cwd(), artifactPaths = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBuildchainDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:248` |\n| `collectCacheDiagnostics` | function: function collectCacheDiagnostics({ cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {}) | { cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCacheDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:922` |\n| `collectCompilerCacheDiagnostics` | function: function collectCompilerCacheDiagnostics({ cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {}) | { cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCompilerCacheDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:573` |\n| `collectGitDiagnostics` | function: function collectGitDiagnostics({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:944` |\n| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {}) | { cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectGitHubReleasePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:1488` |\n| `collectGitSourceFacts` | function: function collectGitSourceFacts({ cwd = process.cwd(), root = \".\" } = {}) | { cwd = process.cwd(), root = \".\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitSourceFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:146` |\n| `collectHomebrewTapFacts` | function: async function collectHomebrewTapFacts({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectHomebrewTapFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:223` |\n| `collectKfdStatus` | function: function collectKfdStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdStatus } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:902` |\n| `collectModuleBuildFacts` | function: function collectModuleBuildFacts({ cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {}) | { cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectModuleBuildFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:302` |\n| `collectNativeDiagnostics` | function: function collectNativeDiagnostics({ cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {}) | { cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectNativeDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:295` |\n| `collectPaperFleetAudit` | function: function collectPaperFleetAudit({ root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {}) | { root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperFleetAudit } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:161` |\n| `collectPaperPreflight` | function: function collectPaperPreflight({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperPreflight } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2341` |\n| `collectPaperStatus` | function: function collectPaperStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperStatus } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:1399` |\n| `collectProcessTreeSnapshot` | function: function collectProcessTreeSnapshot({ rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {}) | { rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectProcessTreeSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1029` |\n| `collectPublicationArtifact` | function: function collectPublicationArtifact({ cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {}) | { cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectPublicationArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:271` |\n| `collectPublicationPackageFacts` | function: function collectPublicationPackageFacts({ cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {}) | { cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { collectPublicationPackageFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-package.js:74` |\n| `collectPublicSurfaceReverseAudit` | function: function collectPublicSurfaceReverseAudit({ root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {}) | { root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:192` |\n| `collectReadmeBadgeFacts` | function: async function collectReadmeBadgeFacts({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectReadmeBadgeFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:700` |\n| `collectRunnerDiagnostics` | function: function collectRunnerDiagnostics() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectRunnerDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:468` |\n| `collectToolDiagnostics` | function: function collectToolDiagnostics({ cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {}) | { cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectToolDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:495` |\n| `collectVersionSourceFact` | function: function collectVersionSourceFact({ cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {}) | { cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { collectVersionSourceFact } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:173` |\n| `commandForKungfuUpgrade` | function: function commandForKungfuUpgrade(manager, scope = \"@kungfu-trader\") | manager, scope = \"@kungfu-trader\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForKungfuUpgrade } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:121` |\n| `commandForRunScript` | function: function commandForRunScript(manager, script) | manager, script | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForRunScript } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:89` |\n| `commandForVersion` | function: function commandForVersion(manager, keyword, options = {}) | manager, keyword, options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForVersion } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:100` |\n| `compileEffectiveGithubGovernancePolicy` | function: function compileEffectiveGithubGovernancePolicy({ branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {}) | { branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileEffectiveGithubGovernancePolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:311` |\n| `completeReleasePropagationWork` | function: function completeReleasePropagationWork({ work, expectedWorkRoot, receipt, completionDecision, } = {}) | { work, expectedWorkRoot, receipt, completionDecision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { completeReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-transitions.js:110` |\n| `computeConsumerIssueFingerprint` | function: function computeConsumerIssueFingerprint(fields = {}) | fields = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { computeConsumerIssueFingerprint } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:64` |\n| `CONSUMER_PUBLICATION_DECISION_CONTRACT` | constant: const CONSUMER_PUBLICATION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { CONSUMER_PUBLICATION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:20` |\n| `consumerIssueMarker` | function: function consumerIssueMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { consumerIssueMarker } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:76` |\n| `contractSummary` | function: function contractSummary(contractWorld, runtimeRef = \"\", runtimeSha = \"\") | contractWorld, runtimeRef = \"\", runtimeSha = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { contractSummary } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:910` |\n| `controllerEvidenceDigest` | function: function controllerEvidenceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { controllerEvidenceDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:150` |\n| `createAnchoredVersionMaterialEvidence` | function: function createAnchoredVersionMaterialEvidence({ cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {}) | { cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createAnchoredVersionMaterialEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/anchored-version-material.js:118` |\n| `createArtifactEvidence` | function: function createArtifactEvidence({ assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {}) | { assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createArtifactEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:1158` |\n| `createArtifactSigningReceipt` | function: function createArtifactSigningReceipt({ request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {}) | { request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:313` |\n| `createArtifactSigningRequest` | function: function createArtifactSigningRequest({ source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {}) | { source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningRequest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:167` |\n| `createArtifactSigningResult` | function: function createArtifactSigningResult({ request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {}) | { request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningResult } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:68` |\n| `createBuildchainContractLock` | function: function createBuildchainContractLock({ buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {}) | { buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainContractLock } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:752` |\n| `createBuildchainContractWorld` | function: function createBuildchainContractWorld({ root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {}) | { root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainContractWorld } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:75` |\n| `createBuildchainGithubGovernanceAuthority` | function: function createBuildchainGithubGovernanceAuthority() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainGithubGovernanceAuthority } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:450` |\n| `createBuildchainKfd1Witness` | function: function createBuildchainKfd1Witness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd1Witness } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:530` |\n| `createBuildchainKfd2Claims` | function: function createBuildchainKfd2Claims({ root = process.cwd(), witnessFiles = {} } = {}) | { root = process.cwd(), witnessFiles = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd2Claims } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:687` |\n| `createBuildchainKfd3ArtifactWitness` | function: function createBuildchainKfd3ArtifactWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3ArtifactWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:647` |\n| `createBuildchainKfd3PrebuildWitness` | function: function createBuildchainKfd3PrebuildWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3PrebuildWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:583` |\n| `createBuildchainKfdClaimRegistry` | function: function createBuildchainKfdClaimRegistry({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdClaimRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:510` |\n| `createBuildchainKfdSurfaceRegistry` | function: function createBuildchainKfdSurfaceRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdSurfaceRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:411` |\n| `createBuildchainLayoutDiscovery` | function: function createBuildchainLayoutDiscovery({ cwd = process.cwd(), buildchainVersion = \"\", } = {}) | { cwd = process.cwd(), buildchainVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainLayoutDiscovery } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:99` |\n| `createBuildchainLogger` | function: function createBuildchainLogger(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createBuildchainLogger } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:300` |\n| `createBuildchainPublicationAuthorityRegistry` | function: function createBuildchainPublicationAuthorityRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-publication-authority.js:76` |\n| `createBuildchainPublicClaimDefinitions` | function: function createBuildchainPublicClaimDefinitions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicClaimDefinitions } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:226` |\n| `createCacheEvidenceSet` | function: function createCacheEvidenceSet({ repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {}) | { repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheEvidenceSet } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:244` |\n| `createCacheOperationReceipt` | function: function createCacheOperationReceipt({ operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {}) | { operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheOperationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:169` |\n| `createCandidateTimeline` | function: function createCandidateTimeline({ candidate = {}, events = [], generatedAt, } = {}) | { candidate = {}, events = [], generatedAt, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createCandidateTimeline } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:381` |\n| `createConsumerPublicationDecision` | function: function createConsumerPublicationDecision({ capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {}) | { capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createConsumerPublicationDecision } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:991` |\n| `createControllerPlan` | function: function createControllerPlan({ descriptor, source = {}, runtime = {}, inputs = {} } = {}) | { descriptor, source = {}, runtime = {}, inputs = {} } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:286` |\n| `createControllerReceipt` | function: function createControllerReceipt({ plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {}) | { plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:362` |\n| `createControllerReceiptReference` | function: function createControllerReceiptReference(receipt) | receipt | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceiptReference } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:490` |\n| `createControllerRegistry` | function: function createControllerRegistry({ workflows = [] } = {}) | { workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:196` |\n| `createDiagnosticsArtifact` | function: function createDiagnosticsArtifact({ cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {}) | { cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createDiagnosticsArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1408` |\n| `createGitHubArtifactAttestationEvidence` | function: function createGitHubArtifactAttestationEvidence({ preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {}) | { preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:474` |\n| `createGitHubArtifactAttestationPolicy` | function: function createGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:204` |\n| `createGitHubArtifactAttestationVerificationPlan` | function: function createGitHubArtifactAttestationVerificationPlan({ artifactPath, bundlePath, evidence, } = {}) | { artifactPath, bundlePath, evidence, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationVerificationPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:524` |\n| `createGithubGovernanceRolloutPlan` | function: function createGithubGovernanceRolloutPlan({ repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {}) | { repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubGovernanceRolloutPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:932` |\n| `createGitHubIssueRequest` | function: function createGitHubIssueRequest({ token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {}) | { token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubIssueRequest } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:393` |\n| `createGithubRulesetBypassRolloutPlan` | function: function createGithubRulesetBypassRolloutPlan({ repository, rulesetId, inventory, rollbackSnapshot, } = {}) | { repository, rulesetId, inventory, rollbackSnapshot, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetBypassRolloutPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1110` |\n| `createGithubRulesetGovernanceRolloutPlan` | function: function createGithubRulesetGovernanceRolloutPlan({ repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {}) | { repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetGovernanceRolloutPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1189` |\n| `createKfd1ReleaseGateEvidence` | function: function createKfd1ReleaseGateEvidence({ cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {}) | { cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:977` |\n| `createKfd3CollaborationInterfaceReleaseGateEvidence` | function: function createKfd3CollaborationInterfaceReleaseGateEvidence({ prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {}) | { prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:1132` |\n| `createKfd3SurfaceWitness` | function: function createKfd3SurfaceWitness({ cwd = process.cwd(), registryPath = \"\", kind = \"prebuild\", sourceSha = \"\", artifactPath = \"\", } = {}) | { cwd = process.cwd(), registryPath = \"\", kind = \"prebuild\", sourceSha = \"\", artifactPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | network | `import { createKfd3SurfaceWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:702` |\n| `createKfdBadgeSpecsFromStandards` | function: function createKfdBadgeSpecsFromStandards(standardsMetadata) | standardsMetadata | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdBadgeSpecsFromStandards } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:126` |\n| `createKfdSupportProjection` | function: function createKfdSupportProjection({ matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdSupportProjection } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:716` |\n| `createKungfuBuildInfoProjection` | function: function createKungfuBuildInfoProjection({ moduleFact, cwd = process.cwd(), now = nowIso() } = {}) | { moduleFact, cwd = process.cwd(), now = nowIso() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:520` |\n| `createPaperAlphaPlan` | function: function createPaperAlphaPlan({ cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {}) | { cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperAlphaPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2583` |\n| `createPaperBuildPlan` | function: function createPaperBuildPlan({ cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {}) | { cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperBuildPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2520` |\n| `createPaperResumePlan` | function: function createPaperResumePlan({ cwd = process.cwd(), buildchainRef = \"\", } = {}) | { cwd = process.cwd(), buildchainRef = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { createPaperResumePlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2641` |\n| `createPaperWorkStartPlan` | function: function createPaperWorkStartPlan({ cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkStartPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:41` |\n| `createPaperWorkSubmitPlan` | function: function createPaperWorkSubmitPlan({ cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {}) | { cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkSubmitPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:207` |\n| `createPortableDevCachePlan` | function: function createPortableDevCachePlan(manifest) | manifest | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPortableDevCachePlan } from \"@kungfu-tech/buildchain\";` | `packages/core/portable-dev-cache.js:172` |\n| `createPortableDevCacheReceipt` | function: function createPortableDevCacheReceipt({ plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", }) | { plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPortableDevCacheReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/portable-dev-cache.js:226` |\n| `createPublicationAdmission` | function: function createPublicationAdmission(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationAdmission } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:236` |\n| `createPublicationArtifactCandidate` | function: function createPublicationArtifactCandidate({ repository, sourceSha, sourceTreeSha, runtimeSha, manifest, passport, controllerReceipt, files = [], } = {}) | { repository, sourceSha, sourceTreeSha, runtimeSha, manifest, passport, controllerReceipt, files = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact-candidate.js:55` |\n| `createPublicationArtifactManifestSet` | function: function createPublicationArtifactManifestSet({ repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {}) | { repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactManifestSet } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:303` |\n| `createPublicationAuthorityRegistry` | function: function createPublicationAuthorityRegistry({ descriptors = [], workflows = [] } = {}) | { descriptors = [], workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:121` |\n| `createPublicationControlPlaneAudit` | function: function createPublicationControlPlaneAudit({ repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationControlPlaneAudit } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:208` |\n| `createPublicationGateDecision` | function: function createPublicationGateDecision({ sourceSha, profile, required = false, rationale, policy = {}, } = {}) | { sourceSha, profile, required = false, rationale, policy = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationGateDecision } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:280` |\n| `createPublicationQualificationReceipt` | function: function createPublicationQualificationReceipt({ capability, gateAggregate, consumerDecision, now = new Date(), } = {}) | { capability, gateAggregate, consumerDecision, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationQualificationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:1035` |\n| `createPublicationSealedBundle` | function: function createPublicationSealedBundle({ candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {}) | { candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationSealedBundle } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-sealed-bundle.js:75` |\n| `createPublicationSourceBundle` | function: function createPublicationSourceBundle({ cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {}) | { cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { createPublicationSourceBundle } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:249` |\n| `createReadmeBadgeEndpointRegistry` | function: function createReadmeBadgeEndpointRegistry({ kfdSpecs = undefined, kfdStandards = undefined } = {}) | { kfdSpecs = undefined, kfdStandards = undefined } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReadmeBadgeEndpointRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:133` |\n| `createReleaseActivationReceiptSet` | function: function createReleaseActivationReceiptSet({ transaction, receipts = [], } = {}) | { transaction, receipts = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:311` |\n| `createReleaseActivationTransaction` | function: function createReleaseActivationTransaction({ transactionId, mode = \"shadow\", bindings, owners, } = {}) | { transactionId, mode = \"shadow\", bindings, owners, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:103` |\n| `createReleaseCandidatePassport` | function: function createReleaseCandidatePassport({ repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {}) | { repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCandidatePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:310` |\n| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2628` |\n| `createReleasePassport` | function: function createReleasePassport({ cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {}) | { cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:1214` |\n| `createReleasePassportCheckManifest` | function: function createReleasePassportCheckManifest({ standards = kfdStandards } = {}) | { standards = kfdStandards } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePassportCheckManifest } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:147` |\n| `createReleasePropagationLock` | function: function createReleasePropagationLock({ graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {}) | { graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationLock } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:199` |\n| `createReleasePropagationReceipt` | function: function createReleasePropagationReceipt({ plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {}) | { plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:370` |\n| `createReleasePropagationStageReceipt` | function: function createReleasePropagationStageReceipt({ work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {}) | { work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationStageReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work.js:214` |\n| `createReleasePropagationWork` | function: function createReleasePropagationWork({ plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {}) | { plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work.js:111` |\n| `createReleaseTransaction` | function: function createReleaseTransaction({ repository, version, exactTag = \"\", channel, line = \"\", sourceSha, targetRef, releaseSha, releaseMaterialSha = releaseSha, publishToolingSha = \"\", lifecycleIdentity = \"lifecycle.publish\", statePath = \"\", evidencePath = \"\", actor = \"\", runId = \"\", } = {}) | { repository, version, exactTag = \"\", channel, line = \"\", sourceSha, targetRef, releaseSha, releaseMaterialSha = releaseSha, publishToolingSha = \"\", lifecycleIdentity = \"lifecycle.publish\", statePath = \"\", evidencePath = \"\", actor = \"\", runId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:197` |\n| `createRunnerProvenance` | function: function createRunnerProvenance({ runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {}) | { runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createRunnerProvenance } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:166` |\n| `createStableCandidateLedger` | function: function createStableCandidateLedger({ repository, targetBranch, now = new Date().toISOString() } = {}) | { repository, targetBranch, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createStableCandidateLedger } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:56` |\n| `createSurfaceTimestampPolicy` | function: function createSurfaceTimestampPolicy({ generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {}) | { generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createSurfaceTimestampPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/surface-manifest.js:34` |\n| `createWebSurfaceProductionDecision` | function: function createWebSurfaceProductionDecision({ approved, kind, repository, sourceSha, actor, actorPermission = \"\", releasePr = 0, releaseSource = \"\", reason, } = {}) | { approved, kind, repository, sourceSha, actor, actorPermission = \"\", releasePr = 0, releaseSource = \"\", reason, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createWebSurfaceProductionDecision } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:45` |\n| `createWebSurfacePublicationCandidate` | function: function createWebSurfacePublicationCandidate({ repository, sourceSha, sourceTreeSha, runtimeSha, plan, planFileDigest, controllerReceipt, decision, } = {}) | { repository, sourceSha, sourceTreeSha, runtimeSha, plan, planFileDigest, controllerReceipt, decision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createWebSurfacePublicationCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:79` |\n| `decideChannelCandidate` | function: function decideChannelCandidate(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { decideChannelCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/channel-candidate.js:90` |\n| `DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY` | constant: const DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | none | value | Import does not declare a throw contract. | none-on-import | `import { DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:6` |\n| `defaultBuildchainLogPath` | function: function defaultBuildchainLogPath({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultBuildchainLogPath } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:41` |\n| `defaultPublishEvidencePath` | function: function defaultPublishEvidencePath(version, workspace = process.cwd()) | version, workspace = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultPublishEvidencePath } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:193` |\n| `defaultReleaseStatePath` | function: function defaultReleaseStatePath(version, workspace = process.cwd()) | version, workspace = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultReleaseStatePath } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:185` |\n| `DETACHED_ARTIFACT_SIGNATURE_CONTRACT` | constant: const DETACHED_ARTIFACT_SIGNATURE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { DETACHED_ARTIFACT_SIGNATURE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/detached-artifact-signature.js:10` |\n| `detectKfd3Surfaces` | function: function detectKfd3Surfaces({ cwd = process.cwd(), kinds = [], artifactPath = \"\" } = {}) | { cwd = process.cwd(), kinds = [], artifactPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectKfd3Surfaces } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:423` |\n| `detectLockfile` | function: function detectLockfile(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectLockfile } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:237` |\n| `detectPackageManager` | function: function detectPackageManager(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { detectPackageManager } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:56` |\n| `detectPublicationAuthoritySignals` | function: function detectPublicationAuthoritySignals(workflowText = \"\") | workflowText = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectPublicationAuthoritySignals } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:104` |\n| `detectRequestedParallelism` | function: function detectRequestedParallelism({ command = \"\", args = [], env = process.env, } = {}) | { command = \"\", args = [], env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelism } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1188` |\n| `detectRequestedParallelismFromProcessSamples` | function: function detectRequestedParallelismFromProcessSamples(samples = []) | samples = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelismFromProcessSamples } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1223` |\n| `discoverArtifactPassport` | function: async function discoverArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverArtifactPassport } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:499` |\n| `discoverBuildchainRepoFiles` | function: function discoverBuildchainRepoFiles(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverBuildchainRepoFiles } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:143` |\n| `discoverConfiguredDerivedVersionMaterial` | function: function discoverConfiguredDerivedVersionMaterial(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverConfiguredDerivedVersionMaterial } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1467` |\n| `discoverConfiguredVersionStateFiles` | function: function discoverConfiguredVersionStateFiles(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverConfiguredVersionStateFiles } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1428` |\n| `discoverKfdStandards` | function: function discoverKfdStandards() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverKfdStandards } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:464` |\n| `discoverPaperFleet` | function: function discoverPaperFleet(root = process.cwd()) | root = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverPaperFleet } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:23` |\n| `enumerateActionInputs` | function: function enumerateActionInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateActionInputs } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:122` |\n| `enumerateCliCommandsFromBin` | function: function enumerateCliCommandsFromBin({ root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {}) | { root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateCliCommandsFromBin } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-cli.js:93` |\n| `enumerateDocCommandRefs` | function: function enumerateDocCommandRefs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateDocCommandRefs } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:146` |\n| `enumerateSitePages` | function: function enumerateSitePages({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateSitePages } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:137` |\n| `enumerateWorkflowInputs` | function: function enumerateWorkflowInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateWorkflowInputs } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:105` |\n| `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock({ lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {}) | { lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:818` |\n| `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:425` |\n| `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:694` |\n| `evaluateKfdProductGate` | function: async function evaluateKfdProductGate({ cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateKfdProductGate } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:465` |\n| `evaluatePublicationControlPlaneSnapshot` | function: function evaluatePublicationControlPlaneSnapshot({ repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluatePublicationControlPlaneSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-control-plane-audit.js:75` |\n| `executePaperNpmBootstrap` | function: function executePaperNpmBootstrap(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperNpmBootstrap } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2768` |\n| `executePaperWorkStart` | function: function executePaperWorkStart(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkStart } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:169` |\n| `executePaperWorkSubmitPush` | function: function executePaperWorkSubmitPush(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkSubmitPush } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:357` |\n| `explainArtifactPassport` | function: async function explainArtifactPassport(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainArtifactPassport } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:827` |\n| `explainKfdAgentHub` | function: function explainKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainKfdAgentHub } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:470` |\n| `explainReleaseLineDryRun` | function: function explainReleaseLineDryRun({ cwd = process.cwd(), targetRef, sha = \"\", sourceRef = \"\", tags, publishTransaction = false, publishCommand = \"\", } = {}) | { cwd = process.cwd(), targetRef, sha = \"\", sourceRef = \"\", tags, publishTransaction = false, publishCommand = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { explainReleaseLineDryRun } from \"@kungfu-tech/buildchain\";` | `packages/core/release-line-dry-run.js:127` |\n| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = \"human\" } = {}) | { passportLocation, forAudience = \"human\" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2812` |\n| `FAMILY_RELEASE_EVIDENCE_CONTRACT` | constant: const FAMILY_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { FAMILY_RELEASE_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:5` |\n| `finalizeBuildchainContractWorld` | function: function finalizeBuildchainContractWorld(contractWorld) | contractWorld | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { finalizeBuildchainContractWorld } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:727` |\n| `formatCandidateTimelineReport` | function: function formatCandidateTimelineReport(timeline) | timeline | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatCandidateTimelineReport } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:438` |\n| `formatDiagnosticsSummaryTable` | function: function formatDiagnosticsSummaryTable(summary = {}) | summary = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatDiagnosticsSummaryTable } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1786` |\n| `formatReleaseLineDryRun` | function: function formatReleaseLineDryRun(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatReleaseLineDryRun } from \"@kungfu-tech/buildchain\";` | `packages/core/release-line-dry-run.js:267` |\n| `getLifecycleStage` | function: function getLifecycleStage(loadedConfig, name) | loadedConfig, name | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getLifecycleStage } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1372` |\n| `getNativeDiagnosticsProfile` | function: function getNativeDiagnosticsProfile(loadedConfig) | loadedConfig | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { getNativeDiagnosticsProfile } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:520` |\n| `getPublishContract` | function: function getPublishContract(loadedConfig) | loadedConfig | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getPublishContract } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1376` |\n| `getStableReleasePolicy` | function: function getStableReleasePolicy(loadedConfig) | loadedConfig | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { getStableReleasePolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:328` |\n| `getVersionStrategy` | function: function getVersionStrategy(loadedConfig) | loadedConfig | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getVersionStrategy } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1500` |\n| `getWorkspaceInfo` | function: function getWorkspaceInfo(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getWorkspaceInfo } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:211` |\n| `GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:9` |\n| `GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:5` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:7` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:13` |\n| `GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:11` |\n| `GITHUB_ARTIFACT_ATTESTATION_WORKFLOW` | constant: const GITHUB_ARTIFACT_ATTESTATION_WORKFLOW | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_WORKFLOW } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:15` |\n| `GITHUB_GOVERNANCE_AUTHORITY_CONTRACT` | constant: const GITHUB_GOVERNANCE_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:3` |\n| `GITHUB_GOVERNANCE_RECEIPT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:5` |\n| `GITHUB_GOVERNANCE_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:7` |\n| `GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:9` |\n| `githubArtifactAttestationRequiredPermissions` | function: function githubArtifactAttestationRequiredPermissions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationRequiredPermissions } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:640` |\n| `githubArtifactAttestationSemanticRoot` | function: function githubArtifactAttestationSemanticRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSemanticRoot } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:91` |\n| `githubArtifactAttestationSha256Buffer` | function: function githubArtifactAttestationSha256Buffer(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256Buffer } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:83` |\n| `githubArtifactAttestationSha256File` | function: function githubArtifactAttestationSha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256File } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:87` |\n| `githubGovernanceDigest` | function: function githubGovernanceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubGovernanceDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:163` |\n| `GitHubIssueRequestError` | class: class GitHubIssueRequestError | none | GitHubIssueRequestError | Construction and method errors follow the linked source implementation. | class-dependent | `import { GitHubIssueRequestError } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:23` |\n| `HOMEBREW_TAP_CHECK_CONTRACT` | constant: const HOMEBREW_TAP_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_CHECK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:6` |\n| `HOMEBREW_TAP_FACTS_CONTRACT` | constant: const HOMEBREW_TAP_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_FACTS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:5` |\n| `HOMEBREW_TAP_MANIFEST_CONTRACT` | constant: const HOMEBREW_TAP_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:7` |\n| `IMPACT_LEDGER_CONTRACT` | constant: const IMPACT_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { IMPACT_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:30` |\n| `initKfdAgentHub` | function: function initKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { initKfdAgentHub } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:363` |\n| `inspectKfdAgentHub` | function: function inspectKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { inspectKfdAgentHub } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:384` |\n| `KFD_AGENT_HUB_ADOPTION_CONTRACT` | constant: const KFD_AGENT_HUB_ADOPTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:9` |\n| `KFD_AGENT_HUB_ADOPTION_SCHEMA` | constant: const KFD_AGENT_HUB_ADOPTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:12` |\n| `KFD_AGENT_HUB_DECLARATION` | constant: const KFD_AGENT_HUB_DECLARATION | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_DECLARATION } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:7` |\n| `KFD_AGENT_HUB_LOCK_CONTRACT` | constant: const KFD_AGENT_HUB_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_LOCK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:10` |\n| `KFD_AGENT_HUB_OUTPUT_DIR` | constant: const KFD_AGENT_HUB_OUTPUT_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_OUTPUT_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:8` |\n| `KFD_AGENT_HUB_VERIFICATION_CONTRACT` | constant: const KFD_AGENT_HUB_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:11` |\n| `KFD_PRODUCT_GATE_CONTRACT` | constant: const KFD_PRODUCT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:11` |\n| `KFD_PRODUCT_GATE_INPUT_CONTRACT` | constant: const KFD_PRODUCT_GATE_INPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:9` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:55` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA_ID` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA_ID } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:15` |\n| `KFD_SUPPORT_PROJECTION_CONTRACT` | constant: const KFD_SUPPORT_PROJECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:13` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:130` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA_ID` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA_ID } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:17` |\n| `kfd1` | constant: const kfd1 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd1 } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:546` |\n| `KFD1_RELEASE_GATE_CONTRACT` | constant: const KFD1_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:9` |\n| `KFD1_WITNESS_SET_CONTRACT` | constant: const KFD1_WITNESS_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_WITNESS_SET_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:10` |\n| `kfd2` | constant: const kfd2 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd2 } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:561` |\n| `KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:23` |\n| `KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:19` |\n| `KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:21` |\n| `KFD2_RELEASE_TRUST_PASSPORT_CONTRACT` | constant: const KFD2_RELEASE_TRUST_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_RELEASE_TRUST_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:35` |\n| `KFD2_TRUST_PROOF_CONTRACT` | constant: const KFD2_TRUST_PROOF_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_TRUST_PROOF_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:36` |\n| `kfd3` | constant: const kfd3 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd3 } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:663` |\n| `KFD3_ARTIFACT_WITNESS_CONTRACT` | constant: const KFD3_ARTIFACT_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_ARTIFACT_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:13` |\n| `KFD3_CAPABILITY_QUERY_CONTRACT` | constant: const KFD3_CAPABILITY_QUERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_CAPABILITY_QUERY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:9` |\n| `KFD3_DEFAULT_REGISTRY_PATH` | constant: const KFD3_DEFAULT_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_DEFAULT_REGISTRY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:10` |\n| `KFD3_PREBUILD_WITNESS_CONTRACT` | constant: const KFD3_PREBUILD_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_PREBUILD_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:12` |\n| `KFD3_RELEASE_GATE_CONTRACT` | constant: const KFD3_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:11` |\n| `KFD3_SURFACE_AUDIT_CONTRACT` | constant: const KFD3_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:8` |\n| `KFD3_SURFACE_DETECTION_CONTRACT` | constant: const KFD3_SURFACE_DETECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_DETECTION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:7` |\n| `KFD3_SURFACE_REGISTRY_CONTRACT` | constant: const KFD3_SURFACE_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:6` |\n| `kfd4` | constant: const kfd4 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd4 } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:681` |\n| `kfdProductGateDigest` | function: function kfdProductGateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { kfdProductGateDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:188` |\n| `kfdProductGates` | constant: const kfdProductGates | none | value | Import does not declare a throw contract. | none-on-import | `import { kfdProductGates } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:859` |\n| `KFX_ADMISSION_INPUTS_CONTRACT` | constant: const KFX_ADMISSION_INPUTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFX_ADMISSION_INPUTS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:7` |\n| `layout` | constant: const layout | none | value | Import does not declare a throw contract. | none-on-import | `import { layout } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:905` |\n| `LEGACY_BUILDCHAIN_CONFIG_PATH` | constant: const LEGACY_BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:8` |\n| `LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:10` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:28` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:29` |\n| `LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:34` |\n| `listArtifactSigningProfiles` | function: function listArtifactSigningProfiles() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listArtifactSigningProfiles } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:103` |\n| `listKfdSchemas` | function: function listKfdSchemas({ standard = \"\" } = {}) | { standard = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdSchemas } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:492` |\n| `loadBuildchainConfig` | function: function loadBuildchainConfig(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadBuildchainConfig } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:158` |\n| `loadConfiguredAnchorManifest` | function: function loadConfiguredAnchorManifest(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadConfiguredAnchorManifest } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1509` |\n| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2841` |\n| `markStableCandidatePromoted` | function: function markStableCandidatePromoted(ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { markStableCandidatePromoted } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:229` |\n| `migrateBuildchainLayout` | function: function migrateBuildchainLayout({ cwd = process.cwd(), write = false, force = false } = {}) | { cwd = process.cwd(), write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { migrateBuildchainLayout } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:287` |\n| `normalizeBuildchainConfig` | function: function normalizeBuildchainConfig(config) | config | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeBuildchainConfig } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:181` |\n| `normalizeBuildchainLogEvent` | function: function normalizeBuildchainLogEvent(input = {}, defaults = {}) | input = {}, defaults = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeBuildchainLogEvent } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:45` |\n| `normalizeCandidateTimelineEvent` | function: function normalizeCandidateTimelineEvent(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeCandidateTimelineEvent } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:74` |\n| `normalizeControllerReceiptReferences` | function: function normalizeControllerReceiptReferences({ receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | { receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeControllerReceiptReferences } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:531` |\n| `normalizeGitHubArtifactAttestationPolicy` | function: function normalizeGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:158` |\n| `normalizeGithubBranchProtectionSnapshot` | function: function normalizeGithubBranchProtectionSnapshot(protection = {}) | protection = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubBranchProtectionSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1025` |\n| `normalizeGithubRulesetSnapshot` | function: function normalizeGithubRulesetSnapshot(ruleset = {}) | ruleset = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubRulesetSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1095` |\n| `normalizeIssueRepository` | function: function normalizeIssueRepository(repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY) | repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeIssueRepository } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:33` |\n| `normalizeKfd1ContractWorldWitness` | function: function normalizeKfd1ContractWorldWitness(witness, { metadata = resolveKfd1Metadata() } = {}) | witness, { metadata = resolveKfd1Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd1ContractWorldWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:897` |\n| `normalizeKfd3CollaborationInterfaceArtifactWitness` | function: function normalizeKfd3CollaborationInterfaceArtifactWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfaceArtifactWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:738` |\n| `normalizeKfd3CollaborationInterfacePrebuildWitness` | function: function normalizeKfd3CollaborationInterfacePrebuildWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfacePrebuildWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:667` |\n| `normalizeKfd3DistributionDeclaration` | function: function normalizeKfd3DistributionDeclaration(distribution, { surfaceId = \"surface\" } = {}) | distribution, { surfaceId = \"surface\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3DistributionDeclaration } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:73` |\n| `normalizeKfdStandardId` | function: function normalizeKfdStandardId(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfdStandardId } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:455` |\n| `normalizeLifecycleStage` | function: function normalizeLifecycleStage(stage, label = \"lifecycle stage\", lifecycle = {}) | stage, label = \"lifecycle stage\", lifecycle = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeLifecycleStage } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1333` |\n| `normalizeReleasePropagationGraph` | function: function normalizeReleasePropagationGraph(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeReleasePropagationGraph } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:163` |\n| `normalizeStableCandidateLedger` | function: function normalizeStableCandidateLedger(input, expected = {}) | input, expected = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeStableCandidateLedger } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:76` |\n| `PAPER_ALPHA_PLAN_CONTRACT` | constant: const PAPER_ALPHA_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_ALPHA_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:89` |\n| `PAPER_BUILD_PLAN_CONTRACT` | constant: const PAPER_BUILD_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_BUILD_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:88` |\n| `PAPER_FLEET_AUDIT_CONTRACT` | constant: const PAPER_FLEET_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:19` |\n| `PAPER_FLEET_UPDATE_PLAN_CONTRACT` | constant: const PAPER_FLEET_UPDATE_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_UPDATE_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:20` |\n| `PAPER_MIGRATION_CONTRACT` | constant: const PAPER_MIGRATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_MIGRATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:81` |\n| `PAPER_NPM_BOOTSTRAP_CONTRACT` | constant: const PAPER_NPM_BOOTSTRAP_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_NPM_BOOTSTRAP_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:84` |\n| `PAPER_PATHS` | constant: const PAPER_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PATHS } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-repository.js:7` |\n| `PAPER_PREFLIGHT_CONTRACT` | constant: const PAPER_PREFLIGHT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PREFLIGHT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:82` |\n| `PAPER_RESUME_PLAN_CONTRACT` | constant: const PAPER_RESUME_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_RESUME_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:90` |\n| `PAPER_SCAFFOLD_CONTRACT` | constant: const PAPER_SCAFFOLD_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_SCAFFOLD_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:80` |\n| `PAPER_STATE_ORDER` | constant: const PAPER_STATE_ORDER | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATE_ORDER } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:93` |\n| `PAPER_STATUS_CONTRACT` | constant: const PAPER_STATUS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATUS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:83` |\n| `PAPER_VISIBILITY_CONTRACT` | constant: const PAPER_VISIBILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_VISIBILITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:91` |\n| `PAPER_WORK_START_PLAN_CONTRACT` | constant: const PAPER_WORK_START_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_START_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:17` |\n| `PAPER_WORK_SUBMIT_PLAN_CONTRACT` | constant: const PAPER_WORK_SUBMIT_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_SUBMIT_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:19` |\n| `parseCodeowners` | function: function parseCodeowners(source) | source | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseCodeowners } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:401` |\n| `parseIssueLabels` | function: function parseIssueLabels(input = DEFAULT_LABELS) | input = DEFAULT_LABELS | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseIssueLabels } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:41` |\n| `planBuildchainLayoutMigration` | function: function planBuildchainLayoutMigration({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planBuildchainLayoutMigration } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:265` |\n| `planPaperFleetUpdate` | function: function planPaperFleetUpdate(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planPaperFleetUpdate } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:212` |\n| `planPaperMigration` | function: function planPaperMigration({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperMigration } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:941` |\n| `planPaperScaffold` | function: function planPaperScaffold({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperScaffold } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:638` |\n| `planReleaseLineBootstrap` | function: function planReleaseLineBootstrap({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planReleaseLineBootstrap } from \"@kungfu-tech/buildchain\";` | `packages/core/release-line-bootstrap.js:140` |\n| `planReleasePropagation` | function: function planReleasePropagation({ graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {}) | { graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planReleasePropagation } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:248` |\n| `planTransactionRecovery` | function: function planTransactionRecovery({ transaction, evidence, validation, explicitOverride = false, } = {}) | { transaction, evidence, validation, explicitOverride = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planTransactionRecovery } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:769` |\n| `prepareGitHubArtifactAttestation` | function: function prepareGitHubArtifactAttestation({ subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {}) | { subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { prepareGitHubArtifactAttestation } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:250` |\n| `preparePublicationNpmPackage` | function: function preparePublicationNpmPackage({ cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {}) | { cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { preparePublicationNpmPackage } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-package.js:120` |\n| `PRODUCT_MECHANISM_CONTRACT` | constant: const PRODUCT_MECHANISM_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PRODUCT_MECHANISM_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:32` |\n| `projectArtifactVerificationEnvelopeToKfx` | function: function projectArtifactVerificationEnvelopeToKfx({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { projectArtifactVerificationEnvelopeToKfx } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:359` |\n| `PUBLICATION_ADMISSION_CONTRACT` | constant: const PUBLICATION_ADMISSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ADMISSION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:10` |\n| `PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:9` |\n| `PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact-candidate.js:5` |\n| `PUBLICATION_ARTIFACT_MANIFEST_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:7` |\n| `PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:24` |\n| `PUBLICATION_ARTIFACT_PASSPORT_CONTRACT` | constant: const PUBLICATION_ARTIFACT_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:8` |\n| `PUBLICATION_ARTIFACT_REGISTRY_CONTRACT` | constant: const PUBLICATION_ARTIFACT_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:10` |\n| `PUBLICATION_AUTHORITY_CLASSES` | constant: const PUBLICATION_AUTHORITY_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_CLASSES } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:27` |\n| `PUBLICATION_AUTHORITY_REGISTRY_CONTRACT` | constant: const PUBLICATION_AUTHORITY_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:8` |\n| `PUBLICATION_CAPABILITY_CONTRACT` | constant: const PUBLICATION_CAPABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CAPABILITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:12` |\n| `PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT` | constant: const PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:16` |\n| `PUBLICATION_GATE_DECISION_CONTRACT` | constant: const PUBLICATION_GATE_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_GATE_DECISION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:18` |\n| `PUBLICATION_NPM_PACKAGE_CONTRACT` | constant: const PUBLICATION_NPM_PACKAGE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_NPM_PACKAGE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-package.js:6` |\n| `PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT` | constant: const PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:22` |\n| `PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT` | constant: const PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-reproducibility.js:12` |\n| `PUBLICATION_SEALED_BUNDLE_CONTRACT` | constant: const PUBLICATION_SEALED_BUNDLE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_SEALED_BUNDLE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-sealed-bundle.js:10` |\n| `publicationArtifactCandidateDigest` | function: function publicationArtifactCandidateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { publicationArtifactCandidateDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact-candidate.js:19` |\n| `publicationAuthorityDigest` | function: function publicationAuthorityDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationAuthorityDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:72` |\n| `publicationGateAggregateBindings` | function: function publicationGateAggregateBindings(gateAggregate) | gateAggregate | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationGateAggregateBindings } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:408` |\n| `qualifyStableCandidate` | function: function qualifyStableCandidate(ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {}) | ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { qualifyStableCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:139` |\n| `queryKfd3Capabilities` | function: async function queryKfd3Capabilities({ cwd = process.cwd(), product = \"\", registryPath = \"\", passportLocation = \"\", artifactPath = \"\", } = {}) | { cwd = process.cwd(), product = \"\", registryPath = \"\", passportLocation = \"\", artifactPath = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { queryKfd3Capabilities } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:824` |\n| `readBuildchainContractLock` | function: function readBuildchainContractLock(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractLock } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:803` |\n| `readBuildchainContractWorld` | function: function readBuildchainContractWorld(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractWorld } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:783` |\n| `readBuildchainLogEvents` | function: function readBuildchainLogEvents(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readBuildchainLogEvents } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:75` |\n| `readDiagnosticsArtifact` | function: function readDiagnosticsArtifact(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readDiagnosticsArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1468` |\n| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2694` |\n| `readKfd2ProductClaimsRegistry` | function: function readKfd2ProductClaimsRegistry({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfd2ProductClaimsRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:137` |\n| `readKfd3SurfaceRegistry` | function: function readKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = \"\" } = {}) | { cwd = process.cwd(), registryPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readKfd3SurfaceRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:455` |\n| `readKfdSchema` | function: function readKfdSchema({ standard, schema = \"\" } = {}) | { standard, schema = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfdSchema } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:520` |\n| `README_BADGE_BLOCK_END` | constant: const README_BADGE_BLOCK_END | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_END } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:15` |\n| `README_BADGE_BLOCK_START` | constant: const README_BADGE_BLOCK_START | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_START } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:14` |\n| `README_BADGE_FACTS_CONTRACT` | constant: const README_BADGE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:12` |\n| `README_BADGE_HOSTED_BASE_URL` | constant: const README_BADGE_HOSTED_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_HOSTED_BASE_URL } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:16` |\n| `readOptionalIssueBodyFile` | function: function readOptionalIssueBodyFile(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readOptionalIssueBodyFile } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:385` |\n| `readPublishEvidence` | function: function readPublishEvidence(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readPublishEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:564` |\n| `readReadme` | function: function readReadme({ cwd = process.cwd(), readmePath = \"README.md\" } = {}) | { cwd = process.cwd(), readmePath = \"README.md\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReadme } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:891` |\n| `readReleasePropagationJson` | function: function readReleasePropagationJson(value, { cwd = process.cwd(), label = \"json\" } = {}) | value, { cwd = process.cwd(), label = \"json\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readReleasePropagationJson } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:304` |\n| `readReleaseTransaction` | function: function readReleaseTransaction(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReleaseTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:367` |\n| `recordReleaseActivationPhase` | function: function recordReleaseActivationPhase(transaction, phaseId, { receiptRoots = [], failure = \"\" } = {}) | transaction, phaseId, { receiptRoots = [], failure = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleaseActivationPhase } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:217` |\n| `recordReleasePropagationStage` | function: function recordReleasePropagationStage({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleasePropagationStage } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-transitions.js:45` |\n| `redactBuildchainLogAttributes` | function: function redactBuildchainLogAttributes(attributes = {}) | attributes = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactBuildchainLogAttributes } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:33` |\n| `redactDiagnosticsValue` | function: function redactDiagnosticsValue(key, value, pattern = DEFAULT_SECRET_KEY_PATTERN) | key, value, pattern = DEFAULT_SECRET_KEY_PATTERN | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { redactDiagnosticsValue } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:953` |\n| `redactIssueText` | function: function redactIssueText(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactIssueText } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:51` |\n| `registerKfd3Surfaces` | function: function registerKfd3Surfaces({ cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", product = {}, } = {}) | { cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", product = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { registerKfd3Surfaces } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:502` |\n| `registerStableCandidate` | function: function registerStableCandidate(ledgerInput, candidateInput, { now = new Date().toISOString() } = {}) | ledgerInput, candidateInput, { now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { registerStableCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:106` |\n| `RELEASE_ACTIVATION_CONTRACT` | constant: const RELEASE_ACTIVATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:3` |\n| `RELEASE_ACTIVATION_PHASES` | constant: const RELEASE_ACTIVATION_PHASES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_PHASES } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:8` |\n| `RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT` | constant: const RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:5` |\n| `RELEASE_CANDIDATE_PASSPORT_CONTRACT` | constant: const RELEASE_CANDIDATE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CANDIDATE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:4` |\n| `RELEASE_CHECK_REPORT_CONTRACT` | constant: const RELEASE_CHECK_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CHECK_REPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:33` |\n| `RELEASE_EVIDENCE_ATTACHMENT_CONTRACT` | constant: const RELEASE_EVIDENCE_ATTACHMENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:34` |\n| `RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT` | constant: const RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:9` |\n| `RELEASE_PASSPORT_CONTRACT` | constant: const RELEASE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:28` |\n| `RELEASE_PASSPORT_SCHEMA` | constant: const RELEASE_PASSPORT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:16` |\n| `RELEASE_PASSPORT_SCHEMA_ID` | constant: const RELEASE_PASSPORT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA_ID } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:7` |\n| `RELEASE_PROPAGATION_GRAPH_CONTRACT` | constant: const RELEASE_PROPAGATION_GRAPH_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_GRAPH_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:15` |\n| `RELEASE_PROPAGATION_LOCK_CONTRACT` | constant: const RELEASE_PROPAGATION_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_LOCK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:17` |\n| `RELEASE_PROPAGATION_PLAN_CONTRACT` | value: RELEASE_PROPAGATION_PLAN_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_PROPAGATION_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:1` |\n| `RELEASE_PROPAGATION_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:18` |\n| `RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-constants.js:2` |\n| `RELEASE_PROPAGATION_WORK_CONTRACT` | constant: const RELEASE_PROPAGATION_WORK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-constants.js:1` |\n| `RELEASE_PROPAGATION_WORK_STAGES` | constant: const RELEASE_PROPAGATION_WORK_STAGES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_STAGES } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-constants.js:4` |\n| `releaseActivationRoot` | function: function releaseActivationRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { releaseActivationRoot } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:38` |\n| `renderBadgeBundleBlock` | function: function renderBadgeBundleBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBadgeBundleBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:840` |\n| `renderBuildchainContractDriftIssueBody` | function: function renderBuildchainContractDriftIssueBody({ repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {}) | { repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBuildchainContractDriftIssueBody } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:922` |\n| `renderHomebrewFormula` | function: function renderHomebrewFormula(facts) | facts | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderHomebrewFormula } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:290` |\n| `renderKfd2ProductClaimOutputs` | function: function renderKfd2ProductClaimOutputs({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = \"\", channel = \"\", tag = \"\", sourceSha = \"\", } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = \"\", channel = \"\", tag = \"\", sourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:321` |\n| `renderReadmeBadgeBlock` | function: function renderReadmeBadgeBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderReadmeBadgeBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:836` |\n| `repairReleasePropagationWork` | function: function repairReleasePropagationWork({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { repairReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-transitions.js:88` |\n| `reportBuildchainIssue` | function: async function reportBuildchainIssue(options = {}) | options = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { reportBuildchainIssue } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:292` |\n| `reportWorkflowFrictionIssue` | function: async function reportWorkflowFrictionIssue(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { reportWorkflowFrictionIssue } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:378` |\n| `resolveArtifactSigningProfile` | function: function resolveArtifactSigningProfile({ profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {}) | { profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSigningProfile } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:111` |\n| `resolveArtifactSubject` | function: async function resolveArtifactSubject(subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {}) | subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSubject } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:368` |\n| `resolveBuildchainConfigPath` | function: function resolveBuildchainConfigPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainConfigPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:67` |\n| `resolveBuildchainContractLockPath` | function: function resolveBuildchainContractLockPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainContractLockPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:74` |\n| `resolveGithubGovernanceTargetPolicy` | function: function resolveGithubGovernanceTargetPolicy({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:607` |\n| `resolveKfd1Metadata` | function: function resolveKfd1Metadata() | none | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd1Metadata } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:89` |\n| `resolveKfd2ProductClaimsRegistryPath` | function: function resolveKfd2ProductClaimsRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd2ProductClaimsRegistryPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:81` |\n| `resolveKfd3Metadata` | function: function resolveKfd3Metadata({ requireSchemas = false } = {}) | { requireSchemas = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd3Metadata } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:128` |\n| `resolveKfd3SurfaceRegistryPath` | function: function resolveKfd3SurfaceRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd3SurfaceRegistryPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:85` |\n| `resolvePaperRepository` | function: function resolvePaperRepository(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePaperRepository } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-repository.js:132` |\n| `resolvePropagationChannel` | function: function resolvePropagationChannel(edge, upstreamChannel) | edge, upstreamChannel | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePropagationChannel } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:190` |\n| `resolvePublicationCandidateFile` | function: function resolvePublicationCandidateFile(files = [], candidatePath) | files = [], candidatePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolvePublicationCandidateFile } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact-candidate.js:23` |\n| `resolveReleasePassportPath` | function: function resolveReleasePassportPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveReleasePassportPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:92` |\n| `resumeReleasePropagationWork` | function: function resumeReleasePropagationWork(work) | work | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resumeReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work.js:514` |\n| `revokeStableCandidate` | function: function revokeStableCandidate(ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { revokeStableCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:185` |\n| `rollbackReleaseActivationTransaction` | function: function rollbackReleaseActivationTransaction(transaction, { toSiteSourceSha, reason } = {}) | transaction, { toSiteSourceSha, reason } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { rollbackReleaseActivationTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:290` |\n| `runLifecycleStage` | function: function runLifecycleStage({ cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes }) | { cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { runLifecycleStage } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1380` |\n| `RUNNER_PROVENANCE_CLASSES` | constant: const RUNNER_PROVENANCE_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CLASSES } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:36` |\n| `RUNNER_PROVENANCE_CONTRACT` | constant: const RUNNER_PROVENANCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:14` |\n| `schemas` | constant: const schemas | none | value | Import does not declare a throw contract. | none-on-import | `import { schemas } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:495` |\n| `sealArtifactVerificationReport` | function: function sealArtifactVerificationReport({ report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {}) | { report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sealArtifactVerificationReport } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:314` |\n| `selectStableCandidate` | function: function selectStableCandidate(ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {}) | ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { selectStableCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:206` |\n| `setStableCandidateHold` | function: function setStableCandidateHold(ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {}) | ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { setStableCandidateHold } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:198` |\n| `sha256BuildchainContractJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256BuildchainContractJson } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:30` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write, subprocess | `import { sha256File } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:216` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:90` |\n| `sha256KfdJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256KfdJson } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:50` |\n| `sha256Text` | function: function sha256Text(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Text } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:138` |\n| `sha512IntegrityBuffer` | function: function sha512IntegrityBuffer(buffer) | buffer | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha512IntegrityBuffer } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:34` |\n| `sha512IntegrityFile` | function: function sha512IntegrityFile(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha512IntegrityFile } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:38` |\n| `shellJoin` | function: function shellJoin(command) | command | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { shellJoin } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:114` |\n| `signDetachedArtifactRequest` | function: function signDetachedArtifactRequest({ request, privateKey, keyId, authority = {}, } = {}) | { request, privateKey, keyId, authority = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { signDetachedArtifactRequest } from \"@kungfu-tech/buildchain\";` | `packages/core/detached-artifact-signature.js:36` |\n| `STABLE_CANDIDATE_LEDGER_CONTRACT` | constant: const STABLE_CANDIDATE_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:1` |\n| `STABLE_CANDIDATE_STATES` | constant: const STABLE_CANDIDATE_STATES | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_STATES } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:2` |\n| `stableCandidatePromotionRefs` | function: function stableCandidatePromotionRefs(candidateInput, targetBranch) | candidateInput, targetBranch | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { stableCandidatePromotionRefs } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:264` |\n| `startProcessSampler` | function: function startProcessSampler({ rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {}) | { rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { startProcessSampler } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1362` |\n| `summarizeBuildchainLogEvents` | function: function summarizeBuildchainLogEvents(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeBuildchainLogEvents } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:192` |\n| `summarizeDiagnosticsArtifacts` | function: function summarizeDiagnosticsArtifacts(inputs = []) | inputs = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeDiagnosticsArtifacts } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1824` |\n| `summarizeLifecycleObservability` | function: function summarizeLifecycleObservability({ events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {}) | { events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeLifecycleObservability } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:219` |\n| `summarizeProcessSamples` | function: function summarizeProcessSamples({ samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {}) | { samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeProcessSamples } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1254` |\n| `SURFACE_TIMESTAMP_POLICY_CONTRACT` | constant: const SURFACE_TIMESTAMP_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { SURFACE_TIMESTAMP_POLICY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/surface-manifest.js:1` |\n| `testKfdAgentHub` | function: function testKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { testKfdAgentHub } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:399` |\n| `transitionReleaseTransaction` | function: function transitionReleaseTransaction(record, nextState, metadata = {}) | record, nextState, metadata = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { transitionReleaseTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:256` |\n| `truncateUtf8` | function: function truncateUtf8(text, maxBytes = DEFAULT_MAX_BODY_BYTES) | text, maxBytes = DEFAULT_MAX_BODY_BYTES | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { truncateUtf8 } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:84` |\n| `updateBadgeBundleBlock` | function: function updateBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateBadgeBundleBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:887` |\n| `updateConfiguredVersionStateContents` | function: function updateConfiguredVersionStateContents(files, version) | files, version | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { updateConfiguredVersionStateContents } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1680` |\n| `updateHomebrewTap` | function: async function updateHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateHomebrewTap } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:390` |\n| `updateReadmeBadgeBlock` | function: function updateReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateReadmeBadgeBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:874` |\n| `validateAnchoredPackageRelease` | function: function validateAnchoredPackageRelease({ cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {}) | { cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateAnchoredPackageRelease } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:325` |\n| `validateArtifactSigningReceipt` | function: function validateArtifactSigningReceipt(receipt, { request } = {}) | receipt, { request } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:374` |\n| `validateArtifactSigningRequest` | function: function validateArtifactSigningRequest(request) | request | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningRequest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:291` |\n| `validateArtifactSigningResult` | function: function validateArtifactSigningResult(result, { request, receipt } = {}) | result, { request, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningResult } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:147` |\n| `validateBuildchainConfig` | function: function validateBuildchainConfig(cwd = process.cwd(), { requireConfig = true, requireVersionState = false, requireLifecycleStages = [], } = {}) | cwd = process.cwd(), { requireConfig = true, requireVersionState = false, requireLifecycleStages = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateBuildchainConfig } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1547` |\n| `validateControllerPlan` | function: function validateControllerPlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:324` |\n| `validateControllerReceipt` | function: function validateControllerReceipt(receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {}) | receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:422` |\n| `validateControllerReceiptReference` | function: function validateControllerReceiptReference(reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceiptReference } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:504` |\n| `validateKfd1ReleaseGateEvidence` | function: function validateKfd1ReleaseGateEvidence(section, { metadata = resolveKfd1Metadata() } = {}) | section, { metadata = resolveKfd1Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:1337` |\n| `validateKfd2ProductClaimsRegistry` | function: function validateKfd2ProductClaimsRegistry(registry = {}) | registry = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateKfd2ProductClaimsRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:152` |\n| `validateKfd3CollaborationInterfaceReleaseGateEvidence` | function: function validateKfd3CollaborationInterfaceReleaseGateEvidence(section, { metadata = resolveKfd3Metadata() } = {}) | section, { metadata = resolveKfd3Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:1470` |\n| `validateKfdProductGateResult` | function: function validateKfdProductGateResult(result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdProductGateResult } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:565` |\n| `validateKfdSupportProjection` | function: function validateKfdSupportProjection(projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdSupportProjection } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:796` |\n| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2853` |\n| `validatePackageManagerContract` | function: function validatePackageManagerContract({ cwd = process.cwd(), expectedManager = \"\" } = {}) | { cwd = process.cwd(), expectedManager = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validatePackageManagerContract } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:18` |\n| `validatePublishEvidence` | function: function validatePublishEvidence({ evidence, version, channel, sourceSha, releaseSha, targetRef = \"\", releaseMaterialSha = releaseSha, publishToolingSha = \"\", requiredArtifacts = [], } = {}) | { evidence, version, channel, sourceSha, releaseSha, targetRef = \"\", releaseMaterialSha = releaseSha, publishToolingSha = \"\", requiredArtifacts = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validatePublishEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:674` |\n| `validateReleaseActivationReceiptSet` | function: function validateReleaseActivationReceiptSet(receiptSet, { allowShadow = true } = {}) | receiptSet, { allowShadow = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:376` |\n| `validateReleaseActivationTransaction` | function: function validateReleaseActivationTransaction(transaction) | transaction | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:146` |\n| `validateReleaseCandidatePassport` | function: function validateReleaseCandidatePassport({ passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {}) | { passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseCandidatePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:404` |\n| `validateReleasePassportSchema` | function: function validateReleasePassportSchema(passport) | passport | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleasePassportSchema } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:256` |\n| `verifyArtifactPassport` | function: async function verifyArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactPassport } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:701` |\n| `verifyArtifactSigningResultFiles` | function: function verifyArtifactSigningResultFiles({ root, request, receipt, result, } = {}) | { root, request, receipt, result, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactSigningResultFiles } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:193` |\n| `verifyArtifactVerificationEnvelope` | function: function verifyArtifactVerificationEnvelope({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactVerificationEnvelope } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:144` |\n| `verifyBuildchainLogEvents` | function: function verifyBuildchainLogEvents({ path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {}) | { path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildchainLogEvents } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:230` |\n| `verifyBuildFacts` | function: function verifyBuildFacts({ cwd = process.cwd(), fact, factPath = \"\" } = {}) | { cwd = process.cwd(), fact, factPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:423` |\n| `verifyCacheEvidenceSet` | function: function verifyCacheEvidenceSet(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheEvidenceSet } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:273` |\n| `verifyCacheOperationReceipt` | function: function verifyCacheOperationReceipt(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheOperationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:226` |\n| `verifyDetachedArtifactSignature` | function: function verifyDetachedArtifactSignature({ request, envelope, publicKey, } = {}) | { request, envelope, publicKey, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyDetachedArtifactSignature } from \"@kungfu-tech/buildchain\";` | `packages/core/detached-artifact-signature.js:82` |\n| `verifyGitHubArtifactAttestationEvidence` | function: function verifyGitHubArtifactAttestationEvidence({ artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {}) | { artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:563` |\n| `verifyGithubGovernanceReceipt` | function: function verifyGithubGovernanceReceipt(receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {}) | receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGithubGovernanceReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:884` |\n| `verifyKfdRecord` | function: async function verifyKfdRecord(record) | record | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyKfdRecord } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:308` |\n| `verifyPortableDevCachePlan` | function: function verifyPortableDevCachePlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyPortableDevCachePlan } from \"@kungfu-tech/buildchain\";` | `packages/core/portable-dev-cache.js:211` |\n| `verifyPublicationAdmission` | function: function verifyPublicationAdmission({ admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {}) | { admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationAdmission } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:791` |\n| `verifyPublicationQualificationReceipt` | function: function verifyPublicationQualificationReceipt({ receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {}) | { receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationQualificationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:1096` |\n| `verifyPublicationReproducibility` | function: function verifyPublicationReproducibility({ cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {}) | { cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { verifyPublicationReproducibility } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-reproducibility.js:869` |\n| `verifyPublicationSealedBundle` | function: function verifyPublicationSealedBundle({ bundleRoot, manifest } = {}) | { bundleRoot, manifest } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationSealedBundle } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-sealed-bundle.js:124` |\n| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2743` |\n| `verifyReleasePropagationWork` | function: function verifyReleasePropagationWork(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work.js:482` |\n| `WEB_SURFACE_PRODUCTION_DECISION_CONTRACT` | constant: const WEB_SURFACE_PRODUCTION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PRODUCTION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:7` |\n| `WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT` | constant: const WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:5` |\n| `webSurfacePublicationDigest` | function: function webSurfacePublicationDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { webSurfacePublicationDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:21` |\n| `workflowFrictionMarker` | function: function workflowFrictionMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { workflowFrictionMarker } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:80` |\n| `writeBuildFacts` | function: function writeBuildFacts({ cwd = process.cwd(), fact, output = \"\" } = {}) | { cwd = process.cwd(), fact, output = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeBuildFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:549` |\n| `writeDiagnosticsArtifact` | function: function writeDiagnosticsArtifact(filePath, diagnostics) | filePath, diagnostics | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeDiagnosticsArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1459` |\n| `writeKfd2ProductClaimOutputs` | function: function writeKfd2ProductClaimOutputs(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:426` |\n| `writeKfd3SurfaceRegistry` | function: function writeKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = \"\", registry }) | { cwd = process.cwd(), registryPath = \"\", registry } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeKfd3SurfaceRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:478` |\n| `writeKungfuBuildInfoProjection` | function: function writeKungfuBuildInfoProjection({ cwd = process.cwd(), moduleFact, output } = {}) | { cwd = process.cwd(), moduleFact, output } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { writeKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:557` |\n| `writePaperFleetUpdate` | function: function writePaperFleetUpdate(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writePaperFleetUpdate } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:274` |\n| `writePaperMigration` | function: function writePaperMigration(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperMigration } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:1057` |\n| `writePaperScaffold` | function: function writePaperScaffold(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperScaffold } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:783` |\n| `writePublicationArtifact` | function: function writePublicationArtifact({ cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {}) | { cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writePublicationArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:598` |\n| `writeReleaseLineBootstrapVersionState` | function: function writeReleaseLineBootstrapVersionState({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleaseLineBootstrapVersionState } from \"@kungfu-tech/buildchain\";` | `packages/core/release-line-bootstrap.js:237` |\n| `writeReleasePropagationLock` | function: function writeReleasePropagationLock({ plan, target = \"\", cwd = process.cwd(), output = \"\" } = {}) | { plan, target = \"\", cwd = process.cwd(), output = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleasePropagationLock } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:316` |\n| `writeReleaseTransaction` | function: function writeReleaseTransaction(filePath, record) | filePath, record | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeReleaseTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:376` |\n\n## `@kungfu-tech/buildchain/badges`\n\nTarget: `./packages/core/badges.js`. Public symbols: 17.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BADGE_BUNDLE_DEFAULT_CLAIMS` | constant: const BADGE_BUNDLE_DEFAULT_CLAIMS | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_DEFAULT_CLAIMS } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:17` |\n| `BADGE_BUNDLE_FACTS_CONTRACT` | constant: const BADGE_BUNDLE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:13` |\n| `checkBadgeBundleBlock` | function: function checkBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkBadgeBundleBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:867` |\n| `checkReadmeBadgeBlock` | function: function checkReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkReadmeBadgeBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:848` |\n| `collectBadgeBundleFacts` | function: async function collectBadgeBundleFacts({ cwd = process.cwd(), claims = undefined } = {}) | { cwd = process.cwd(), claims = undefined } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBadgeBundleFacts } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:790` |\n| `collectReadmeBadgeFacts` | function: async function collectReadmeBadgeFacts({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectReadmeBadgeFacts } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:700` |\n| `createKfdBadgeSpecsFromStandards` | function: function createKfdBadgeSpecsFromStandards(standardsMetadata) | standardsMetadata | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdBadgeSpecsFromStandards } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:126` |\n| `createReadmeBadgeEndpointRegistry` | function: function createReadmeBadgeEndpointRegistry({ kfdSpecs = undefined, kfdStandards = undefined } = {}) | { kfdSpecs = undefined, kfdStandards = undefined } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReadmeBadgeEndpointRegistry } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:133` |\n| `README_BADGE_BLOCK_END` | constant: const README_BADGE_BLOCK_END | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_END } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:15` |\n| `README_BADGE_BLOCK_START` | constant: const README_BADGE_BLOCK_START | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_START } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:14` |\n| `README_BADGE_FACTS_CONTRACT` | constant: const README_BADGE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:12` |\n| `README_BADGE_HOSTED_BASE_URL` | constant: const README_BADGE_HOSTED_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_HOSTED_BASE_URL } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:16` |\n| `readReadme` | function: function readReadme({ cwd = process.cwd(), readmePath = \"README.md\" } = {}) | { cwd = process.cwd(), readmePath = \"README.md\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReadme } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:891` |\n| `renderBadgeBundleBlock` | function: function renderBadgeBundleBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBadgeBundleBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:840` |\n| `renderReadmeBadgeBlock` | function: function renderReadmeBadgeBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderReadmeBadgeBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:836` |\n| `updateBadgeBundleBlock` | function: function updateBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateBadgeBundleBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:887` |\n| `updateReadmeBadgeBlock` | function: function updateReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateReadmeBadgeBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:874` |\n\n## `@kungfu-tech/buildchain/build-facts`\n\nTarget: `./packages/core/build-facts.js`. Public symbols: 15.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `aggregateBuildFacts` | function: function aggregateBuildFacts({ cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {}) | { cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | subprocess | `import { aggregateBuildFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:458` |\n| `BUILD_FACTS_GIT_CONTRACT` | constant: const BUILD_FACTS_GIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_GIT_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:9` |\n| `BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT` | constant: const BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:14` |\n| `BUILD_FACTS_MODULE_CONTRACT` | constant: const BUILD_FACTS_MODULE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_MODULE_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:11` |\n| `BUILD_FACTS_PRODUCT_CONTRACT` | constant: const BUILD_FACTS_PRODUCT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_PRODUCT_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:12` |\n| `BUILD_FACTS_VERIFY_CONTRACT` | constant: const BUILD_FACTS_VERIFY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERIFY_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:13` |\n| `BUILD_FACTS_VERSION_CONTRACT` | constant: const BUILD_FACTS_VERSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERSION_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:10` |\n| `buildFactsDigest` | function: function buildFactsDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { buildFactsDigest } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:45` |\n| `collectGitSourceFacts` | function: function collectGitSourceFacts({ cwd = process.cwd(), root = \".\" } = {}) | { cwd = process.cwd(), root = \".\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitSourceFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:146` |\n| `collectModuleBuildFacts` | function: function collectModuleBuildFacts({ cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {}) | { cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectModuleBuildFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:302` |\n| `collectVersionSourceFact` | function: function collectVersionSourceFact({ cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {}) | { cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { collectVersionSourceFact } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:173` |\n| `createKungfuBuildInfoProjection` | function: function createKungfuBuildInfoProjection({ moduleFact, cwd = process.cwd(), now = nowIso() } = {}) | { moduleFact, cwd = process.cwd(), now = nowIso() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:520` |\n| `verifyBuildFacts` | function: function verifyBuildFacts({ cwd = process.cwd(), fact, factPath = \"\" } = {}) | { cwd = process.cwd(), fact, factPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:423` |\n| `writeBuildFacts` | function: function writeBuildFacts({ cwd = process.cwd(), fact, output = \"\" } = {}) | { cwd = process.cwd(), fact, output = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeBuildFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:549` |\n| `writeKungfuBuildInfoProjection` | function: function writeKungfuBuildInfoProjection({ cwd = process.cwd(), moduleFact, output } = {}) | { cwd = process.cwd(), moduleFact, output } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { writeKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:557` |\n\n## `@kungfu-tech/buildchain/core`\n\nTarget: `./packages/core/index.js`. Public symbols: 537.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `abortReleaseActivationTransaction` | function: function abortReleaseActivationTransaction(transaction, reason) | transaction, reason | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { abortReleaseActivationTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:277` |\n| `AGENT_INDEX_CONTRACT` | constant: const AGENT_INDEX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { AGENT_INDEX_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:31` |\n| `aggregateBuildFacts` | function: function aggregateBuildFacts({ cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {}) | { cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | subprocess | `import { aggregateBuildFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:458` |\n| `aggregateControllerReceipts` | function: function aggregateControllerReceipts({ plans = [], receipts = [] } = {}) | { plans = [], receipts = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { aggregateControllerReceipts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:448` |\n| `ANCHORED_VERSION_MATERIAL_CONTRACT` | constant: const ANCHORED_VERSION_MATERIAL_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ANCHORED_VERSION_MATERIAL_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/anchored-version-material.js:15` |\n| `appendBuildchainLogEvent` | function: function appendBuildchainLogEvent(filePath, event) | filePath, event | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { appendBuildchainLogEvent } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:67` |\n| `applySurfaceTimestampPolicy` | function: function applySurfaceTimestampPolicy(manifest, options = {}) | manifest, options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { applySurfaceTimestampPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/surface-manifest.js:79` |\n| `ARTIFACT_EVIDENCE_CONTRACT` | constant: const ARTIFACT_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:29` |\n| `ARTIFACT_PASSPORT_LOCATOR_CONTRACT` | constant: const ARTIFACT_PASSPORT_LOCATOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_LOCATOR_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:11` |\n| `ARTIFACT_PASSPORT_POINTER_CONTRACT` | constant: const ARTIFACT_PASSPORT_POINTER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_POINTER_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:10` |\n| `ARTIFACT_SIGNING_AUTHORITY_CONTRACT` | constant: const ARTIFACT_SIGNING_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:7` |\n| `ARTIFACT_SIGNING_RECEIPT_CONTRACT` | constant: const ARTIFACT_SIGNING_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:5` |\n| `ARTIFACT_SIGNING_REQUEST_CONTRACT` | constant: const ARTIFACT_SIGNING_REQUEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_REQUEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:3` |\n| `ARTIFACT_SIGNING_RESULT_CONTRACT` | constant: const ARTIFACT_SIGNING_RESULT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RESULT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:12` |\n| `ARTIFACT_VERIFICATION_CONTRACT` | constant: const ARTIFACT_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:9` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:5` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:3` |\n| `artifactSigningDigest` | function: function artifactSigningDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactSigningDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:60` |\n| `artifactSigningEvidenceDigest` | function: function artifactSigningEvidenceDigest(evidence = []) | evidence = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { artifactSigningEvidenceDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:58` |\n| `artifactVerificationEnvelopeDigest` | function: function artifactVerificationEnvelopeDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactVerificationEnvelopeDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:50` |\n| `assertPackageManager` | function: function assertPackageManager(manager) | manager | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPackageManager } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:49` |\n| `assertPublicSurfaceReverseAudit` | function: function assertPublicSurfaceReverseAudit(report) | report | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:292` |\n| `auditKfd3Surfaces` | function: function auditKfd3Surfaces({ cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", } = {}) | { cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { auditKfd3Surfaces } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:547` |\n| `BADGE_BUNDLE_DEFAULT_CLAIMS` | constant: const BADGE_BUNDLE_DEFAULT_CLAIMS | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_DEFAULT_CLAIMS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:17` |\n| `BADGE_BUNDLE_FACTS_CONTRACT` | constant: const BADGE_BUNDLE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:13` |\n| `BUILD_FACTS_GIT_CONTRACT` | constant: const BUILD_FACTS_GIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_GIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:9` |\n| `BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT` | constant: const BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:14` |\n| `BUILD_FACTS_MODULE_CONTRACT` | constant: const BUILD_FACTS_MODULE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_MODULE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:11` |\n| `BUILD_FACTS_PRODUCT_CONTRACT` | constant: const BUILD_FACTS_PRODUCT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_PRODUCT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:12` |\n| `BUILD_FACTS_VERIFY_CONTRACT` | constant: const BUILD_FACTS_VERIFY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERIFY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:13` |\n| `BUILD_FACTS_VERSION_CONTRACT` | constant: const BUILD_FACTS_VERSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERSION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:10` |\n| `BUILDCHAIN_AGENT_MANUALS` | constant: const BUILDCHAIN_AGENT_MANUALS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_AGENT_MANUALS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-agent-manuals.js:1` |\n| `BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT` | constant: const BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:31` |\n| `BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT` | constant: const BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:5` |\n| `BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT` | constant: const BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:3` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:1` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:3` |\n| `BUILDCHAIN_CONFIG_PATH` | constant: const BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:7` |\n| `BUILDCHAIN_CONSUMER_ISSUE_CONTRACT` | constant: const BUILDCHAIN_CONSUMER_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONSUMER_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:4` |\n| `BUILDCHAIN_CONTRACT_LOCK` | constant: const BUILDCHAIN_CONTRACT_LOCK | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:8` |\n| `BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:9` |\n| `BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:6` |\n| `BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:4` |\n| `BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:3` |\n| `BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:5` |\n| `BUILDCHAIN_DIAGNOSTICS_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:28` |\n| `BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:33` |\n| `BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:35` |\n| `BUILDCHAIN_DIR` | constant: const BUILDCHAIN_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:4` |\n| `BUILDCHAIN_GENERATED_DIRS` | constant: const BUILDCHAIN_GENERATED_DIRS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GENERATED_DIRS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:36` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1363` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1365` |\n| `BUILDCHAIN_JSON_FORMATTING_POLICY` | constant: const BUILDCHAIN_JSON_FORMATTING_POLICY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_JSON_FORMATTING_POLICY } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:14` |\n| `BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:14` |\n| `BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT` | constant: const BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:15` |\n| `BUILDCHAIN_KFD_ROOT` | constant: const BUILDCHAIN_KFD_ROOT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_ROOT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:11` |\n| `BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:16` |\n| `BUILDCHAIN_KFD1_DIR` | constant: const BUILDCHAIN_KFD1_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:12` |\n| `BUILDCHAIN_KFD1_RELEASE_GATE_PATH` | constant: const BUILDCHAIN_KFD1_RELEASE_GATE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_RELEASE_GATE_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:17` |\n| `BUILDCHAIN_KFD1_VERIFY_RESULT_PATH` | constant: const BUILDCHAIN_KFD1_VERIFY_RESULT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_VERIFY_RESULT_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:18` |\n| `BUILDCHAIN_KFD2_CLAIM_ARGS_PATH` | constant: const BUILDCHAIN_KFD2_CLAIM_ARGS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIM_ARGS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:21` |\n| `BUILDCHAIN_KFD2_CLAIMS_DIR` | constant: const BUILDCHAIN_KFD2_CLAIMS_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIMS_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:22` |\n| `BUILDCHAIN_KFD2_DIR` | constant: const BUILDCHAIN_KFD2_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:13` |\n| `BUILDCHAIN_KFD2_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD2_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_REGISTRY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:19` |\n| `BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH` | constant: const BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:20` |\n| `BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:26` |\n| `BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH` | constant: const BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:27` |\n| `BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH` | constant: const BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:24` |\n| `BUILDCHAIN_KFD3_DIR` | constant: const BUILDCHAIN_KFD3_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:14` |\n| `BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:25` |\n| `BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:23` |\n| `BUILDCHAIN_KFD4_DIR` | constant: const BUILDCHAIN_KFD4_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD4_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:15` |\n| `BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT` | constant: const BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:6` |\n| `BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT` | constant: const BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:29` |\n| `BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT` | constant: const BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:41` |\n| `BUILDCHAIN_LOG_EVENT_CONTRACT` | constant: const BUILDCHAIN_LOG_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_EVENT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:6` |\n| `BUILDCHAIN_LOG_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_LOG_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:7` |\n| `BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:37` |\n| `BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:39` |\n| `BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT` | constant: const BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:11` |\n| `BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:33` |\n| `BUILDCHAIN_RUNTIME_CONTRACT_WORLD` | constant: const BUILDCHAIN_RUNTIME_CONTRACT_WORLD | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RUNTIME_CONTRACT_WORLD } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:7` |\n| `BUILDCHAIN_VERSION_PIN_PATH` | constant: const BUILDCHAIN_VERSION_PIN_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_VERSION_PIN_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:5` |\n| `BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT` | constant: const BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:5` |\n| `buildchainKfdClaims` | constant: const buildchainKfdClaims | none | value | Import does not declare a throw contract. | none-on-import | `import { buildchainKfdClaims } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:896` |\n| `buildchainPublicationAuthorityDescriptors` | function: function buildchainPublicationAuthorityDescriptors() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildchainPublicationAuthorityDescriptors } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-publication-authority.js:51` |\n| `buildConsumerIssueReport` | function: function buildConsumerIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildConsumerIssueReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:104` |\n| `buildFactsDigest` | function: function buildFactsDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { buildFactsDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:45` |\n| `buildWorkflowFrictionIssueReport` | function: function buildWorkflowFrictionIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildWorkflowFrictionIssueReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:199` |\n| `cacheEvidenceDigest` | function: function cacheEvidenceDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cacheEvidenceDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:48` |\n| `CHANNEL_CANDIDATE_DECISION_SCHEMA` | constant: const CHANNEL_CANDIDATE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { CHANNEL_CANDIDATE_DECISION_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/channel-candidate.js:5` |\n| `channelCandidateSourceLockRef` | function: function channelCandidateSourceLockRef(targetBranch, sourceSha) | targetBranch, sourceSha | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { channelCandidateSourceLockRef } from \"@kungfu-tech/buildchain/core\";` | `packages/core/channel-candidate.js:84` |\n| `checkBadgeBundleBlock` | function: function checkBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkBadgeBundleBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:867` |\n| `checkHomebrewTap` | function: async function checkHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkHomebrewTap } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:335` |\n| `checkKfd2ProductClaimOutputs` | function: function checkKfd2ProductClaimOutputs(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:415` |\n| `checkReadmeBadgeBlock` | function: function checkReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkReadmeBadgeBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:848` |\n| `claimReleasePropagationWork` | function: function claimReleasePropagationWork({ work, expectedWorkRoot, authority, familyState, } = {}) | { work, expectedWorkRoot, authority, familyState, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { claimReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-transitions.js:17` |\n| `classifyProcessCommand` | function: function classifyProcessCommand(command = \"\") | command = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyProcessCommand } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1085` |\n| `codeownersForPath` | function: function codeownersForPath(source, candidatePath) | source, candidatePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { codeownersForPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:417` |\n| `collectBadgeBundleFacts` | function: async function collectBadgeBundleFacts({ cwd = process.cwd(), claims = undefined } = {}) | { cwd = process.cwd(), claims = undefined } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBadgeBundleFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:790` |\n| `collectBuildchainDiagnostics` | function: function collectBuildchainDiagnostics({ cwd = process.cwd(), artifactPaths = [] } = {}) | { cwd = process.cwd(), artifactPaths = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBuildchainDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:248` |\n| `collectCacheDiagnostics` | function: function collectCacheDiagnostics({ cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {}) | { cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCacheDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:922` |\n| `collectCompilerCacheDiagnostics` | function: function collectCompilerCacheDiagnostics({ cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {}) | { cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCompilerCacheDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:573` |\n| `collectGitDiagnostics` | function: function collectGitDiagnostics({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:944` |\n| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {}) | { cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectGitHubReleasePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:1488` |\n| `collectGitSourceFacts` | function: function collectGitSourceFacts({ cwd = process.cwd(), root = \".\" } = {}) | { cwd = process.cwd(), root = \".\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitSourceFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:146` |\n| `collectHomebrewTapFacts` | function: async function collectHomebrewTapFacts({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectHomebrewTapFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:223` |\n| `collectKfdStatus` | function: function collectKfdStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdStatus } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:902` |\n| `collectModuleBuildFacts` | function: function collectModuleBuildFacts({ cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {}) | { cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectModuleBuildFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:302` |\n| `collectNativeDiagnostics` | function: function collectNativeDiagnostics({ cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {}) | { cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectNativeDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:295` |\n| `collectPaperFleetAudit` | function: function collectPaperFleetAudit({ root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {}) | { root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperFleetAudit } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:161` |\n| `collectPaperPreflight` | function: function collectPaperPreflight({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperPreflight } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2341` |\n| `collectPaperStatus` | function: function collectPaperStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperStatus } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:1399` |\n| `collectProcessTreeSnapshot` | function: function collectProcessTreeSnapshot({ rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {}) | { rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectProcessTreeSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1029` |\n| `collectPublicationArtifact` | function: function collectPublicationArtifact({ cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {}) | { cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectPublicationArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:271` |\n| `collectPublicationPackageFacts` | function: function collectPublicationPackageFacts({ cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {}) | { cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { collectPublicationPackageFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-package.js:74` |\n| `collectPublicSurfaceReverseAudit` | function: function collectPublicSurfaceReverseAudit({ root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {}) | { root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:192` |\n| `collectReadmeBadgeFacts` | function: async function collectReadmeBadgeFacts({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectReadmeBadgeFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:700` |\n| `collectRunnerDiagnostics` | function: function collectRunnerDiagnostics() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectRunnerDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:468` |\n| `collectToolDiagnostics` | function: function collectToolDiagnostics({ cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {}) | { cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectToolDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:495` |\n| `collectVersionSourceFact` | function: function collectVersionSourceFact({ cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {}) | { cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { collectVersionSourceFact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:173` |\n| `commandForKungfuUpgrade` | function: function commandForKungfuUpgrade(manager, scope = \"@kungfu-trader\") | manager, scope = \"@kungfu-trader\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForKungfuUpgrade } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:121` |\n| `commandForRunScript` | function: function commandForRunScript(manager, script) | manager, script | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForRunScript } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:89` |\n| `commandForVersion` | function: function commandForVersion(manager, keyword, options = {}) | manager, keyword, options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForVersion } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:100` |\n| `compileEffectiveGithubGovernancePolicy` | function: function compileEffectiveGithubGovernancePolicy({ branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {}) | { branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileEffectiveGithubGovernancePolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:311` |\n| `completeReleasePropagationWork` | function: function completeReleasePropagationWork({ work, expectedWorkRoot, receipt, completionDecision, } = {}) | { work, expectedWorkRoot, receipt, completionDecision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { completeReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-transitions.js:110` |\n| `computeConsumerIssueFingerprint` | function: function computeConsumerIssueFingerprint(fields = {}) | fields = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { computeConsumerIssueFingerprint } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:64` |\n| `CONSUMER_PUBLICATION_DECISION_CONTRACT` | constant: const CONSUMER_PUBLICATION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { CONSUMER_PUBLICATION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:20` |\n| `consumerIssueMarker` | function: function consumerIssueMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { consumerIssueMarker } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:76` |\n| `contractSummary` | function: function contractSummary(contractWorld, runtimeRef = \"\", runtimeSha = \"\") | contractWorld, runtimeRef = \"\", runtimeSha = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { contractSummary } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:910` |\n| `controllerEvidenceDigest` | function: function controllerEvidenceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { controllerEvidenceDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:150` |\n| `createAnchoredVersionMaterialEvidence` | function: function createAnchoredVersionMaterialEvidence({ cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {}) | { cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createAnchoredVersionMaterialEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/anchored-version-material.js:118` |\n| `createArtifactEvidence` | function: function createArtifactEvidence({ assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {}) | { assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createArtifactEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:1158` |\n| `createArtifactSigningReceipt` | function: function createArtifactSigningReceipt({ request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {}) | { request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:313` |\n| `createArtifactSigningRequest` | function: function createArtifactSigningRequest({ source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {}) | { source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningRequest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:167` |\n| `createArtifactSigningResult` | function: function createArtifactSigningResult({ request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {}) | { request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningResult } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:68` |\n| `createBuildchainContractLock` | function: function createBuildchainContractLock({ buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {}) | { buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainContractLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:752` |\n| `createBuildchainContractWorld` | function: function createBuildchainContractWorld({ root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {}) | { root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainContractWorld } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:75` |\n| `createBuildchainGithubGovernanceAuthority` | function: function createBuildchainGithubGovernanceAuthority() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainGithubGovernanceAuthority } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:450` |\n| `createBuildchainKfd1Witness` | function: function createBuildchainKfd1Witness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd1Witness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:530` |\n| `createBuildchainKfd2Claims` | function: function createBuildchainKfd2Claims({ root = process.cwd(), witnessFiles = {} } = {}) | { root = process.cwd(), witnessFiles = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd2Claims } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:687` |\n| `createBuildchainKfd3ArtifactWitness` | function: function createBuildchainKfd3ArtifactWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3ArtifactWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:647` |\n| `createBuildchainKfd3PrebuildWitness` | function: function createBuildchainKfd3PrebuildWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3PrebuildWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:583` |\n| `createBuildchainKfdClaimRegistry` | function: function createBuildchainKfdClaimRegistry({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdClaimRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:510` |\n| `createBuildchainKfdSurfaceRegistry` | function: function createBuildchainKfdSurfaceRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdSurfaceRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:411` |\n| `createBuildchainLayoutDiscovery` | function: function createBuildchainLayoutDiscovery({ cwd = process.cwd(), buildchainVersion = \"\", } = {}) | { cwd = process.cwd(), buildchainVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainLayoutDiscovery } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:99` |\n| `createBuildchainLogger` | function: function createBuildchainLogger(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createBuildchainLogger } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:300` |\n| `createBuildchainPublicationAuthorityRegistry` | function: function createBuildchainPublicationAuthorityRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-publication-authority.js:76` |\n| `createBuildchainPublicClaimDefinitions` | function: function createBuildchainPublicClaimDefinitions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicClaimDefinitions } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:226` |\n| `createCacheEvidenceSet` | function: function createCacheEvidenceSet({ repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {}) | { repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheEvidenceSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:244` |\n| `createCacheOperationReceipt` | function: function createCacheOperationReceipt({ operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {}) | { operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheOperationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:169` |\n| `createCandidateTimeline` | function: function createCandidateTimeline({ candidate = {}, events = [], generatedAt, } = {}) | { candidate = {}, events = [], generatedAt, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createCandidateTimeline } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:381` |\n| `createConsumerPublicationDecision` | function: function createConsumerPublicationDecision({ capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {}) | { capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createConsumerPublicationDecision } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:991` |\n| `createControllerPlan` | function: function createControllerPlan({ descriptor, source = {}, runtime = {}, inputs = {} } = {}) | { descriptor, source = {}, runtime = {}, inputs = {} } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:286` |\n| `createControllerReceipt` | function: function createControllerReceipt({ plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {}) | { plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:362` |\n| `createControllerReceiptReference` | function: function createControllerReceiptReference(receipt) | receipt | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceiptReference } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:490` |\n| `createControllerRegistry` | function: function createControllerRegistry({ workflows = [] } = {}) | { workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:196` |\n| `createDiagnosticsArtifact` | function: function createDiagnosticsArtifact({ cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {}) | { cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createDiagnosticsArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1408` |\n| `createGitHubArtifactAttestationEvidence` | function: function createGitHubArtifactAttestationEvidence({ preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {}) | { preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:474` |\n| `createGitHubArtifactAttestationPolicy` | function: function createGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:204` |\n| `createGitHubArtifactAttestationVerificationPlan` | function: function createGitHubArtifactAttestationVerificationPlan({ artifactPath, bundlePath, evidence, } = {}) | { artifactPath, bundlePath, evidence, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationVerificationPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:524` |\n| `createGithubGovernanceRolloutPlan` | function: function createGithubGovernanceRolloutPlan({ repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {}) | { repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubGovernanceRolloutPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:932` |\n| `createGitHubIssueRequest` | function: function createGitHubIssueRequest({ token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {}) | { token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubIssueRequest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:393` |\n| `createGithubRulesetBypassRolloutPlan` | function: function createGithubRulesetBypassRolloutPlan({ repository, rulesetId, inventory, rollbackSnapshot, } = {}) | { repository, rulesetId, inventory, rollbackSnapshot, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetBypassRolloutPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1110` |\n| `createGithubRulesetGovernanceRolloutPlan` | function: function createGithubRulesetGovernanceRolloutPlan({ repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {}) | { repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetGovernanceRolloutPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1189` |\n| `createKfd1ReleaseGateEvidence` | function: function createKfd1ReleaseGateEvidence({ cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {}) | { cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:977` |\n| `createKfd3CollaborationInterfaceReleaseGateEvidence` | function: function createKfd3CollaborationInterfaceReleaseGateEvidence({ prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {}) | { prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:1132` |\n| `createKfd3SurfaceWitness` | function: function createKfd3SurfaceWitness({ cwd = process.cwd(), registryPath = \"\", kind = \"prebuild\", sourceSha = \"\", artifactPath = \"\", } = {}) | { cwd = process.cwd(), registryPath = \"\", kind = \"prebuild\", sourceSha = \"\", artifactPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | network | `import { createKfd3SurfaceWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:702` |\n| `createKfdBadgeSpecsFromStandards` | function: function createKfdBadgeSpecsFromStandards(standardsMetadata) | standardsMetadata | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdBadgeSpecsFromStandards } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:126` |\n| `createKfdSupportProjection` | function: function createKfdSupportProjection({ matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdSupportProjection } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:716` |\n| `createKungfuBuildInfoProjection` | function: function createKungfuBuildInfoProjection({ moduleFact, cwd = process.cwd(), now = nowIso() } = {}) | { moduleFact, cwd = process.cwd(), now = nowIso() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:520` |\n| `createPaperAlphaPlan` | function: function createPaperAlphaPlan({ cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {}) | { cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperAlphaPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2583` |\n| `createPaperBuildPlan` | function: function createPaperBuildPlan({ cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {}) | { cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperBuildPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2520` |\n| `createPaperResumePlan` | function: function createPaperResumePlan({ cwd = process.cwd(), buildchainRef = \"\", } = {}) | { cwd = process.cwd(), buildchainRef = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { createPaperResumePlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2641` |\n| `createPaperWorkStartPlan` | function: function createPaperWorkStartPlan({ cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkStartPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:41` |\n| `createPaperWorkSubmitPlan` | function: function createPaperWorkSubmitPlan({ cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {}) | { cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkSubmitPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:207` |\n| `createPortableDevCachePlan` | function: function createPortableDevCachePlan(manifest) | manifest | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPortableDevCachePlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/portable-dev-cache.js:172` |\n| `createPortableDevCacheReceipt` | function: function createPortableDevCacheReceipt({ plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", }) | { plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPortableDevCacheReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/portable-dev-cache.js:226` |\n| `createPublicationAdmission` | function: function createPublicationAdmission(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationAdmission } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:236` |\n| `createPublicationArtifactCandidate` | function: function createPublicationArtifactCandidate({ repository, sourceSha, sourceTreeSha, runtimeSha, manifest, passport, controllerReceipt, files = [], } = {}) | { repository, sourceSha, sourceTreeSha, runtimeSha, manifest, passport, controllerReceipt, files = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact-candidate.js:55` |\n| `createPublicationArtifactManifestSet` | function: function createPublicationArtifactManifestSet({ repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {}) | { repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactManifestSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:303` |\n| `createPublicationAuthorityRegistry` | function: function createPublicationAuthorityRegistry({ descriptors = [], workflows = [] } = {}) | { descriptors = [], workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:121` |\n| `createPublicationControlPlaneAudit` | function: function createPublicationControlPlaneAudit({ repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationControlPlaneAudit } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:208` |\n| `createPublicationGateDecision` | function: function createPublicationGateDecision({ sourceSha, profile, required = false, rationale, policy = {}, } = {}) | { sourceSha, profile, required = false, rationale, policy = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationGateDecision } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:280` |\n| `createPublicationQualificationReceipt` | function: function createPublicationQualificationReceipt({ capability, gateAggregate, consumerDecision, now = new Date(), } = {}) | { capability, gateAggregate, consumerDecision, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationQualificationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:1035` |\n| `createPublicationSealedBundle` | function: function createPublicationSealedBundle({ candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {}) | { candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationSealedBundle } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-sealed-bundle.js:75` |\n| `createPublicationSourceBundle` | function: function createPublicationSourceBundle({ cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {}) | { cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { createPublicationSourceBundle } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:249` |\n| `createReadmeBadgeEndpointRegistry` | function: function createReadmeBadgeEndpointRegistry({ kfdSpecs = undefined, kfdStandards = undefined } = {}) | { kfdSpecs = undefined, kfdStandards = undefined } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReadmeBadgeEndpointRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:133` |\n| `createReleaseActivationReceiptSet` | function: function createReleaseActivationReceiptSet({ transaction, receipts = [], } = {}) | { transaction, receipts = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:311` |\n| `createReleaseActivationTransaction` | function: function createReleaseActivationTransaction({ transactionId, mode = \"shadow\", bindings, owners, } = {}) | { transactionId, mode = \"shadow\", bindings, owners, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:103` |\n| `createReleaseCandidatePassport` | function: function createReleaseCandidatePassport({ repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {}) | { repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCandidatePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:310` |\n| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2628` |\n| `createReleasePassport` | function: function createReleasePassport({ cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {}) | { cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:1214` |\n| `createReleasePassportCheckManifest` | function: function createReleasePassportCheckManifest({ standards = kfdStandards } = {}) | { standards = kfdStandards } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePassportCheckManifest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:147` |\n| `createReleasePropagationLock` | function: function createReleasePropagationLock({ graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {}) | { graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:199` |\n| `createReleasePropagationReceipt` | function: function createReleasePropagationReceipt({ plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {}) | { plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:370` |\n| `createReleasePropagationStageReceipt` | function: function createReleasePropagationStageReceipt({ work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {}) | { work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationStageReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work.js:214` |\n| `createReleasePropagationWork` | function: function createReleasePropagationWork({ plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {}) | { plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work.js:111` |\n| `createReleaseTransaction` | function: function createReleaseTransaction({ repository, version, exactTag = \"\", channel, line = \"\", sourceSha, targetRef, releaseSha, releaseMaterialSha = releaseSha, publishToolingSha = \"\", lifecycleIdentity = \"lifecycle.publish\", statePath = \"\", evidencePath = \"\", actor = \"\", runId = \"\", } = {}) | { repository, version, exactTag = \"\", channel, line = \"\", sourceSha, targetRef, releaseSha, releaseMaterialSha = releaseSha, publishToolingSha = \"\", lifecycleIdentity = \"lifecycle.publish\", statePath = \"\", evidencePath = \"\", actor = \"\", runId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:197` |\n| `createRunnerProvenance` | function: function createRunnerProvenance({ runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {}) | { runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createRunnerProvenance } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:166` |\n| `createStableCandidateLedger` | function: function createStableCandidateLedger({ repository, targetBranch, now = new Date().toISOString() } = {}) | { repository, targetBranch, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createStableCandidateLedger } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:56` |\n| `createSurfaceTimestampPolicy` | function: function createSurfaceTimestampPolicy({ generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {}) | { generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createSurfaceTimestampPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/surface-manifest.js:34` |\n| `createWebSurfaceProductionDecision` | function: function createWebSurfaceProductionDecision({ approved, kind, repository, sourceSha, actor, actorPermission = \"\", releasePr = 0, releaseSource = \"\", reason, } = {}) | { approved, kind, repository, sourceSha, actor, actorPermission = \"\", releasePr = 0, releaseSource = \"\", reason, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createWebSurfaceProductionDecision } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:45` |\n| `createWebSurfacePublicationCandidate` | function: function createWebSurfacePublicationCandidate({ repository, sourceSha, sourceTreeSha, runtimeSha, plan, planFileDigest, controllerReceipt, decision, } = {}) | { repository, sourceSha, sourceTreeSha, runtimeSha, plan, planFileDigest, controllerReceipt, decision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createWebSurfacePublicationCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:79` |\n| `decideChannelCandidate` | function: function decideChannelCandidate(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { decideChannelCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/channel-candidate.js:90` |\n| `DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY` | constant: const DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | none | value | Import does not declare a throw contract. | none-on-import | `import { DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:6` |\n| `defaultBuildchainLogPath` | function: function defaultBuildchainLogPath({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultBuildchainLogPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:41` |\n| `defaultPublishEvidencePath` | function: function defaultPublishEvidencePath(version, workspace = process.cwd()) | version, workspace = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultPublishEvidencePath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:193` |\n| `defaultReleaseStatePath` | function: function defaultReleaseStatePath(version, workspace = process.cwd()) | version, workspace = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultReleaseStatePath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:185` |\n| `DETACHED_ARTIFACT_SIGNATURE_CONTRACT` | constant: const DETACHED_ARTIFACT_SIGNATURE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { DETACHED_ARTIFACT_SIGNATURE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/detached-artifact-signature.js:10` |\n| `detectKfd3Surfaces` | function: function detectKfd3Surfaces({ cwd = process.cwd(), kinds = [], artifactPath = \"\" } = {}) | { cwd = process.cwd(), kinds = [], artifactPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectKfd3Surfaces } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:423` |\n| `detectLockfile` | function: function detectLockfile(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectLockfile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:237` |\n| `detectPackageManager` | function: function detectPackageManager(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { detectPackageManager } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:56` |\n| `detectPublicationAuthoritySignals` | function: function detectPublicationAuthoritySignals(workflowText = \"\") | workflowText = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectPublicationAuthoritySignals } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:104` |\n| `detectRequestedParallelism` | function: function detectRequestedParallelism({ command = \"\", args = [], env = process.env, } = {}) | { command = \"\", args = [], env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelism } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1188` |\n| `detectRequestedParallelismFromProcessSamples` | function: function detectRequestedParallelismFromProcessSamples(samples = []) | samples = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelismFromProcessSamples } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1223` |\n| `discoverArtifactPassport` | function: async function discoverArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverArtifactPassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:499` |\n| `discoverBuildchainRepoFiles` | function: function discoverBuildchainRepoFiles(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverBuildchainRepoFiles } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:143` |\n| `discoverConfiguredDerivedVersionMaterial` | function: function discoverConfiguredDerivedVersionMaterial(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverConfiguredDerivedVersionMaterial } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1467` |\n| `discoverConfiguredVersionStateFiles` | function: function discoverConfiguredVersionStateFiles(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverConfiguredVersionStateFiles } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1428` |\n| `discoverKfdStandards` | function: function discoverKfdStandards() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverKfdStandards } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:464` |\n| `discoverPaperFleet` | function: function discoverPaperFleet(root = process.cwd()) | root = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverPaperFleet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:23` |\n| `enumerateActionInputs` | function: function enumerateActionInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateActionInputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:122` |\n| `enumerateCliCommandsFromBin` | function: function enumerateCliCommandsFromBin({ root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {}) | { root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateCliCommandsFromBin } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-cli.js:93` |\n| `enumerateDocCommandRefs` | function: function enumerateDocCommandRefs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateDocCommandRefs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:146` |\n| `enumerateSitePages` | function: function enumerateSitePages({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateSitePages } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:137` |\n| `enumerateWorkflowInputs` | function: function enumerateWorkflowInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateWorkflowInputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:105` |\n| `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock({ lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {}) | { lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:818` |\n| `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:425` |\n| `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:694` |\n| `evaluateKfdProductGate` | function: async function evaluateKfdProductGate({ cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateKfdProductGate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:465` |\n| `evaluatePublicationControlPlaneSnapshot` | function: function evaluatePublicationControlPlaneSnapshot({ repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluatePublicationControlPlaneSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-control-plane-audit.js:75` |\n| `executePaperNpmBootstrap` | function: function executePaperNpmBootstrap(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperNpmBootstrap } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2768` |\n| `executePaperWorkStart` | function: function executePaperWorkStart(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkStart } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:169` |\n| `executePaperWorkSubmitPush` | function: function executePaperWorkSubmitPush(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkSubmitPush } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:357` |\n| `explainArtifactPassport` | function: async function explainArtifactPassport(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainArtifactPassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:827` |\n| `explainKfdAgentHub` | function: function explainKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainKfdAgentHub } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:470` |\n| `explainReleaseLineDryRun` | function: function explainReleaseLineDryRun({ cwd = process.cwd(), targetRef, sha = \"\", sourceRef = \"\", tags, publishTransaction = false, publishCommand = \"\", } = {}) | { cwd = process.cwd(), targetRef, sha = \"\", sourceRef = \"\", tags, publishTransaction = false, publishCommand = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { explainReleaseLineDryRun } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-line-dry-run.js:127` |\n| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = \"human\" } = {}) | { passportLocation, forAudience = \"human\" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2812` |\n| `FAMILY_RELEASE_EVIDENCE_CONTRACT` | constant: const FAMILY_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { FAMILY_RELEASE_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:5` |\n| `finalizeBuildchainContractWorld` | function: function finalizeBuildchainContractWorld(contractWorld) | contractWorld | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { finalizeBuildchainContractWorld } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:727` |\n| `formatCandidateTimelineReport` | function: function formatCandidateTimelineReport(timeline) | timeline | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatCandidateTimelineReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:438` |\n| `formatDiagnosticsSummaryTable` | function: function formatDiagnosticsSummaryTable(summary = {}) | summary = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatDiagnosticsSummaryTable } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1786` |\n| `formatReleaseLineDryRun` | function: function formatReleaseLineDryRun(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatReleaseLineDryRun } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-line-dry-run.js:267` |\n| `getLifecycleStage` | function: function getLifecycleStage(loadedConfig, name) | loadedConfig, name | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getLifecycleStage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1372` |\n| `getNativeDiagnosticsProfile` | function: function getNativeDiagnosticsProfile(loadedConfig) | loadedConfig | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { getNativeDiagnosticsProfile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:520` |\n| `getPublishContract` | function: function getPublishContract(loadedConfig) | loadedConfig | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getPublishContract } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1376` |\n| `getStableReleasePolicy` | function: function getStableReleasePolicy(loadedConfig) | loadedConfig | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { getStableReleasePolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:328` |\n| `getVersionStrategy` | function: function getVersionStrategy(loadedConfig) | loadedConfig | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getVersionStrategy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1500` |\n| `getWorkspaceInfo` | function: function getWorkspaceInfo(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getWorkspaceInfo } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:211` |\n| `GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:9` |\n| `GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:5` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:7` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:13` |\n| `GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:11` |\n| `GITHUB_ARTIFACT_ATTESTATION_WORKFLOW` | constant: const GITHUB_ARTIFACT_ATTESTATION_WORKFLOW | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_WORKFLOW } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:15` |\n| `GITHUB_GOVERNANCE_AUTHORITY_CONTRACT` | constant: const GITHUB_GOVERNANCE_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:3` |\n| `GITHUB_GOVERNANCE_RECEIPT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:5` |\n| `GITHUB_GOVERNANCE_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:7` |\n| `GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:9` |\n| `githubArtifactAttestationRequiredPermissions` | function: function githubArtifactAttestationRequiredPermissions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationRequiredPermissions } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:640` |\n| `githubArtifactAttestationSemanticRoot` | function: function githubArtifactAttestationSemanticRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSemanticRoot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:91` |\n| `githubArtifactAttestationSha256Buffer` | function: function githubArtifactAttestationSha256Buffer(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256Buffer } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:83` |\n| `githubArtifactAttestationSha256File` | function: function githubArtifactAttestationSha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256File } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:87` |\n| `githubGovernanceDigest` | function: function githubGovernanceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubGovernanceDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:163` |\n| `GitHubIssueRequestError` | class: class GitHubIssueRequestError | none | GitHubIssueRequestError | Construction and method errors follow the linked source implementation. | class-dependent | `import { GitHubIssueRequestError } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:23` |\n| `HOMEBREW_TAP_CHECK_CONTRACT` | constant: const HOMEBREW_TAP_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_CHECK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:6` |\n| `HOMEBREW_TAP_FACTS_CONTRACT` | constant: const HOMEBREW_TAP_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:5` |\n| `HOMEBREW_TAP_MANIFEST_CONTRACT` | constant: const HOMEBREW_TAP_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:7` |\n| `IMPACT_LEDGER_CONTRACT` | constant: const IMPACT_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { IMPACT_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:30` |\n| `initKfdAgentHub` | function: function initKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { initKfdAgentHub } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:363` |\n| `inspectKfdAgentHub` | function: function inspectKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { inspectKfdAgentHub } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:384` |\n| `KFD_AGENT_HUB_ADOPTION_CONTRACT` | constant: const KFD_AGENT_HUB_ADOPTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:9` |\n| `KFD_AGENT_HUB_ADOPTION_SCHEMA` | constant: const KFD_AGENT_HUB_ADOPTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:12` |\n| `KFD_AGENT_HUB_DECLARATION` | constant: const KFD_AGENT_HUB_DECLARATION | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_DECLARATION } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:7` |\n| `KFD_AGENT_HUB_LOCK_CONTRACT` | constant: const KFD_AGENT_HUB_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_LOCK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:10` |\n| `KFD_AGENT_HUB_OUTPUT_DIR` | constant: const KFD_AGENT_HUB_OUTPUT_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_OUTPUT_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:8` |\n| `KFD_AGENT_HUB_VERIFICATION_CONTRACT` | constant: const KFD_AGENT_HUB_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:11` |\n| `KFD_PRODUCT_GATE_CONTRACT` | constant: const KFD_PRODUCT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:11` |\n| `KFD_PRODUCT_GATE_INPUT_CONTRACT` | constant: const KFD_PRODUCT_GATE_INPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:9` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:55` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA_ID` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA_ID } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:15` |\n| `KFD_SUPPORT_PROJECTION_CONTRACT` | constant: const KFD_SUPPORT_PROJECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:13` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:130` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA_ID` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA_ID } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:17` |\n| `kfd1` | constant: const kfd1 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd1 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:546` |\n| `KFD1_RELEASE_GATE_CONTRACT` | constant: const KFD1_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:9` |\n| `KFD1_WITNESS_SET_CONTRACT` | constant: const KFD1_WITNESS_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_WITNESS_SET_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:10` |\n| `kfd2` | constant: const kfd2 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd2 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:561` |\n| `KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:23` |\n| `KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:19` |\n| `KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:21` |\n| `KFD2_RELEASE_TRUST_PASSPORT_CONTRACT` | constant: const KFD2_RELEASE_TRUST_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_RELEASE_TRUST_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:35` |\n| `KFD2_TRUST_PROOF_CONTRACT` | constant: const KFD2_TRUST_PROOF_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_TRUST_PROOF_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:36` |\n| `kfd3` | constant: const kfd3 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd3 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:663` |\n| `KFD3_ARTIFACT_WITNESS_CONTRACT` | constant: const KFD3_ARTIFACT_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_ARTIFACT_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:13` |\n| `KFD3_CAPABILITY_QUERY_CONTRACT` | constant: const KFD3_CAPABILITY_QUERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_CAPABILITY_QUERY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:9` |\n| `KFD3_DEFAULT_REGISTRY_PATH` | constant: const KFD3_DEFAULT_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_DEFAULT_REGISTRY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:10` |\n| `KFD3_PREBUILD_WITNESS_CONTRACT` | constant: const KFD3_PREBUILD_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_PREBUILD_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:12` |\n| `KFD3_RELEASE_GATE_CONTRACT` | constant: const KFD3_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:11` |\n| `KFD3_SURFACE_AUDIT_CONTRACT` | constant: const KFD3_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:8` |\n| `KFD3_SURFACE_DETECTION_CONTRACT` | constant: const KFD3_SURFACE_DETECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_DETECTION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:7` |\n| `KFD3_SURFACE_REGISTRY_CONTRACT` | constant: const KFD3_SURFACE_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:6` |\n| `kfd4` | constant: const kfd4 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd4 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:681` |\n| `kfdProductGateDigest` | function: function kfdProductGateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { kfdProductGateDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:188` |\n| `kfdProductGates` | constant: const kfdProductGates | none | value | Import does not declare a throw contract. | none-on-import | `import { kfdProductGates } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:859` |\n| `KFX_ADMISSION_INPUTS_CONTRACT` | constant: const KFX_ADMISSION_INPUTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFX_ADMISSION_INPUTS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:7` |\n| `layout` | constant: const layout | none | value | Import does not declare a throw contract. | none-on-import | `import { layout } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:905` |\n| `LEGACY_BUILDCHAIN_CONFIG_PATH` | constant: const LEGACY_BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:8` |\n| `LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:10` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:28` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:29` |\n| `LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:34` |\n| `listArtifactSigningProfiles` | function: function listArtifactSigningProfiles() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listArtifactSigningProfiles } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:103` |\n| `listKfdSchemas` | function: function listKfdSchemas({ standard = \"\" } = {}) | { standard = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdSchemas } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:492` |\n| `loadBuildchainConfig` | function: function loadBuildchainConfig(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadBuildchainConfig } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:158` |\n| `loadConfiguredAnchorManifest` | function: function loadConfiguredAnchorManifest(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadConfiguredAnchorManifest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1509` |\n| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2841` |\n| `markStableCandidatePromoted` | function: function markStableCandidatePromoted(ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { markStableCandidatePromoted } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:229` |\n| `migrateBuildchainLayout` | function: function migrateBuildchainLayout({ cwd = process.cwd(), write = false, force = false } = {}) | { cwd = process.cwd(), write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { migrateBuildchainLayout } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:287` |\n| `normalizeBuildchainConfig` | function: function normalizeBuildchainConfig(config) | config | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeBuildchainConfig } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:181` |\n| `normalizeBuildchainLogEvent` | function: function normalizeBuildchainLogEvent(input = {}, defaults = {}) | input = {}, defaults = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeBuildchainLogEvent } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:45` |\n| `normalizeCandidateTimelineEvent` | function: function normalizeCandidateTimelineEvent(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeCandidateTimelineEvent } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:74` |\n| `normalizeControllerReceiptReferences` | function: function normalizeControllerReceiptReferences({ receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | { receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeControllerReceiptReferences } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:531` |\n| `normalizeGitHubArtifactAttestationPolicy` | function: function normalizeGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:158` |\n| `normalizeGithubBranchProtectionSnapshot` | function: function normalizeGithubBranchProtectionSnapshot(protection = {}) | protection = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubBranchProtectionSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1025` |\n| `normalizeGithubRulesetSnapshot` | function: function normalizeGithubRulesetSnapshot(ruleset = {}) | ruleset = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubRulesetSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1095` |\n| `normalizeIssueRepository` | function: function normalizeIssueRepository(repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY) | repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeIssueRepository } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:33` |\n| `normalizeKfd1ContractWorldWitness` | function: function normalizeKfd1ContractWorldWitness(witness, { metadata = resolveKfd1Metadata() } = {}) | witness, { metadata = resolveKfd1Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd1ContractWorldWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:897` |\n| `normalizeKfd3CollaborationInterfaceArtifactWitness` | function: function normalizeKfd3CollaborationInterfaceArtifactWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfaceArtifactWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:738` |\n| `normalizeKfd3CollaborationInterfacePrebuildWitness` | function: function normalizeKfd3CollaborationInterfacePrebuildWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfacePrebuildWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:667` |\n| `normalizeKfd3DistributionDeclaration` | function: function normalizeKfd3DistributionDeclaration(distribution, { surfaceId = \"surface\" } = {}) | distribution, { surfaceId = \"surface\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3DistributionDeclaration } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:73` |\n| `normalizeKfdStandardId` | function: function normalizeKfdStandardId(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfdStandardId } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:455` |\n| `normalizeLifecycleStage` | function: function normalizeLifecycleStage(stage, label = \"lifecycle stage\", lifecycle = {}) | stage, label = \"lifecycle stage\", lifecycle = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeLifecycleStage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1333` |\n| `normalizeReleasePropagationGraph` | function: function normalizeReleasePropagationGraph(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeReleasePropagationGraph } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:163` |\n| `normalizeStableCandidateLedger` | function: function normalizeStableCandidateLedger(input, expected = {}) | input, expected = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeStableCandidateLedger } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:76` |\n| `PAPER_ALPHA_PLAN_CONTRACT` | constant: const PAPER_ALPHA_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_ALPHA_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:89` |\n| `PAPER_BUILD_PLAN_CONTRACT` | constant: const PAPER_BUILD_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_BUILD_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:88` |\n| `PAPER_FLEET_AUDIT_CONTRACT` | constant: const PAPER_FLEET_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:19` |\n| `PAPER_FLEET_UPDATE_PLAN_CONTRACT` | constant: const PAPER_FLEET_UPDATE_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_UPDATE_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:20` |\n| `PAPER_MIGRATION_CONTRACT` | constant: const PAPER_MIGRATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_MIGRATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:81` |\n| `PAPER_NPM_BOOTSTRAP_CONTRACT` | constant: const PAPER_NPM_BOOTSTRAP_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_NPM_BOOTSTRAP_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:84` |\n| `PAPER_PATHS` | constant: const PAPER_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PATHS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-repository.js:7` |\n| `PAPER_PREFLIGHT_CONTRACT` | constant: const PAPER_PREFLIGHT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PREFLIGHT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:82` |\n| `PAPER_RESUME_PLAN_CONTRACT` | constant: const PAPER_RESUME_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_RESUME_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:90` |\n| `PAPER_SCAFFOLD_CONTRACT` | constant: const PAPER_SCAFFOLD_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_SCAFFOLD_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:80` |\n| `PAPER_STATE_ORDER` | constant: const PAPER_STATE_ORDER | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATE_ORDER } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:93` |\n| `PAPER_STATUS_CONTRACT` | constant: const PAPER_STATUS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATUS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:83` |\n| `PAPER_VISIBILITY_CONTRACT` | constant: const PAPER_VISIBILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_VISIBILITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:91` |\n| `PAPER_WORK_START_PLAN_CONTRACT` | constant: const PAPER_WORK_START_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_START_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:17` |\n| `PAPER_WORK_SUBMIT_PLAN_CONTRACT` | constant: const PAPER_WORK_SUBMIT_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_SUBMIT_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:19` |\n| `parseCodeowners` | function: function parseCodeowners(source) | source | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseCodeowners } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:401` |\n| `parseIssueLabels` | function: function parseIssueLabels(input = DEFAULT_LABELS) | input = DEFAULT_LABELS | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseIssueLabels } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:41` |\n| `planBuildchainLayoutMigration` | function: function planBuildchainLayoutMigration({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planBuildchainLayoutMigration } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:265` |\n| `planPaperFleetUpdate` | function: function planPaperFleetUpdate(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planPaperFleetUpdate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:212` |\n| `planPaperMigration` | function: function planPaperMigration({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperMigration } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:941` |\n| `planPaperScaffold` | function: function planPaperScaffold({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperScaffold } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:638` |\n| `planReleaseLineBootstrap` | function: function planReleaseLineBootstrap({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planReleaseLineBootstrap } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-line-bootstrap.js:140` |\n| `planReleasePropagation` | function: function planReleasePropagation({ graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {}) | { graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planReleasePropagation } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:248` |\n| `planTransactionRecovery` | function: function planTransactionRecovery({ transaction, evidence, validation, explicitOverride = false, } = {}) | { transaction, evidence, validation, explicitOverride = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planTransactionRecovery } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:769` |\n| `prepareGitHubArtifactAttestation` | function: function prepareGitHubArtifactAttestation({ subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {}) | { subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { prepareGitHubArtifactAttestation } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:250` |\n| `preparePublicationNpmPackage` | function: function preparePublicationNpmPackage({ cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {}) | { cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { preparePublicationNpmPackage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-package.js:120` |\n| `PRODUCT_MECHANISM_CONTRACT` | constant: const PRODUCT_MECHANISM_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PRODUCT_MECHANISM_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:32` |\n| `projectArtifactVerificationEnvelopeToKfx` | function: function projectArtifactVerificationEnvelopeToKfx({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { projectArtifactVerificationEnvelopeToKfx } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:359` |\n| `PUBLICATION_ADMISSION_CONTRACT` | constant: const PUBLICATION_ADMISSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ADMISSION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:10` |\n| `PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:9` |\n| `PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact-candidate.js:5` |\n| `PUBLICATION_ARTIFACT_MANIFEST_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:7` |\n| `PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:24` |\n| `PUBLICATION_ARTIFACT_PASSPORT_CONTRACT` | constant: const PUBLICATION_ARTIFACT_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:8` |\n| `PUBLICATION_ARTIFACT_REGISTRY_CONTRACT` | constant: const PUBLICATION_ARTIFACT_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:10` |\n| `PUBLICATION_AUTHORITY_CLASSES` | constant: const PUBLICATION_AUTHORITY_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_CLASSES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:27` |\n| `PUBLICATION_AUTHORITY_REGISTRY_CONTRACT` | constant: const PUBLICATION_AUTHORITY_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:8` |\n| `PUBLICATION_CAPABILITY_CONTRACT` | constant: const PUBLICATION_CAPABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CAPABILITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:12` |\n| `PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT` | constant: const PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:16` |\n| `PUBLICATION_GATE_DECISION_CONTRACT` | constant: const PUBLICATION_GATE_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_GATE_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:18` |\n| `PUBLICATION_NPM_PACKAGE_CONTRACT` | constant: const PUBLICATION_NPM_PACKAGE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_NPM_PACKAGE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-package.js:6` |\n| `PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT` | constant: const PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:22` |\n| `PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT` | constant: const PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-reproducibility.js:12` |\n| `PUBLICATION_SEALED_BUNDLE_CONTRACT` | constant: const PUBLICATION_SEALED_BUNDLE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_SEALED_BUNDLE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-sealed-bundle.js:10` |\n| `publicationArtifactCandidateDigest` | function: function publicationArtifactCandidateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { publicationArtifactCandidateDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact-candidate.js:19` |\n| `publicationAuthorityDigest` | function: function publicationAuthorityDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationAuthorityDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:72` |\n| `publicationGateAggregateBindings` | function: function publicationGateAggregateBindings(gateAggregate) | gateAggregate | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationGateAggregateBindings } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:408` |\n| `qualifyStableCandidate` | function: function qualifyStableCandidate(ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {}) | ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { qualifyStableCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:139` |\n| `queryKfd3Capabilities` | function: async function queryKfd3Capabilities({ cwd = process.cwd(), product = \"\", registryPath = \"\", passportLocation = \"\", artifactPath = \"\", } = {}) | { cwd = process.cwd(), product = \"\", registryPath = \"\", passportLocation = \"\", artifactPath = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { queryKfd3Capabilities } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:824` |\n| `readBuildchainContractLock` | function: function readBuildchainContractLock(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:803` |\n| `readBuildchainContractWorld` | function: function readBuildchainContractWorld(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractWorld } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:783` |\n| `readBuildchainLogEvents` | function: function readBuildchainLogEvents(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readBuildchainLogEvents } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:75` |\n| `readDiagnosticsArtifact` | function: function readDiagnosticsArtifact(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readDiagnosticsArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1468` |\n| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2694` |\n| `readKfd2ProductClaimsRegistry` | function: function readKfd2ProductClaimsRegistry({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfd2ProductClaimsRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:137` |\n| `readKfd3SurfaceRegistry` | function: function readKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = \"\" } = {}) | { cwd = process.cwd(), registryPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readKfd3SurfaceRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:455` |\n| `readKfdSchema` | function: function readKfdSchema({ standard, schema = \"\" } = {}) | { standard, schema = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfdSchema } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:520` |\n| `README_BADGE_BLOCK_END` | constant: const README_BADGE_BLOCK_END | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_END } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:15` |\n| `README_BADGE_BLOCK_START` | constant: const README_BADGE_BLOCK_START | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_START } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:14` |\n| `README_BADGE_FACTS_CONTRACT` | constant: const README_BADGE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:12` |\n| `README_BADGE_HOSTED_BASE_URL` | constant: const README_BADGE_HOSTED_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_HOSTED_BASE_URL } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:16` |\n| `readOptionalIssueBodyFile` | function: function readOptionalIssueBodyFile(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readOptionalIssueBodyFile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:385` |\n| `readPublishEvidence` | function: function readPublishEvidence(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readPublishEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:564` |\n| `readReadme` | function: function readReadme({ cwd = process.cwd(), readmePath = \"README.md\" } = {}) | { cwd = process.cwd(), readmePath = \"README.md\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReadme } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:891` |\n| `readReleasePropagationJson` | function: function readReleasePropagationJson(value, { cwd = process.cwd(), label = \"json\" } = {}) | value, { cwd = process.cwd(), label = \"json\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readReleasePropagationJson } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:304` |\n| `readReleaseTransaction` | function: function readReleaseTransaction(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReleaseTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:367` |\n| `recordReleaseActivationPhase` | function: function recordReleaseActivationPhase(transaction, phaseId, { receiptRoots = [], failure = \"\" } = {}) | transaction, phaseId, { receiptRoots = [], failure = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleaseActivationPhase } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:217` |\n| `recordReleasePropagationStage` | function: function recordReleasePropagationStage({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleasePropagationStage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-transitions.js:45` |\n| `redactBuildchainLogAttributes` | function: function redactBuildchainLogAttributes(attributes = {}) | attributes = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactBuildchainLogAttributes } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:33` |\n| `redactDiagnosticsValue` | function: function redactDiagnosticsValue(key, value, pattern = DEFAULT_SECRET_KEY_PATTERN) | key, value, pattern = DEFAULT_SECRET_KEY_PATTERN | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { redactDiagnosticsValue } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:953` |\n| `redactIssueText` | function: function redactIssueText(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactIssueText } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:51` |\n| `registerKfd3Surfaces` | function: function registerKfd3Surfaces({ cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", product = {}, } = {}) | { cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", product = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { registerKfd3Surfaces } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:502` |\n| `registerStableCandidate` | function: function registerStableCandidate(ledgerInput, candidateInput, { now = new Date().toISOString() } = {}) | ledgerInput, candidateInput, { now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { registerStableCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:106` |\n| `RELEASE_ACTIVATION_CONTRACT` | constant: const RELEASE_ACTIVATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:3` |\n| `RELEASE_ACTIVATION_PHASES` | constant: const RELEASE_ACTIVATION_PHASES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_PHASES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:8` |\n| `RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT` | constant: const RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:5` |\n| `RELEASE_CANDIDATE_PASSPORT_CONTRACT` | constant: const RELEASE_CANDIDATE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CANDIDATE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:4` |\n| `RELEASE_CHECK_REPORT_CONTRACT` | constant: const RELEASE_CHECK_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CHECK_REPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:33` |\n| `RELEASE_EVIDENCE_ATTACHMENT_CONTRACT` | constant: const RELEASE_EVIDENCE_ATTACHMENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:34` |\n| `RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT` | constant: const RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:9` |\n| `RELEASE_PASSPORT_CONTRACT` | constant: const RELEASE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:28` |\n| `RELEASE_PASSPORT_SCHEMA` | constant: const RELEASE_PASSPORT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:16` |\n| `RELEASE_PASSPORT_SCHEMA_ID` | constant: const RELEASE_PASSPORT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA_ID } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:7` |\n| `RELEASE_PROPAGATION_GRAPH_CONTRACT` | constant: const RELEASE_PROPAGATION_GRAPH_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_GRAPH_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:15` |\n| `RELEASE_PROPAGATION_LOCK_CONTRACT` | constant: const RELEASE_PROPAGATION_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_LOCK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:17` |\n| `RELEASE_PROPAGATION_PLAN_CONTRACT` | value: RELEASE_PROPAGATION_PLAN_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_PROPAGATION_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:1` |\n| `RELEASE_PROPAGATION_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:18` |\n| `RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-constants.js:2` |\n| `RELEASE_PROPAGATION_WORK_CONTRACT` | constant: const RELEASE_PROPAGATION_WORK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-constants.js:1` |\n| `RELEASE_PROPAGATION_WORK_STAGES` | constant: const RELEASE_PROPAGATION_WORK_STAGES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_STAGES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-constants.js:4` |\n| `releaseActivationRoot` | function: function releaseActivationRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { releaseActivationRoot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:38` |\n| `renderBadgeBundleBlock` | function: function renderBadgeBundleBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBadgeBundleBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:840` |\n| `renderBuildchainContractDriftIssueBody` | function: function renderBuildchainContractDriftIssueBody({ repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {}) | { repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBuildchainContractDriftIssueBody } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:922` |\n| `renderHomebrewFormula` | function: function renderHomebrewFormula(facts) | facts | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderHomebrewFormula } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:290` |\n| `renderKfd2ProductClaimOutputs` | function: function renderKfd2ProductClaimOutputs({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = \"\", channel = \"\", tag = \"\", sourceSha = \"\", } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = \"\", channel = \"\", tag = \"\", sourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:321` |\n| `renderReadmeBadgeBlock` | function: function renderReadmeBadgeBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderReadmeBadgeBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:836` |\n| `repairReleasePropagationWork` | function: function repairReleasePropagationWork({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { repairReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-transitions.js:88` |\n| `reportBuildchainIssue` | function: async function reportBuildchainIssue(options = {}) | options = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { reportBuildchainIssue } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:292` |\n| `reportWorkflowFrictionIssue` | function: async function reportWorkflowFrictionIssue(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { reportWorkflowFrictionIssue } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:378` |\n| `resolveArtifactSigningProfile` | function: function resolveArtifactSigningProfile({ profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {}) | { profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSigningProfile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:111` |\n| `resolveArtifactSubject` | function: async function resolveArtifactSubject(subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {}) | subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSubject } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:368` |\n| `resolveBuildchainConfigPath` | function: function resolveBuildchainConfigPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainConfigPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:67` |\n| `resolveBuildchainContractLockPath` | function: function resolveBuildchainContractLockPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainContractLockPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:74` |\n| `resolveGithubGovernanceTargetPolicy` | function: function resolveGithubGovernanceTargetPolicy({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:607` |\n| `resolveKfd1Metadata` | function: function resolveKfd1Metadata() | none | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd1Metadata } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:89` |\n| `resolveKfd2ProductClaimsRegistryPath` | function: function resolveKfd2ProductClaimsRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd2ProductClaimsRegistryPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:81` |\n| `resolveKfd3Metadata` | function: function resolveKfd3Metadata({ requireSchemas = false } = {}) | { requireSchemas = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd3Metadata } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:128` |\n| `resolveKfd3SurfaceRegistryPath` | function: function resolveKfd3SurfaceRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd3SurfaceRegistryPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:85` |\n| `resolvePaperRepository` | function: function resolvePaperRepository(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePaperRepository } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-repository.js:132` |\n| `resolvePropagationChannel` | function: function resolvePropagationChannel(edge, upstreamChannel) | edge, upstreamChannel | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePropagationChannel } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:190` |\n| `resolvePublicationCandidateFile` | function: function resolvePublicationCandidateFile(files = [], candidatePath) | files = [], candidatePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolvePublicationCandidateFile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact-candidate.js:23` |\n| `resolveReleasePassportPath` | function: function resolveReleasePassportPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveReleasePassportPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:92` |\n| `resumeReleasePropagationWork` | function: function resumeReleasePropagationWork(work) | work | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resumeReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work.js:514` |\n| `revokeStableCandidate` | function: function revokeStableCandidate(ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { revokeStableCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:185` |\n| `rollbackReleaseActivationTransaction` | function: function rollbackReleaseActivationTransaction(transaction, { toSiteSourceSha, reason } = {}) | transaction, { toSiteSourceSha, reason } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { rollbackReleaseActivationTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:290` |\n| `runLifecycleStage` | function: function runLifecycleStage({ cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes }) | { cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { runLifecycleStage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1380` |\n| `RUNNER_PROVENANCE_CLASSES` | constant: const RUNNER_PROVENANCE_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CLASSES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:36` |\n| `RUNNER_PROVENANCE_CONTRACT` | constant: const RUNNER_PROVENANCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:14` |\n| `schemas` | constant: const schemas | none | value | Import does not declare a throw contract. | none-on-import | `import { schemas } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:495` |\n| `sealArtifactVerificationReport` | function: function sealArtifactVerificationReport({ report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {}) | { report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sealArtifactVerificationReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:314` |\n| `selectStableCandidate` | function: function selectStableCandidate(ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {}) | ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { selectStableCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:206` |\n| `setStableCandidateHold` | function: function setStableCandidateHold(ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {}) | ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { setStableCandidateHold } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:198` |\n| `sha256BuildchainContractJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256BuildchainContractJson } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:30` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write, subprocess | `import { sha256File } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:216` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:90` |\n| `sha256KfdJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256KfdJson } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:50` |\n| `sha256Text` | function: function sha256Text(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Text } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:138` |\n| `sha512IntegrityBuffer` | function: function sha512IntegrityBuffer(buffer) | buffer | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha512IntegrityBuffer } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:34` |\n| `sha512IntegrityFile` | function: function sha512IntegrityFile(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha512IntegrityFile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:38` |\n| `shellJoin` | function: function shellJoin(command) | command | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { shellJoin } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:114` |\n| `signDetachedArtifactRequest` | function: function signDetachedArtifactRequest({ request, privateKey, keyId, authority = {}, } = {}) | { request, privateKey, keyId, authority = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { signDetachedArtifactRequest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/detached-artifact-signature.js:36` |\n| `STABLE_CANDIDATE_LEDGER_CONTRACT` | constant: const STABLE_CANDIDATE_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:1` |\n| `STABLE_CANDIDATE_STATES` | constant: const STABLE_CANDIDATE_STATES | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_STATES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:2` |\n| `stableCandidatePromotionRefs` | function: function stableCandidatePromotionRefs(candidateInput, targetBranch) | candidateInput, targetBranch | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { stableCandidatePromotionRefs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:264` |\n| `startProcessSampler` | function: function startProcessSampler({ rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {}) | { rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { startProcessSampler } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1362` |\n| `summarizeBuildchainLogEvents` | function: function summarizeBuildchainLogEvents(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeBuildchainLogEvents } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:192` |\n| `summarizeDiagnosticsArtifacts` | function: function summarizeDiagnosticsArtifacts(inputs = []) | inputs = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeDiagnosticsArtifacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1824` |\n| `summarizeLifecycleObservability` | function: function summarizeLifecycleObservability({ events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {}) | { events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeLifecycleObservability } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:219` |\n| `summarizeProcessSamples` | function: function summarizeProcessSamples({ samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {}) | { samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeProcessSamples } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1254` |\n| `SURFACE_TIMESTAMP_POLICY_CONTRACT` | constant: const SURFACE_TIMESTAMP_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { SURFACE_TIMESTAMP_POLICY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/surface-manifest.js:1` |\n| `testKfdAgentHub` | function: function testKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { testKfdAgentHub } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:399` |\n| `transitionReleaseTransaction` | function: function transitionReleaseTransaction(record, nextState, metadata = {}) | record, nextState, metadata = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { transitionReleaseTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:256` |\n| `truncateUtf8` | function: function truncateUtf8(text, maxBytes = DEFAULT_MAX_BODY_BYTES) | text, maxBytes = DEFAULT_MAX_BODY_BYTES | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { truncateUtf8 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:84` |\n| `updateBadgeBundleBlock` | function: function updateBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateBadgeBundleBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:887` |\n| `updateConfiguredVersionStateContents` | function: function updateConfiguredVersionStateContents(files, version) | files, version | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { updateConfiguredVersionStateContents } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1680` |\n| `updateHomebrewTap` | function: async function updateHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateHomebrewTap } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:390` |\n| `updateReadmeBadgeBlock` | function: function updateReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateReadmeBadgeBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:874` |\n| `validateAnchoredPackageRelease` | function: function validateAnchoredPackageRelease({ cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {}) | { cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateAnchoredPackageRelease } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:325` |\n| `validateArtifactSigningReceipt` | function: function validateArtifactSigningReceipt(receipt, { request } = {}) | receipt, { request } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:374` |\n| `validateArtifactSigningRequest` | function: function validateArtifactSigningRequest(request) | request | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningRequest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:291` |\n| `validateArtifactSigningResult` | function: function validateArtifactSigningResult(result, { request, receipt } = {}) | result, { request, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningResult } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:147` |\n| `validateBuildchainConfig` | function: function validateBuildchainConfig(cwd = process.cwd(), { requireConfig = true, requireVersionState = false, requireLifecycleStages = [], } = {}) | cwd = process.cwd(), { requireConfig = true, requireVersionState = false, requireLifecycleStages = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateBuildchainConfig } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1547` |\n| `validateControllerPlan` | function: function validateControllerPlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:324` |\n| `validateControllerReceipt` | function: function validateControllerReceipt(receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {}) | receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:422` |\n| `validateControllerReceiptReference` | function: function validateControllerReceiptReference(reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceiptReference } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:504` |\n| `validateKfd1ReleaseGateEvidence` | function: function validateKfd1ReleaseGateEvidence(section, { metadata = resolveKfd1Metadata() } = {}) | section, { metadata = resolveKfd1Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:1337` |\n| `validateKfd2ProductClaimsRegistry` | function: function validateKfd2ProductClaimsRegistry(registry = {}) | registry = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateKfd2ProductClaimsRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:152` |\n| `validateKfd3CollaborationInterfaceReleaseGateEvidence` | function: function validateKfd3CollaborationInterfaceReleaseGateEvidence(section, { metadata = resolveKfd3Metadata() } = {}) | section, { metadata = resolveKfd3Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:1470` |\n| `validateKfdProductGateResult` | function: function validateKfdProductGateResult(result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdProductGateResult } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:565` |\n| `validateKfdSupportProjection` | function: function validateKfdSupportProjection(projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdSupportProjection } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:796` |\n| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2853` |\n| `validatePackageManagerContract` | function: function validatePackageManagerContract({ cwd = process.cwd(), expectedManager = \"\" } = {}) | { cwd = process.cwd(), expectedManager = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validatePackageManagerContract } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:18` |\n| `validatePublishEvidence` | function: function validatePublishEvidence({ evidence, version, channel, sourceSha, releaseSha, targetRef = \"\", releaseMaterialSha = releaseSha, publishToolingSha = \"\", requiredArtifacts = [], } = {}) | { evidence, version, channel, sourceSha, releaseSha, targetRef = \"\", releaseMaterialSha = releaseSha, publishToolingSha = \"\", requiredArtifacts = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validatePublishEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:674` |\n| `validateReleaseActivationReceiptSet` | function: function validateReleaseActivationReceiptSet(receiptSet, { allowShadow = true } = {}) | receiptSet, { allowShadow = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:376` |\n| `validateReleaseActivationTransaction` | function: function validateReleaseActivationTransaction(transaction) | transaction | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:146` |\n| `validateReleaseCandidatePassport` | function: function validateReleaseCandidatePassport({ passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {}) | { passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseCandidatePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:404` |\n| `validateReleasePassportSchema` | function: function validateReleasePassportSchema(passport) | passport | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleasePassportSchema } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:256` |\n| `verifyArtifactPassport` | function: async function verifyArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactPassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:701` |\n| `verifyArtifactSigningResultFiles` | function: function verifyArtifactSigningResultFiles({ root, request, receipt, result, } = {}) | { root, request, receipt, result, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactSigningResultFiles } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:193` |\n| `verifyArtifactVerificationEnvelope` | function: function verifyArtifactVerificationEnvelope({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactVerificationEnvelope } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:144` |\n| `verifyBuildchainLogEvents` | function: function verifyBuildchainLogEvents({ path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {}) | { path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildchainLogEvents } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:230` |\n| `verifyBuildFacts` | function: function verifyBuildFacts({ cwd = process.cwd(), fact, factPath = \"\" } = {}) | { cwd = process.cwd(), fact, factPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:423` |\n| `verifyCacheEvidenceSet` | function: function verifyCacheEvidenceSet(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheEvidenceSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:273` |\n| `verifyCacheOperationReceipt` | function: function verifyCacheOperationReceipt(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheOperationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:226` |\n| `verifyDetachedArtifactSignature` | function: function verifyDetachedArtifactSignature({ request, envelope, publicKey, } = {}) | { request, envelope, publicKey, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyDetachedArtifactSignature } from \"@kungfu-tech/buildchain/core\";` | `packages/core/detached-artifact-signature.js:82` |\n| `verifyGitHubArtifactAttestationEvidence` | function: function verifyGitHubArtifactAttestationEvidence({ artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {}) | { artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:563` |\n| `verifyGithubGovernanceReceipt` | function: function verifyGithubGovernanceReceipt(receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {}) | receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGithubGovernanceReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:884` |\n| `verifyKfdRecord` | function: async function verifyKfdRecord(record) | record | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyKfdRecord } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:308` |\n| `verifyPortableDevCachePlan` | function: function verifyPortableDevCachePlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyPortableDevCachePlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/portable-dev-cache.js:211` |\n| `verifyPublicationAdmission` | function: function verifyPublicationAdmission({ admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {}) | { admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationAdmission } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:791` |\n| `verifyPublicationQualificationReceipt` | function: function verifyPublicationQualificationReceipt({ receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {}) | { receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationQualificationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:1096` |\n| `verifyPublicationReproducibility` | function: function verifyPublicationReproducibility({ cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {}) | { cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { verifyPublicationReproducibility } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-reproducibility.js:869` |\n| `verifyPublicationSealedBundle` | function: function verifyPublicationSealedBundle({ bundleRoot, manifest } = {}) | { bundleRoot, manifest } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationSealedBundle } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-sealed-bundle.js:124` |\n| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2743` |\n| `verifyReleasePropagationWork` | function: function verifyReleasePropagationWork(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work.js:482` |\n| `WEB_SURFACE_PRODUCTION_DECISION_CONTRACT` | constant: const WEB_SURFACE_PRODUCTION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PRODUCTION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:7` |\n| `WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT` | constant: const WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:5` |\n| `webSurfacePublicationDigest` | function: function webSurfacePublicationDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { webSurfacePublicationDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:21` |\n| `workflowFrictionMarker` | function: function workflowFrictionMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { workflowFrictionMarker } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:80` |\n| `writeBuildFacts` | function: function writeBuildFacts({ cwd = process.cwd(), fact, output = \"\" } = {}) | { cwd = process.cwd(), fact, output = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeBuildFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:549` |\n| `writeDiagnosticsArtifact` | function: function writeDiagnosticsArtifact(filePath, diagnostics) | filePath, diagnostics | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeDiagnosticsArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1459` |\n| `writeKfd2ProductClaimOutputs` | function: function writeKfd2ProductClaimOutputs(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:426` |\n| `writeKfd3SurfaceRegistry` | function: function writeKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = \"\", registry }) | { cwd = process.cwd(), registryPath = \"\", registry } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeKfd3SurfaceRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:478` |\n| `writeKungfuBuildInfoProjection` | function: function writeKungfuBuildInfoProjection({ cwd = process.cwd(), moduleFact, output } = {}) | { cwd = process.cwd(), moduleFact, output } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { writeKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:557` |\n| `writePaperFleetUpdate` | function: function writePaperFleetUpdate(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writePaperFleetUpdate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:274` |\n| `writePaperMigration` | function: function writePaperMigration(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperMigration } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:1057` |\n| `writePaperScaffold` | function: function writePaperScaffold(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperScaffold } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:783` |\n| `writePublicationArtifact` | function: function writePublicationArtifact({ cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {}) | { cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writePublicationArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:598` |\n| `writeReleaseLineBootstrapVersionState` | function: function writeReleaseLineBootstrapVersionState({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleaseLineBootstrapVersionState } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-line-bootstrap.js:237` |\n| `writeReleasePropagationLock` | function: function writeReleasePropagationLock({ plan, target = \"\", cwd = process.cwd(), output = \"\" } = {}) | { plan, target = \"\", cwd = process.cwd(), output = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleasePropagationLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:316` |\n| `writeReleaseTransaction` | function: function writeReleaseTransaction(filePath, record) | filePath, record | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeReleaseTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:376` |\n\n## `@kungfu-tech/buildchain/artifact-passport`\n\nTarget: `./packages/core/artifact-passport.js`. Public symbols: 10.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ARTIFACT_PASSPORT_LOCATOR_CONTRACT` | constant: const ARTIFACT_PASSPORT_LOCATOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_LOCATOR_CONTRACT } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:11` |\n| `ARTIFACT_PASSPORT_POINTER_CONTRACT` | constant: const ARTIFACT_PASSPORT_POINTER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_POINTER_CONTRACT } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:10` |\n| `ARTIFACT_VERIFICATION_CONTRACT` | constant: const ARTIFACT_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:9` |\n| `DEFAULT_NPM_REGISTRY_BASE_URL` | constant: const DEFAULT_NPM_REGISTRY_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { DEFAULT_NPM_REGISTRY_BASE_URL } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:12` |\n| `discoverArtifactPassport` | function: async function discoverArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverArtifactPassport } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:499` |\n| `explainArtifactPassport` | function: async function explainArtifactPassport(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainArtifactPassport } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:827` |\n| `resolveArtifactSubject` | function: async function resolveArtifactSubject(subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {}) | subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSubject } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:368` |\n| `sha512IntegrityBuffer` | function: function sha512IntegrityBuffer(buffer) | buffer | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha512IntegrityBuffer } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:34` |\n| `sha512IntegrityFile` | function: function sha512IntegrityFile(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha512IntegrityFile } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:38` |\n| `verifyArtifactPassport` | function: async function verifyArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactPassport } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:701` |\n\n## `@kungfu-tech/buildchain/artifact-verification-envelope`\n\nTarget: `./packages/core/artifact-verification-envelope.js`. Public symbols: 7.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:5` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:3` |\n| `artifactVerificationEnvelopeDigest` | function: function artifactVerificationEnvelopeDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactVerificationEnvelopeDigest } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:50` |\n| `KFX_ADMISSION_INPUTS_CONTRACT` | constant: const KFX_ADMISSION_INPUTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFX_ADMISSION_INPUTS_CONTRACT } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:7` |\n| `projectArtifactVerificationEnvelopeToKfx` | function: function projectArtifactVerificationEnvelopeToKfx({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { projectArtifactVerificationEnvelopeToKfx } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:359` |\n| `sealArtifactVerificationReport` | function: function sealArtifactVerificationReport({ report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {}) | { report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sealArtifactVerificationReport } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:314` |\n| `verifyArtifactVerificationEnvelope` | function: function verifyArtifactVerificationEnvelope({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactVerificationEnvelope } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:144` |\n\n## `@kungfu-tech/buildchain/github-artifact-attestation`\n\nTarget: `./packages/core/github-artifact-attestation.js`. Public symbols: 18.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createGitHubArtifactAttestationEvidence` | function: function createGitHubArtifactAttestationEvidence({ preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {}) | { preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:474` |\n| `createGitHubArtifactAttestationPolicy` | function: function createGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:204` |\n| `createGitHubArtifactAttestationVerificationPlan` | function: function createGitHubArtifactAttestationVerificationPlan({ artifactPath, bundlePath, evidence, } = {}) | { artifactPath, bundlePath, evidence, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationVerificationPlan } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:524` |\n| `GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:9` |\n| `GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:5` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:7` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:13` |\n| `GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:11` |\n| `GITHUB_ARTIFACT_ATTESTATION_WORKFLOW` | constant: const GITHUB_ARTIFACT_ATTESTATION_WORKFLOW | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_WORKFLOW } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:15` |\n| `githubArtifactAttestationRequiredPermissions` | function: function githubArtifactAttestationRequiredPermissions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationRequiredPermissions } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:640` |\n| `githubArtifactAttestationSemanticRoot` | function: function githubArtifactAttestationSemanticRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSemanticRoot } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:91` |\n| `githubArtifactAttestationSha256Buffer` | function: function githubArtifactAttestationSha256Buffer(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256Buffer } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:83` |\n| `githubArtifactAttestationSha256File` | function: function githubArtifactAttestationSha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256File } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:87` |\n| `normalizeGitHubArtifactAttestationPolicy` | function: function normalizeGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:158` |\n| `prepareGitHubArtifactAttestation` | function: function prepareGitHubArtifactAttestation({ subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {}) | { subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { prepareGitHubArtifactAttestation } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:250` |\n| `stableJson` | function: function stableJson(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { stableJson } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:72` |\n| `stageGitHubArtifactAttestationInputs` | function: function stageGitHubArtifactAttestationInputs({ policy, subjectRoots = [], platformManifestPaths = [], releasePassportPath, outputDir = \".buildchain/github-artifact-attestation-input\", } = {}) | { policy, subjectRoots = [], platformManifestPaths = [], releasePassportPath, outputDir = \".buildchain/github-artifact-attestation-input\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { stageGitHubArtifactAttestationInputs } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:389` |\n| `verifyGitHubArtifactAttestationEvidence` | function: function verifyGitHubArtifactAttestationEvidence({ artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {}) | { artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:563` |\n\n## `@kungfu-tech/buildchain/artifact-signing`\n\nTarget: `./packages/core/artifact-signing.js`. Public symbols: 10.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ARTIFACT_SIGNING_AUTHORITY_CONTRACT` | constant: const ARTIFACT_SIGNING_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:7` |\n| `ARTIFACT_SIGNING_RECEIPT_CONTRACT` | constant: const ARTIFACT_SIGNING_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:5` |\n| `ARTIFACT_SIGNING_REQUEST_CONTRACT` | constant: const ARTIFACT_SIGNING_REQUEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_REQUEST_CONTRACT } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:3` |\n| `artifactSigningDigest` | function: function artifactSigningDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactSigningDigest } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:60` |\n| `createArtifactSigningReceipt` | function: function createArtifactSigningReceipt({ request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {}) | { request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningReceipt } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:313` |\n| `createArtifactSigningRequest` | function: function createArtifactSigningRequest({ source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {}) | { source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningRequest } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:167` |\n| `listArtifactSigningProfiles` | function: function listArtifactSigningProfiles() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listArtifactSigningProfiles } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:103` |\n| `resolveArtifactSigningProfile` | function: function resolveArtifactSigningProfile({ profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {}) | { profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSigningProfile } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:111` |\n| `validateArtifactSigningReceipt` | function: function validateArtifactSigningReceipt(receipt, { request } = {}) | receipt, { request } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningReceipt } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:374` |\n| `validateArtifactSigningRequest` | function: function validateArtifactSigningRequest(request) | request | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningRequest } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:291` |\n\n## `@kungfu-tech/buildchain/artifact-signing-result`\n\nTarget: `./packages/core/artifact-signing-result.js`. Public symbols: 5.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ARTIFACT_SIGNING_RESULT_CONTRACT` | constant: const ARTIFACT_SIGNING_RESULT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RESULT_CONTRACT } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:12` |\n| `artifactSigningEvidenceDigest` | function: function artifactSigningEvidenceDigest(evidence = []) | evidence = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { artifactSigningEvidenceDigest } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:58` |\n| `createArtifactSigningResult` | function: function createArtifactSigningResult({ request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {}) | { request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningResult } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:68` |\n| `validateArtifactSigningResult` | function: function validateArtifactSigningResult(result, { request, receipt } = {}) | result, { request, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningResult } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:147` |\n| `verifyArtifactSigningResultFiles` | function: function verifyArtifactSigningResultFiles({ root, request, receipt, result, } = {}) | { root, request, receipt, result, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactSigningResultFiles } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:193` |\n\n## `@kungfu-tech/buildchain/detached-artifact-signature`\n\nTarget: `./packages/core/detached-artifact-signature.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `DETACHED_ARTIFACT_SIGNATURE_CONTRACT` | constant: const DETACHED_ARTIFACT_SIGNATURE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { DETACHED_ARTIFACT_SIGNATURE_CONTRACT } from \"@kungfu-tech/buildchain/detached-artifact-signature\";` | `packages/core/detached-artifact-signature.js:10` |\n| `signDetachedArtifactRequest` | function: function signDetachedArtifactRequest({ request, privateKey, keyId, authority = {}, } = {}) | { request, privateKey, keyId, authority = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { signDetachedArtifactRequest } from \"@kungfu-tech/buildchain/detached-artifact-signature\";` | `packages/core/detached-artifact-signature.js:36` |\n| `verifyDetachedArtifactSignature` | function: function verifyDetachedArtifactSignature({ request, envelope, publicKey, } = {}) | { request, envelope, publicKey, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyDetachedArtifactSignature } from \"@kungfu-tech/buildchain/detached-artifact-signature\";` | `packages/core/detached-artifact-signature.js:82` |\n\n## `@kungfu-tech/buildchain/anchored-version-material`\n\nTarget: `./packages/core/anchored-version-material.js`. Public symbols: 2.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ANCHORED_VERSION_MATERIAL_CONTRACT` | constant: const ANCHORED_VERSION_MATERIAL_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ANCHORED_VERSION_MATERIAL_CONTRACT } from \"@kungfu-tech/buildchain/anchored-version-material\";` | `packages/core/anchored-version-material.js:15` |\n| `createAnchoredVersionMaterialEvidence` | function: function createAnchoredVersionMaterialEvidence({ cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {}) | { cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createAnchoredVersionMaterialEvidence } from \"@kungfu-tech/buildchain/anchored-version-material\";` | `packages/core/anchored-version-material.js:118` |\n\n## `@kungfu-tech/buildchain/buildchain-contract`\n\nTarget: `./packages/core/buildchain-contract.js`. Public symbols: 12.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CONTRACT_LOCK` | constant: const BUILDCHAIN_CONTRACT_LOCK | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:8` |\n| `BUILDCHAIN_RUNTIME_CONTRACT_WORLD` | constant: const BUILDCHAIN_RUNTIME_CONTRACT_WORLD | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RUNTIME_CONTRACT_WORLD } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:7` |\n| `contractSummary` | function: function contractSummary(contractWorld, runtimeRef = \"\", runtimeSha = \"\") | contractWorld, runtimeRef = \"\", runtimeSha = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { contractSummary } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:910` |\n| `createBuildchainContractLock` | function: function createBuildchainContractLock({ buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {}) | { buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainContractLock } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:752` |\n| `createBuildchainContractWorld` | function: function createBuildchainContractWorld({ root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {}) | { root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainContractWorld } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:75` |\n| `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock({ lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {}) | { lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:818` |\n| `finalizeBuildchainContractWorld` | function: function finalizeBuildchainContractWorld(contractWorld) | contractWorld | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { finalizeBuildchainContractWorld } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:727` |\n| `readBuildchainContractLock` | function: function readBuildchainContractLock(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractLock } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:803` |\n| `readBuildchainContractWorld` | function: function readBuildchainContractWorld(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractWorld } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:783` |\n| `renderBuildchainContractDriftIssueBody` | function: function renderBuildchainContractDriftIssueBody({ repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {}) | { repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBuildchainContractDriftIssueBody } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:922` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256File } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:34` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:30` |\n\n## `@kungfu-tech/buildchain/candidate-timeline`\n\nTarget: `./packages/core/candidate-timeline.js`. Public symbols: 5.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:1` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:3` |\n| `createCandidateTimeline` | function: function createCandidateTimeline({ candidate = {}, events = [], generatedAt, } = {}) | { candidate = {}, events = [], generatedAt, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createCandidateTimeline } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:381` |\n| `formatCandidateTimelineReport` | function: function formatCandidateTimelineReport(timeline) | timeline | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatCandidateTimelineReport } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:438` |\n| `normalizeCandidateTimelineEvent` | function: function normalizeCandidateTimelineEvent(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeCandidateTimelineEvent } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:74` |\n\n## `@kungfu-tech/buildchain/channel-candidate`\n\nTarget: `./packages/core/channel-candidate.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `CHANNEL_CANDIDATE_DECISION_SCHEMA` | constant: const CHANNEL_CANDIDATE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { CHANNEL_CANDIDATE_DECISION_SCHEMA } from \"@kungfu-tech/buildchain/channel-candidate\";` | `packages/core/channel-candidate.js:5` |\n| `channelCandidateSourceLockRef` | function: function channelCandidateSourceLockRef(targetBranch, sourceSha) | targetBranch, sourceSha | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { channelCandidateSourceLockRef } from \"@kungfu-tech/buildchain/channel-candidate\";` | `packages/core/channel-candidate.js:84` |\n| `decideChannelCandidate` | function: function decideChannelCandidate(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { decideChannelCandidate } from \"@kungfu-tech/buildchain/channel-candidate\";` | `packages/core/channel-candidate.js:90` |\n\n## `@kungfu-tech/buildchain/cache-evidence`\n\nTarget: `./packages/core/cache-evidence.js`. Public symbols: 7.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT` | constant: const BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:5` |\n| `BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT` | constant: const BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:3` |\n| `cacheEvidenceDigest` | function: function cacheEvidenceDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cacheEvidenceDigest } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:48` |\n| `createCacheEvidenceSet` | function: function createCacheEvidenceSet({ repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {}) | { repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheEvidenceSet } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:244` |\n| `createCacheOperationReceipt` | function: function createCacheOperationReceipt({ operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {}) | { operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheOperationReceipt } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:169` |\n| `verifyCacheEvidenceSet` | function: function verifyCacheEvidenceSet(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheEvidenceSet } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:273` |\n| `verifyCacheOperationReceipt` | function: function verifyCacheOperationReceipt(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheOperationReceipt } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:226` |\n\n## `@kungfu-tech/buildchain/controller-evidence`\n\nTarget: `./packages/core/controller-evidence.js`. Public symbols: 14.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `aggregateControllerReceipts` | function: function aggregateControllerReceipts({ plans = [], receipts = [] } = {}) | { plans = [], receipts = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { aggregateControllerReceipts } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:448` |\n| `BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:6` |\n| `BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:4` |\n| `BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:3` |\n| `BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:5` |\n| `controllerEvidenceDigest` | function: function controllerEvidenceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { controllerEvidenceDigest } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:150` |\n| `createControllerPlan` | function: function createControllerPlan({ descriptor, source = {}, runtime = {}, inputs = {} } = {}) | { descriptor, source = {}, runtime = {}, inputs = {} } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerPlan } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:286` |\n| `createControllerReceipt` | function: function createControllerReceipt({ plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {}) | { plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceipt } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:362` |\n| `createControllerReceiptReference` | function: function createControllerReceiptReference(receipt) | receipt | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceiptReference } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:490` |\n| `createControllerRegistry` | function: function createControllerRegistry({ workflows = [] } = {}) | { workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerRegistry } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:196` |\n| `normalizeControllerReceiptReferences` | function: function normalizeControllerReceiptReferences({ receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | { receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeControllerReceiptReferences } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:531` |\n| `validateControllerPlan` | function: function validateControllerPlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerPlan } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:324` |\n| `validateControllerReceipt` | function: function validateControllerReceipt(receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {}) | receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceipt } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:422` |\n| `validateControllerReceiptReference` | function: function validateControllerReceiptReference(reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceiptReference } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:504` |\n\n## `@kungfu-tech/buildchain/diagnostics`\n\nTarget: `./packages/core/diagnostics.js`. Public symbols: 30.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT` | constant: const BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:31` |\n| `BUILDCHAIN_DIAGNOSTICS_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:28` |\n| `BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:33` |\n| `BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:35` |\n| `BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT` | constant: const BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:29` |\n| `BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT` | constant: const BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:41` |\n| `BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:37` |\n| `BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:39` |\n| `classifyProcessCommand` | function: function classifyProcessCommand(command = \"\") | command = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyProcessCommand } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1085` |\n| `collectBuildchainDiagnostics` | function: function collectBuildchainDiagnostics({ cwd = process.cwd(), artifactPaths = [] } = {}) | { cwd = process.cwd(), artifactPaths = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBuildchainDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:248` |\n| `collectCacheDiagnostics` | function: function collectCacheDiagnostics({ cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {}) | { cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCacheDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:922` |\n| `collectCompilerCacheDiagnostics` | function: function collectCompilerCacheDiagnostics({ cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {}) | { cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCompilerCacheDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:573` |\n| `collectGitDiagnostics` | function: function collectGitDiagnostics({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:944` |\n| `collectNativeDiagnostics` | function: function collectNativeDiagnostics({ cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {}) | { cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectNativeDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:295` |\n| `collectProcessTreeSnapshot` | function: function collectProcessTreeSnapshot({ rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {}) | { rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectProcessTreeSnapshot } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1029` |\n| `collectRunnerDiagnostics` | function: function collectRunnerDiagnostics() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectRunnerDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:468` |\n| `collectToolDiagnostics` | function: function collectToolDiagnostics({ cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {}) | { cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectToolDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:495` |\n| `createDiagnosticsArtifact` | function: function createDiagnosticsArtifact({ cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {}) | { cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createDiagnosticsArtifact } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1408` |\n| `createStructuredCacheEvidence` | function: function createStructuredCacheEvidence({ sourceCheckout, compilerCaches, compilerCachePreparation, platform, env = process.env, }) | { sourceCheckout, compilerCaches, compilerCachePreparation, platform, env = process.env, } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createStructuredCacheEvidence } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:722` |\n| `detectRequestedParallelism` | function: function detectRequestedParallelism({ command = \"\", args = [], env = process.env, } = {}) | { command = \"\", args = [], env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelism } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1188` |\n| `detectRequestedParallelismFromProcessSamples` | function: function detectRequestedParallelismFromProcessSamples(samples = []) | samples = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelismFromProcessSamples } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1223` |\n| `formatDiagnosticsSummaryTable` | function: function formatDiagnosticsSummaryTable(summary = {}) | summary = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatDiagnosticsSummaryTable } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1786` |\n| `readDiagnosticsArtifact` | function: function readDiagnosticsArtifact(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readDiagnosticsArtifact } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1468` |\n| `redactDiagnosticsValue` | function: function redactDiagnosticsValue(key, value, pattern = DEFAULT_SECRET_KEY_PATTERN) | key, value, pattern = DEFAULT_SECRET_KEY_PATTERN | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { redactDiagnosticsValue } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:953` |\n| `startProcessSampler` | function: function startProcessSampler({ rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {}) | { rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { startProcessSampler } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1362` |\n| `summarizeDiagnosticsArtifacts` | function: function summarizeDiagnosticsArtifacts(inputs = []) | inputs = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeDiagnosticsArtifacts } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1824` |\n| `summarizeLifecycleObservability` | function: function summarizeLifecycleObservability({ events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {}) | { events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeLifecycleObservability } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:219` |\n| `summarizeProcessSamples` | function: function summarizeProcessSamples({ samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {}) | { samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeProcessSamples } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1254` |\n| `validateAnchoredPackageRelease` | function: function validateAnchoredPackageRelease({ cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {}) | { cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateAnchoredPackageRelease } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:325` |\n| `writeDiagnosticsArtifact` | function: function writeDiagnosticsArtifact(filePath, diagnostics) | filePath, diagnostics | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeDiagnosticsArtifact } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1459` |\n\n## `@kungfu-tech/buildchain/homebrew`\n\nTarget: `./packages/core/homebrew.js`. Public symbols: 7.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `checkHomebrewTap` | function: async function checkHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkHomebrewTap } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:335` |\n| `collectHomebrewTapFacts` | function: async function collectHomebrewTapFacts({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectHomebrewTapFacts } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:223` |\n| `HOMEBREW_TAP_CHECK_CONTRACT` | constant: const HOMEBREW_TAP_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_CHECK_CONTRACT } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:6` |\n| `HOMEBREW_TAP_FACTS_CONTRACT` | constant: const HOMEBREW_TAP_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:5` |\n| `HOMEBREW_TAP_MANIFEST_CONTRACT` | constant: const HOMEBREW_TAP_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:7` |\n| `renderHomebrewFormula` | function: function renderHomebrewFormula(facts) | facts | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderHomebrewFormula } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:290` |\n| `updateHomebrewTap` | function: async function updateHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateHomebrewTap } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:390` |\n\n## `@kungfu-tech/buildchain/issue-reporting`\n\nTarget: `./packages/core/issue-reporting.js`. Public symbols: 17.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CONSUMER_ISSUE_CONTRACT` | constant: const BUILDCHAIN_CONSUMER_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONSUMER_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:4` |\n| `BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT` | constant: const BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:5` |\n| `buildConsumerIssueReport` | function: function buildConsumerIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildConsumerIssueReport } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:104` |\n| `buildWorkflowFrictionIssueReport` | function: function buildWorkflowFrictionIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildWorkflowFrictionIssueReport } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:199` |\n| `computeConsumerIssueFingerprint` | function: function computeConsumerIssueFingerprint(fields = {}) | fields = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { computeConsumerIssueFingerprint } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:64` |\n| `consumerIssueMarker` | function: function consumerIssueMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { consumerIssueMarker } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:76` |\n| `createGitHubIssueRequest` | function: function createGitHubIssueRequest({ token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {}) | { token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubIssueRequest } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:393` |\n| `DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY` | constant: const DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | none | value | Import does not declare a throw contract. | none-on-import | `import { DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:6` |\n| `GitHubIssueRequestError` | class: class GitHubIssueRequestError | none | GitHubIssueRequestError | Construction and method errors follow the linked source implementation. | class-dependent | `import { GitHubIssueRequestError } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:23` |\n| `normalizeIssueRepository` | function: function normalizeIssueRepository(repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY) | repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeIssueRepository } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:33` |\n| `parseIssueLabels` | function: function parseIssueLabels(input = DEFAULT_LABELS) | input = DEFAULT_LABELS | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseIssueLabels } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:41` |\n| `readOptionalIssueBodyFile` | function: function readOptionalIssueBodyFile(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readOptionalIssueBodyFile } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:385` |\n| `redactIssueText` | function: function redactIssueText(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactIssueText } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:51` |\n| `reportBuildchainIssue` | function: async function reportBuildchainIssue(options = {}) | options = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { reportBuildchainIssue } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:292` |\n| `reportWorkflowFrictionIssue` | function: async function reportWorkflowFrictionIssue(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { reportWorkflowFrictionIssue } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:378` |\n| `truncateUtf8` | function: function truncateUtf8(text, maxBytes = DEFAULT_MAX_BODY_BYTES) | text, maxBytes = DEFAULT_MAX_BODY_BYTES | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { truncateUtf8 } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:84` |\n| `workflowFrictionMarker` | function: function workflowFrictionMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { workflowFrictionMarker } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:80` |\n\n## `@kungfu-tech/buildchain/kfd`\n\nTarget: `./packages/core/kfd.js`. Public symbols: 17.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `buildchainKfdClaims` | constant: const buildchainKfdClaims | none | value | Import does not declare a throw contract. | none-on-import | `import { buildchainKfdClaims } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:896` |\n| `checkKfdUpstreamFacts` | function: function checkKfdUpstreamFacts(aggregate = {}) | aggregate = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkKfdUpstreamFacts } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:798` |\n| `collectKfdAggregate` | function: function collectKfdAggregate({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdAggregate } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:868` |\n| `collectKfdStatus` | function: function collectKfdStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdStatus } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:902` |\n| `collectKfdUpstreamFacts` | function: function collectKfdUpstreamFacts({ cwd = process.cwd(), components = undefined, includeOwn = true } = {}) | { cwd = process.cwd(), components = undefined, includeOwn = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdUpstreamFacts } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:689` |\n| `discoverKfdStandards` | function: function discoverKfdStandards() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverKfdStandards } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:464` |\n| `kfd1` | constant: const kfd1 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd1 } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:546` |\n| `kfd2` | constant: const kfd2 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd2 } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:561` |\n| `kfd3` | constant: const kfd3 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd3 } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:663` |\n| `kfd4` | constant: const kfd4 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd4 } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:681` |\n| `layout` | constant: const layout | none | value | Import does not declare a throw contract. | none-on-import | `import { layout } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:905` |\n| `listKfdSchemas` | function: function listKfdSchemas({ standard = \"\" } = {}) | { standard = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdSchemas } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:492` |\n| `listKfdUpstreamRoles` | function: function listKfdUpstreamRoles() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdUpstreamRoles } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:771` |\n| `normalizeKfdStandardId` | function: function normalizeKfdStandardId(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfdStandardId } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:455` |\n| `readKfdSchema` | function: function readKfdSchema({ standard, schema = \"\" } = {}) | { standard, schema = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfdSchema } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:520` |\n| `schemas` | constant: const schemas | none | value | Import does not declare a throw contract. | none-on-import | `import { schemas } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:495` |\n| `upstream` | constant: const upstream | none | value | Import does not declare a throw contract. | none-on-import | `import { upstream } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:300` |\n\n## `@kungfu-tech/buildchain/kfd-product-gates`\n\nTarget: `./packages/core/kfd-product-gates.js`. Public symbols: 14.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createKfdSupportProjection` | function: function createKfdSupportProjection({ matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdSupportProjection } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:716` |\n| `evaluateKfdProductGate` | function: async function evaluateKfdProductGate({ cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateKfdProductGate } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:465` |\n| `KFD_PRODUCT_GATE_CONTRACT` | constant: const KFD_PRODUCT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_CONTRACT } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:11` |\n| `KFD_PRODUCT_GATE_INPUT_CONTRACT` | constant: const KFD_PRODUCT_GATE_INPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_CONTRACT } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:9` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:55` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA_ID` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA_ID } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:15` |\n| `KFD_SUPPORT_PROJECTION_CONTRACT` | constant: const KFD_SUPPORT_PROJECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_CONTRACT } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:13` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:130` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA_ID` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA_ID } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:17` |\n| `kfdProductGateDigest` | function: function kfdProductGateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { kfdProductGateDigest } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:188` |\n| `kfdProductGates` | constant: const kfdProductGates | none | value | Import does not declare a throw contract. | none-on-import | `import { kfdProductGates } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:859` |\n| `validateKfdProductGateResult` | function: function validateKfdProductGateResult(result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdProductGateResult } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:565` |\n| `validateKfdSupportProjection` | function: function validateKfdSupportProjection(projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdSupportProjection } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:796` |\n| `verifyKfdRecord` | function: async function verifyKfdRecord(record) | record | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyKfdRecord } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:308` |\n\n## `@kungfu-tech/buildchain/kfd-agent-hub`\n\nTarget: `./packages/core/kfd-agent-hub.js`. Public symbols: 10.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `explainKfdAgentHub` | function: function explainKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainKfdAgentHub } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:470` |\n| `initKfdAgentHub` | function: function initKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { initKfdAgentHub } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:363` |\n| `inspectKfdAgentHub` | function: function inspectKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { inspectKfdAgentHub } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:384` |\n| `KFD_AGENT_HUB_ADOPTION_CONTRACT` | constant: const KFD_AGENT_HUB_ADOPTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_CONTRACT } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:9` |\n| `KFD_AGENT_HUB_ADOPTION_SCHEMA` | constant: const KFD_AGENT_HUB_ADOPTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_SCHEMA } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:12` |\n| `KFD_AGENT_HUB_DECLARATION` | constant: const KFD_AGENT_HUB_DECLARATION | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_DECLARATION } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:7` |\n| `KFD_AGENT_HUB_LOCK_CONTRACT` | constant: const KFD_AGENT_HUB_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_LOCK_CONTRACT } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:10` |\n| `KFD_AGENT_HUB_OUTPUT_DIR` | constant: const KFD_AGENT_HUB_OUTPUT_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_OUTPUT_DIR } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:8` |\n| `KFD_AGENT_HUB_VERIFICATION_CONTRACT` | constant: const KFD_AGENT_HUB_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:11` |\n| `testKfdAgentHub` | function: function testKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { testKfdAgentHub } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:399` |\n\n## `@kungfu-tech/buildchain/buildchain-layout`\n\nTarget: `./packages/core/buildchain-layout.js`. Public symbols: 41.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CONFIG_PATH` | constant: const BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:7` |\n| `BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:9` |\n| `BUILDCHAIN_DIR` | constant: const BUILDCHAIN_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:4` |\n| `BUILDCHAIN_GENERATED_DIRS` | constant: const BUILDCHAIN_GENERATED_DIRS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GENERATED_DIRS } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:36` |\n| `BUILDCHAIN_KFD_ROOT` | constant: const BUILDCHAIN_KFD_ROOT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_ROOT } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:11` |\n| `BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:16` |\n| `BUILDCHAIN_KFD1_DIR` | constant: const BUILDCHAIN_KFD1_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:12` |\n| `BUILDCHAIN_KFD1_RELEASE_GATE_PATH` | constant: const BUILDCHAIN_KFD1_RELEASE_GATE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_RELEASE_GATE_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:17` |\n| `BUILDCHAIN_KFD1_VERIFY_RESULT_PATH` | constant: const BUILDCHAIN_KFD1_VERIFY_RESULT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_VERIFY_RESULT_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:18` |\n| `BUILDCHAIN_KFD2_CLAIM_ARGS_PATH` | constant: const BUILDCHAIN_KFD2_CLAIM_ARGS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIM_ARGS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:21` |\n| `BUILDCHAIN_KFD2_CLAIMS_DIR` | constant: const BUILDCHAIN_KFD2_CLAIMS_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIMS_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:22` |\n| `BUILDCHAIN_KFD2_DIR` | constant: const BUILDCHAIN_KFD2_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:13` |\n| `BUILDCHAIN_KFD2_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD2_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_REGISTRY_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:19` |\n| `BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH` | constant: const BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:20` |\n| `BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:26` |\n| `BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH` | constant: const BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:27` |\n| `BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH` | constant: const BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:24` |\n| `BUILDCHAIN_KFD3_DIR` | constant: const BUILDCHAIN_KFD3_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:14` |\n| `BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:25` |\n| `BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:23` |\n| `BUILDCHAIN_KFD4_DIR` | constant: const BUILDCHAIN_KFD4_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD4_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:15` |\n| `BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT` | constant: const BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:6` |\n| `BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:33` |\n| `BUILDCHAIN_VERSION_PIN_PATH` | constant: const BUILDCHAIN_VERSION_PIN_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_VERSION_PIN_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:5` |\n| `createBuildchainLayoutDiscovery` | function: function createBuildchainLayoutDiscovery({ cwd = process.cwd(), buildchainVersion = \"\", } = {}) | { cwd = process.cwd(), buildchainVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainLayoutDiscovery } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:99` |\n| `discoverBuildchainRepoFiles` | function: function discoverBuildchainRepoFiles(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverBuildchainRepoFiles } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:143` |\n| `firstExistingRepoPath` | function: function firstExistingRepoPath(cwd, candidates = []) | cwd, candidates = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { firstExistingRepoPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:58` |\n| `LEGACY_BUILDCHAIN_CONFIG_PATH` | constant: const LEGACY_BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:8` |\n| `LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:10` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:28` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:29` |\n| `LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:34` |\n| `migrateBuildchainLayout` | function: function migrateBuildchainLayout({ cwd = process.cwd(), write = false, force = false } = {}) | { cwd = process.cwd(), write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { migrateBuildchainLayout } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:287` |\n| `planBuildchainLayoutMigration` | function: function planBuildchainLayoutMigration({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planBuildchainLayoutMigration } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:265` |\n| `repoPath` | function: function repoPath(cwd, relativePath) | cwd, relativePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { repoPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:54` |\n| `resolveBuildchainConfigPath` | function: function resolveBuildchainConfigPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainConfigPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:67` |\n| `resolveBuildchainContractLockPath` | function: function resolveBuildchainContractLockPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainContractLockPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:74` |\n| `resolveKfd2ProductClaimsRegistryPath` | function: function resolveKfd2ProductClaimsRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd2ProductClaimsRegistryPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:81` |\n| `resolveKfd3SurfaceRegistryPath` | function: function resolveKfd3SurfaceRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd3SurfaceRegistryPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:85` |\n| `resolveReleasePassportPath` | function: function resolveReleasePassportPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveReleasePassportPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:92` |\n| `toPosixPath` | function: function toPosixPath(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { toPosixPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:50` |\n\n## `@kungfu-tech/buildchain/release-line-bootstrap`\n\nTarget: `./packages/core/release-line-bootstrap.js`. Public symbols: 2.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `planReleaseLineBootstrap` | function: function planReleaseLineBootstrap({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planReleaseLineBootstrap } from \"@kungfu-tech/buildchain/release-line-bootstrap\";` | `packages/core/release-line-bootstrap.js:140` |\n| `writeReleaseLineBootstrapVersionState` | function: function writeReleaseLineBootstrapVersionState({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleaseLineBootstrapVersionState } from \"@kungfu-tech/buildchain/release-line-bootstrap\";` | `packages/core/release-line-bootstrap.js:237` |\n\n## `@kungfu-tech/buildchain/readme-badges`\n\nTarget: `./packages/core/readme-badges.js`. Public symbols: 17.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BADGE_BUNDLE_DEFAULT_CLAIMS` | constant: const BADGE_BUNDLE_DEFAULT_CLAIMS | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_DEFAULT_CLAIMS } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:17` |\n| `BADGE_BUNDLE_FACTS_CONTRACT` | constant: const BADGE_BUNDLE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:13` |\n| `checkBadgeBundleBlock` | function: function checkBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkBadgeBundleBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:867` |\n| `checkReadmeBadgeBlock` | function: function checkReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkReadmeBadgeBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:848` |\n| `collectBadgeBundleFacts` | function: async function collectBadgeBundleFacts({ cwd = process.cwd(), claims = undefined } = {}) | { cwd = process.cwd(), claims = undefined } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBadgeBundleFacts } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:790` |\n| `collectReadmeBadgeFacts` | function: async function collectReadmeBadgeFacts({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectReadmeBadgeFacts } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:700` |\n| `createKfdBadgeSpecsFromStandards` | function: function createKfdBadgeSpecsFromStandards(standardsMetadata) | standardsMetadata | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdBadgeSpecsFromStandards } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:126` |\n| `createReadmeBadgeEndpointRegistry` | function: function createReadmeBadgeEndpointRegistry({ kfdSpecs = undefined, kfdStandards = undefined } = {}) | { kfdSpecs = undefined, kfdStandards = undefined } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReadmeBadgeEndpointRegistry } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:133` |\n| `README_BADGE_BLOCK_END` | constant: const README_BADGE_BLOCK_END | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_END } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:15` |\n| `README_BADGE_BLOCK_START` | constant: const README_BADGE_BLOCK_START | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_START } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:14` |\n| `README_BADGE_FACTS_CONTRACT` | constant: const README_BADGE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:12` |\n| `README_BADGE_HOSTED_BASE_URL` | constant: const README_BADGE_HOSTED_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_HOSTED_BASE_URL } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:16` |\n| `readReadme` | function: function readReadme({ cwd = process.cwd(), readmePath = \"README.md\" } = {}) | { cwd = process.cwd(), readmePath = \"README.md\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReadme } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:891` |\n| `renderBadgeBundleBlock` | function: function renderBadgeBundleBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBadgeBundleBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:840` |\n| `renderReadmeBadgeBlock` | function: function renderReadmeBadgeBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderReadmeBadgeBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:836` |\n| `updateBadgeBundleBlock` | function: function updateBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateBadgeBundleBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:887` |\n| `updateReadmeBadgeBlock` | function: function updateReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateReadmeBadgeBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:874` |\n\n## `@kungfu-tech/buildchain/public-surface-audit`\n\nTarget: `./packages/core/public-surface-audit.js`. Public symbols: 8.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `assertPublicSurfaceReverseAudit` | function: function assertPublicSurfaceReverseAudit(report) | report | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:292` |\n| `BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT` | constant: const BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:11` |\n| `collectPublicSurfaceReverseAudit` | function: function collectPublicSurfaceReverseAudit({ root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {}) | { root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:192` |\n| `enumerateActionInputs` | function: function enumerateActionInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateActionInputs } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:122` |\n| `enumerateCliCommandsFromBin` | function: function enumerateCliCommandsFromBin({ root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {}) | { root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateCliCommandsFromBin } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-cli.js:93` |\n| `enumerateDocCommandRefs` | function: function enumerateDocCommandRefs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateDocCommandRefs } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:146` |\n| `enumerateSitePages` | function: function enumerateSitePages({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateSitePages } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:137` |\n| `enumerateWorkflowInputs` | function: function enumerateWorkflowInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateWorkflowInputs } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:105` |\n\n## `@kungfu-tech/buildchain/logging`\n\nTarget: `./packages/core/logging.js`. Public symbols: 13.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `appendBuildchainLogEvent` | function: function appendBuildchainLogEvent(filePath, event) | filePath, event | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { appendBuildchainLogEvent } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:67` |\n| `BUILDCHAIN_CONTROL_PLANE_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_CONTROL_PLANE_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROL_PLANE_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:8` |\n| `BUILDCHAIN_LOG_EVENT_CONTRACT` | constant: const BUILDCHAIN_LOG_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_EVENT_CONTRACT } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:6` |\n| `BUILDCHAIN_LOG_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_LOG_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:7` |\n| `createBuildchainLogger` | function: function createBuildchainLogger(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createBuildchainLogger } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:300` |\n| `defaultBuildchainLogPath` | function: function defaultBuildchainLogPath({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultBuildchainLogPath } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:41` |\n| `normalizeBuildchainLogEvent` | function: function normalizeBuildchainLogEvent(input = {}, defaults = {}) | input = {}, defaults = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeBuildchainLogEvent } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:45` |\n| `readBuildchainLogEvents` | function: function readBuildchainLogEvents(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readBuildchainLogEvents } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:75` |\n| `recordBuildchainControlPlaneOutcome` | function: function recordBuildchainControlPlaneOutcome({ domain, action = \"\", outcome = \"\", reason = \"\", attributes = {}, } = {}, options = {}) | { domain, action = \"\", outcome = \"\", reason = \"\", attributes = {}, } = {}, options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordBuildchainControlPlaneOutcome } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:160` |\n| `redactBuildchainLogAttributes` | function: function redactBuildchainLogAttributes(attributes = {}) | attributes = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactBuildchainLogAttributes } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:33` |\n| `summarizeBuildchainControlPlaneEvents` | function: function summarizeBuildchainControlPlaneEvents(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeBuildchainControlPlaneEvents } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:115` |\n| `summarizeBuildchainLogEvents` | function: function summarizeBuildchainLogEvents(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeBuildchainLogEvents } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:192` |\n| `verifyBuildchainLogEvents` | function: function verifyBuildchainLogEvents({ path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {}) | { path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildchainLogEvents } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:230` |\n\n## `@kungfu-tech/buildchain/portable-dev-cache`\n\nTarget: `./packages/core/portable-dev-cache.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createPortableDevCachePlan` | function: function createPortableDevCachePlan(manifest) | manifest | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPortableDevCachePlan } from \"@kungfu-tech/buildchain/portable-dev-cache\";` | `packages/core/portable-dev-cache.js:172` |\n| `createPortableDevCacheReceipt` | function: function createPortableDevCacheReceipt({ plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", }) | { plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPortableDevCacheReceipt } from \"@kungfu-tech/buildchain/portable-dev-cache\";` | `packages/core/portable-dev-cache.js:226` |\n| `verifyPortableDevCachePlan` | function: function verifyPortableDevCachePlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyPortableDevCachePlan } from \"@kungfu-tech/buildchain/portable-dev-cache\";` | `packages/core/portable-dev-cache.js:211` |\n\n## `@kungfu-tech/buildchain/publication-artifact`\n\nTarget: `./packages/core/publication-artifact.js`. Public symbols: 7.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `collectPublicationArtifact` | function: function collectPublicationArtifact({ cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {}) | { cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectPublicationArtifact } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:271` |\n| `createPublicationSourceBundle` | function: function createPublicationSourceBundle({ cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {}) | { cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { createPublicationSourceBundle } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:249` |\n| `PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:9` |\n| `PUBLICATION_ARTIFACT_MANIFEST_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:7` |\n| `PUBLICATION_ARTIFACT_PASSPORT_CONTRACT` | constant: const PUBLICATION_ARTIFACT_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:8` |\n| `PUBLICATION_ARTIFACT_REGISTRY_CONTRACT` | constant: const PUBLICATION_ARTIFACT_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:10` |\n| `writePublicationArtifact` | function: function writePublicationArtifact({ cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {}) | { cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writePublicationArtifact } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:598` |\n\n## `@kungfu-tech/buildchain/publication-package`\n\nTarget: `./packages/core/publication-package.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `collectPublicationPackageFacts` | function: function collectPublicationPackageFacts({ cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {}) | { cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { collectPublicationPackageFacts } from \"@kungfu-tech/buildchain/publication-package\";` | `packages/core/publication-package.js:74` |\n| `preparePublicationNpmPackage` | function: function preparePublicationNpmPackage({ cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {}) | { cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { preparePublicationNpmPackage } from \"@kungfu-tech/buildchain/publication-package\";` | `packages/core/publication-package.js:120` |\n| `PUBLICATION_NPM_PACKAGE_CONTRACT` | constant: const PUBLICATION_NPM_PACKAGE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_NPM_PACKAGE_CONTRACT } from \"@kungfu-tech/buildchain/publication-package\";` | `packages/core/publication-package.js:6` |\n\n## `@kungfu-tech/buildchain/publication-reproducibility`\n\nTarget: `./packages/core/publication-reproducibility.js`. Public symbols: 2.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT` | constant: const PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/publication-reproducibility\";` | `packages/core/publication-reproducibility.js:12` |\n| `verifyPublicationReproducibility` | function: function verifyPublicationReproducibility({ cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {}) | { cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { verifyPublicationReproducibility } from \"@kungfu-tech/buildchain/publication-reproducibility\";` | `packages/core/publication-reproducibility.js:869` |\n\n## `@kungfu-tech/buildchain/publication-sealed-bundle`\n\nTarget: `./packages/core/publication-sealed-bundle.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createPublicationSealedBundle` | function: function createPublicationSealedBundle({ candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {}) | { candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationSealedBundle } from \"@kungfu-tech/buildchain/publication-sealed-bundle\";` | `packages/core/publication-sealed-bundle.js:75` |\n| `PUBLICATION_SEALED_BUNDLE_CONTRACT` | constant: const PUBLICATION_SEALED_BUNDLE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_SEALED_BUNDLE_CONTRACT } from \"@kungfu-tech/buildchain/publication-sealed-bundle\";` | `packages/core/publication-sealed-bundle.js:10` |\n| `verifyPublicationSealedBundle` | function: function verifyPublicationSealedBundle({ bundleRoot, manifest } = {}) | { bundleRoot, manifest } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationSealedBundle } from \"@kungfu-tech/buildchain/publication-sealed-bundle\";` | `packages/core/publication-sealed-bundle.js:124` |\n\n## `@kungfu-tech/buildchain/paper`\n\nTarget: `./packages/core/paper.js`. Public symbols: 47.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `collectPaperAgentEntry` | function: function collectPaperAgentEntry({ cwd = process.cwd(), buildchainSha = \"\", mode = \"contract\", env = process.env, } = {}) | { cwd = process.cwd(), buildchainSha = \"\", mode = \"contract\", env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperAgentEntry } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:248` |\n| `collectPaperFleetAudit` | function: function collectPaperFleetAudit({ root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {}) | { root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperFleetAudit } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:161` |\n| `collectPaperPreflight` | function: function collectPaperPreflight({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperPreflight } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2341` |\n| `collectPaperStatus` | function: function collectPaperStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperStatus } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:1399` |\n| `createPaperAgentEntry` | function: function createPaperAgentEntry({ buildchainVersion, buildchainSha, developmentRef, }) | { buildchainVersion, buildchainSha, developmentRef, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperAgentEntry } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:93` |\n| `createPaperAlphaPlan` | function: function createPaperAlphaPlan({ cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {}) | { cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperAlphaPlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2583` |\n| `createPaperBuildPlan` | function: function createPaperBuildPlan({ cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {}) | { cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperBuildPlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2520` |\n| `createPaperProvisioningAuthority` | function: function createPaperProvisioningAuthority({ repository, packageName, buildchainVersion, buildchainSha, contractLock, buildWorkflow, verifyWorkflow, releaseWorkflow, agentEntry, agentInstructions, environment = \"\", }) | { repository, packageName, buildchainVersion, buildchainSha, contractLock, buildWorkflow, verifyWorkflow, releaseWorkflow, agentEntry, agentInstructions, environment = \"\", } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperProvisioningAuthority } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:456` |\n| `createPaperResumePlan` | function: function createPaperResumePlan({ cwd = process.cwd(), buildchainRef = \"\", } = {}) | { cwd = process.cwd(), buildchainRef = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { createPaperResumePlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2641` |\n| `createPaperWorkStartPlan` | function: function createPaperWorkStartPlan({ cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkStartPlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:41` |\n| `createPaperWorkSubmitPlan` | function: function createPaperWorkSubmitPlan({ cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {}) | { cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkSubmitPlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:207` |\n| `discoverPaperFleet` | function: function discoverPaperFleet(root = process.cwd()) | root = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverPaperFleet } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:23` |\n| `executePaperNpmBootstrap` | function: function executePaperNpmBootstrap(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperNpmBootstrap } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2768` |\n| `executePaperWorkStart` | function: function executePaperWorkStart(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkStart } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:169` |\n| `executePaperWorkSubmitPush` | function: function executePaperWorkSubmitPush(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkSubmitPush } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:357` |\n| `mergePaperAgentEntryInstructions` | function: function mergePaperAgentEntryInstructions(current = \"\", { developmentRef }) | current = \"\", { developmentRef } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { mergePaperAgentEntryInstructions } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:61` |\n| `PAPER_AGENT_ENTRY_CONTRACT` | constant: const PAPER_AGENT_ENTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_AGENT_ENTRY_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:16` |\n| `PAPER_AGENT_ENTRY_SCHEMA_VERSION` | constant: const PAPER_AGENT_ENTRY_SCHEMA_VERSION | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_AGENT_ENTRY_SCHEMA_VERSION } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:17` |\n| `PAPER_AGENT_ENTRY_SECTION_END` | constant: const PAPER_AGENT_ENTRY_SECTION_END | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_AGENT_ENTRY_SECTION_END } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:20` |\n| `PAPER_AGENT_ENTRY_SECTION_START` | constant: const PAPER_AGENT_ENTRY_SECTION_START | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_AGENT_ENTRY_SECTION_START } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:18` |\n| `PAPER_ALPHA_PLAN_CONTRACT` | constant: const PAPER_ALPHA_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_ALPHA_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:89` |\n| `PAPER_BUILD_PLAN_CONTRACT` | constant: const PAPER_BUILD_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_BUILD_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:88` |\n| `PAPER_FLEET_AUDIT_CONTRACT` | constant: const PAPER_FLEET_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:19` |\n| `PAPER_FLEET_UPDATE_PLAN_CONTRACT` | constant: const PAPER_FLEET_UPDATE_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_UPDATE_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:20` |\n| `PAPER_MIGRATION_CONTRACT` | constant: const PAPER_MIGRATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_MIGRATION_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:81` |\n| `PAPER_NPM_BOOTSTRAP_CONTRACT` | constant: const PAPER_NPM_BOOTSTRAP_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_NPM_BOOTSTRAP_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:84` |\n| `PAPER_PATHS` | constant: const PAPER_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PATHS } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-repository.js:7` |\n| `PAPER_PREFLIGHT_CONTRACT` | constant: const PAPER_PREFLIGHT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PREFLIGHT_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:82` |\n| `PAPER_PROVISIONING_CONTRACT` | constant: const PAPER_PROVISIONING_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PROVISIONING_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:86` |\n| `PAPER_RESUME_PLAN_CONTRACT` | constant: const PAPER_RESUME_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_RESUME_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:90` |\n| `PAPER_SCAFFOLD_CONTRACT` | constant: const PAPER_SCAFFOLD_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_SCAFFOLD_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:80` |\n| `PAPER_STATE_ORDER` | constant: const PAPER_STATE_ORDER | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATE_ORDER } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:93` |\n| `PAPER_STATUS_CONTRACT` | constant: const PAPER_STATUS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATUS_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:83` |\n| `PAPER_VISIBILITY_CONTRACT` | constant: const PAPER_VISIBILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_VISIBILITY_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:91` |\n| `PAPER_WORK_START_PLAN_CONTRACT` | constant: const PAPER_WORK_START_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_START_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:17` |\n| `PAPER_WORK_SUBMIT_PLAN_CONTRACT` | constant: const PAPER_WORK_SUBMIT_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_SUBMIT_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:19` |\n| `paperAgentEntryFiles` | function: function paperAgentEntryFiles({ cwd, buildchainVersion, buildchainSha, developmentRef = \"\", }) | { cwd, buildchainVersion, buildchainSha, developmentRef = \"\", } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { paperAgentEntryFiles } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:150` |\n| `paperAgentEntryInstructions` | function: function paperAgentEntryInstructions({ developmentRef }) | { developmentRef } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { paperAgentEntryInstructions } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:36` |\n| `planPaperFleetUpdate` | function: function planPaperFleetUpdate(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planPaperFleetUpdate } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:212` |\n| `planPaperMigration` | function: function planPaperMigration({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperMigration } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:941` |\n| `planPaperScaffold` | function: function planPaperScaffold({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperScaffold } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:638` |\n| `resolvePaperBuildchainSha` | function: function resolvePaperBuildchainSha(buildchainRoot, buildchainSha = \"\") | buildchainRoot, buildchainSha = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePaperBuildchainSha } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:177` |\n| `resolvePaperRepository` | function: function resolvePaperRepository(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePaperRepository } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-repository.js:132` |\n| `resolvePaperRuntimeGitSha` | function: function resolvePaperRuntimeGitSha(buildchainRoot, buildchainVersion = \"\") | buildchainRoot, buildchainVersion = \"\" | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolvePaperRuntimeGitSha } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:182` |\n| `writePaperFleetUpdate` | function: function writePaperFleetUpdate(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writePaperFleetUpdate } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:274` |\n| `writePaperMigration` | function: function writePaperMigration(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperMigration } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:1057` |\n| `writePaperScaffold` | function: function writePaperScaffold(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperScaffold } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:783` |\n\n## `@kungfu-tech/buildchain/publication-authority`\n\nTarget: `./packages/core/publication-authority.js`. Public symbols: 24.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `CONSUMER_PUBLICATION_DECISION_CONTRACT` | constant: const CONSUMER_PUBLICATION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { CONSUMER_PUBLICATION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:20` |\n| `createConsumerPublicationDecision` | function: function createConsumerPublicationDecision({ capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {}) | { capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createConsumerPublicationDecision } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:991` |\n| `createPublicationAdmission` | function: function createPublicationAdmission(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationAdmission } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:236` |\n| `createPublicationArtifactManifestSet` | function: function createPublicationArtifactManifestSet({ repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {}) | { repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactManifestSet } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:303` |\n| `createPublicationAuthorityRegistry` | function: function createPublicationAuthorityRegistry({ descriptors = [], workflows = [] } = {}) | { descriptors = [], workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:121` |\n| `createPublicationControlPlaneAudit` | function: function createPublicationControlPlaneAudit({ repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationControlPlaneAudit } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:208` |\n| `createPublicationGateDecision` | function: function createPublicationGateDecision({ sourceSha, profile, required = false, rationale, policy = {}, } = {}) | { sourceSha, profile, required = false, rationale, policy = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationGateDecision } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:280` |\n| `createPublicationQualificationReceipt` | function: function createPublicationQualificationReceipt({ capability, gateAggregate, consumerDecision, now = new Date(), } = {}) | { capability, gateAggregate, consumerDecision, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationQualificationReceipt } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:1035` |\n| `createRunnerProvenance` | function: function createRunnerProvenance({ runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {}) | { runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createRunnerProvenance } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:166` |\n| `detectPublicationAuthoritySignals` | function: function detectPublicationAuthoritySignals(workflowText = \"\") | workflowText = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectPublicationAuthoritySignals } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:104` |\n| `PUBLICATION_ADMISSION_CONTRACT` | constant: const PUBLICATION_ADMISSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ADMISSION_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:10` |\n| `PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:24` |\n| `PUBLICATION_AUTHORITY_CLASSES` | constant: const PUBLICATION_AUTHORITY_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_CLASSES } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:27` |\n| `PUBLICATION_AUTHORITY_REGISTRY_CONTRACT` | constant: const PUBLICATION_AUTHORITY_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:8` |\n| `PUBLICATION_CAPABILITY_CONTRACT` | constant: const PUBLICATION_CAPABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CAPABILITY_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:12` |\n| `PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT` | constant: const PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:16` |\n| `PUBLICATION_GATE_DECISION_CONTRACT` | constant: const PUBLICATION_GATE_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_GATE_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:18` |\n| `PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT` | constant: const PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:22` |\n| `publicationAuthorityDigest` | function: function publicationAuthorityDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationAuthorityDigest } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:72` |\n| `publicationGateAggregateBindings` | function: function publicationGateAggregateBindings(gateAggregate) | gateAggregate | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationGateAggregateBindings } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:408` |\n| `RUNNER_PROVENANCE_CLASSES` | constant: const RUNNER_PROVENANCE_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CLASSES } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:36` |\n| `RUNNER_PROVENANCE_CONTRACT` | constant: const RUNNER_PROVENANCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:14` |\n| `verifyPublicationAdmission` | function: function verifyPublicationAdmission({ admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {}) | { admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationAdmission } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:791` |\n| `verifyPublicationQualificationReceipt` | function: function verifyPublicationQualificationReceipt({ receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {}) | { receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationQualificationReceipt } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:1096` |\n\n## `@kungfu-tech/buildchain/publication-control-plane-audit`\n\nTarget: `./packages/core/publication-control-plane-audit.js`. Public symbols: 4.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_RELEASE_RECONCILIATION_PATHS` | constant: const BUILDCHAIN_RELEASE_RECONCILIATION_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RELEASE_RECONCILIATION_PATHS } from \"@kungfu-tech/buildchain/publication-control-plane-audit\";` | `packages/core/publication-control-plane-audit.js:3` |\n| `evaluateBuildchainReleaseReconciliation` | function: function evaluateBuildchainReleaseReconciliation({ repository, publicationVersion, packageVersion, message, parentSha, changedPaths, } = {}) | { repository, publicationVersion, packageVersion, message, parentSha, changedPaths, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateBuildchainReleaseReconciliation } from \"@kungfu-tech/buildchain/publication-control-plane-audit\";` | `packages/core/publication-control-plane-audit.js:41` |\n| `evaluatePublicationControlPlaneSnapshot` | function: function evaluatePublicationControlPlaneSnapshot({ repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluatePublicationControlPlaneSnapshot } from \"@kungfu-tech/buildchain/publication-control-plane-audit\";` | `packages/core/publication-control-plane-audit.js:75` |\n| `matchesGithubDeploymentPolicy` | function: function matchesGithubDeploymentPolicy(policy, { ref, refType = \"branch\" } = {}) | policy, { ref, refType = \"branch\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { matchesGithubDeploymentPolicy } from \"@kungfu-tech/buildchain/publication-control-plane-audit\";` | `packages/core/publication-control-plane-audit.js:31` |\n\n## `@kungfu-tech/buildchain/buildchain-publication-authority`\n\nTarget: `./packages/core/buildchain-publication-authority.js`. Public symbols: 2.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `buildchainPublicationAuthorityDescriptors` | function: function buildchainPublicationAuthorityDescriptors() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildchainPublicationAuthorityDescriptors } from \"@kungfu-tech/buildchain/buildchain-publication-authority\";` | `packages/core/buildchain-publication-authority.js:51` |\n| `createBuildchainPublicationAuthorityRegistry` | function: function createBuildchainPublicationAuthorityRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain/buildchain-publication-authority\";` | `packages/core/buildchain-publication-authority.js:76` |\n\n## `@kungfu-tech/buildchain/github-governance-authority`\n\nTarget: `./packages/core/github-governance-authority.js`. Public symbols: 22.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1363` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1365` |\n| `codeownersForPath` | function: function codeownersForPath(source, candidatePath) | source, candidatePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { codeownersForPath } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:417` |\n| `compileEffectiveGithubGovernancePolicy` | function: function compileEffectiveGithubGovernancePolicy({ branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {}) | { branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileEffectiveGithubGovernancePolicy } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:311` |\n| `createBuildchainGithubGovernanceAuthority` | function: function createBuildchainGithubGovernanceAuthority() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainGithubGovernanceAuthority } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:450` |\n| `createGithubGovernanceRolloutPlan` | function: function createGithubGovernanceRolloutPlan({ repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {}) | { repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubGovernanceRolloutPlan } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:932` |\n| `createGithubRulesetBypassRolloutPlan` | function: function createGithubRulesetBypassRolloutPlan({ repository, rulesetId, inventory, rollbackSnapshot, } = {}) | { repository, rulesetId, inventory, rollbackSnapshot, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetBypassRolloutPlan } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1110` |\n| `createGithubRulesetGovernanceRolloutPlan` | function: function createGithubRulesetGovernanceRolloutPlan({ repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {}) | { repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetGovernanceRolloutPlan } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1189` |\n| `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:425` |\n| `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:694` |\n| `GITHUB_GOVERNANCE_AUTHORITY_CONTRACT` | constant: const GITHUB_GOVERNANCE_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:3` |\n| `GITHUB_GOVERNANCE_RECEIPT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:5` |\n| `GITHUB_GOVERNANCE_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:7` |\n| `GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:9` |\n| `githubGovernanceDigest` | function: function githubGovernanceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubGovernanceDigest } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:163` |\n| `githubRepositoryIdentityRoot` | function: function githubRepositoryIdentityRoot({ provider = \"github\", providerRepositoryId, } = {}) | { provider = \"github\", providerRepositoryId, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubRepositoryIdentityRoot } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:540` |\n| `normalizeGithubBranchProtectionSnapshot` | function: function normalizeGithubBranchProtectionSnapshot(protection = {}) | protection = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubBranchProtectionSnapshot } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1025` |\n| `normalizeGithubRulesetSnapshot` | function: function normalizeGithubRulesetSnapshot(ruleset = {}) | ruleset = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubRulesetSnapshot } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1095` |\n| `parseCodeowners` | function: function parseCodeowners(source) | source | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseCodeowners } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:401` |\n| `resolveGithubGovernanceTargetPolicy` | function: function resolveGithubGovernanceTargetPolicy({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetPolicy } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:607` |\n| `resolveGithubGovernanceTargetRefs` | function: function resolveGithubGovernanceTargetRefs({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, availableRefs = [], requestedTargetRef = \"\", } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, availableRefs = [], requestedTargetRef = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetRefs } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:630` |\n| `verifyGithubGovernanceReceipt` | function: function verifyGithubGovernanceReceipt(receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {}) | receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGithubGovernanceReceipt } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:884` |\n\n## `@kungfu-tech/buildchain/kfd-gate`\n\nTarget: `./packages/core/kfd-gate.js`. Public symbols: 19.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_JSON_FORMATTING_POLICY` | constant: const BUILDCHAIN_JSON_FORMATTING_POLICY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_JSON_FORMATTING_POLICY } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:14` |\n| `createKfd1ReleaseGateEvidence` | function: function createKfd1ReleaseGateEvidence({ cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {}) | { cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:977` |\n| `createKfd3CollaborationInterfaceReleaseGateEvidence` | function: function createKfd3CollaborationInterfaceReleaseGateEvidence({ prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {}) | { prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:1132` |\n| `KFD1_RELEASE_GATE_CONTRACT` | constant: const KFD1_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:9` |\n| `KFD1_WITNESS_SET_CONTRACT` | constant: const KFD1_WITNESS_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_WITNESS_SET_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:10` |\n| `KFD3_ARTIFACT_WITNESS_CONTRACT` | constant: const KFD3_ARTIFACT_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_ARTIFACT_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:13` |\n| `KFD3_PREBUILD_WITNESS_CONTRACT` | constant: const KFD3_PREBUILD_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_PREBUILD_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:12` |\n| `KFD3_RELEASE_GATE_CONTRACT` | constant: const KFD3_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:11` |\n| `normalizeKfd1ContractWorldWitness` | function: function normalizeKfd1ContractWorldWitness(witness, { metadata = resolveKfd1Metadata() } = {}) | witness, { metadata = resolveKfd1Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd1ContractWorldWitness } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:897` |\n| `normalizeKfd3CollaborationInterfaceArtifactWitness` | function: function normalizeKfd3CollaborationInterfaceArtifactWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfaceArtifactWitness } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:738` |\n| `normalizeKfd3CollaborationInterfacePrebuildWitness` | function: function normalizeKfd3CollaborationInterfacePrebuildWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfacePrebuildWitness } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:667` |\n| `resolveKfd1Metadata` | function: function resolveKfd1Metadata() | none | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd1Metadata } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:89` |\n| `resolveKfd2Metadata` | function: function resolveKfd2Metadata({ requireTrustTaxonomy = false } = {}) | { requireTrustTaxonomy = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd2Metadata } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:173` |\n| `resolveKfd3Metadata` | function: function resolveKfd3Metadata({ requireSchemas = false } = {}) | { requireSchemas = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd3Metadata } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:128` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256File } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:54` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:50` |\n| `validateKfd1ReleaseGateEvidence` | function: function validateKfd1ReleaseGateEvidence(section, { metadata = resolveKfd1Metadata() } = {}) | section, { metadata = resolveKfd1Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:1337` |\n| `validateKfd2TrustTaxonomyEntry` | function: function validateKfd2TrustTaxonomyEntry(entry, { kind = \"residualRisk\", label = kind, metadata = resolveKfd2Metadata({ requireTrustTaxonomy: true }), extensionRequests = [], } = {}) | entry, { kind = \"residualRisk\", label = kind, metadata = resolveKfd2Metadata({ requireTrustTaxonomy: true }), extensionRequests = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateKfd2TrustTaxonomyEntry } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:506` |\n| `validateKfd3CollaborationInterfaceReleaseGateEvidence` | function: function validateKfd3CollaborationInterfaceReleaseGateEvidence(section, { metadata = resolveKfd3Metadata() } = {}) | section, { metadata = resolveKfd3Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:1470` |\n\n## `@kungfu-tech/buildchain/release-candidate`\n\nTarget: `./packages/core/release-candidate.js`. Public symbols: 5.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createReleaseCandidatePassport` | function: function createReleaseCandidatePassport({ repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {}) | { repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCandidatePassport } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:310` |\n| `FAMILY_RELEASE_EVIDENCE_CONTRACT` | constant: const FAMILY_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { FAMILY_RELEASE_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:5` |\n| `RELEASE_CANDIDATE_PASSPORT_CONTRACT` | constant: const RELEASE_CANDIDATE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CANDIDATE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:4` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:90` |\n| `validateReleaseCandidatePassport` | function: function validateReleaseCandidatePassport({ passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {}) | { passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseCandidatePassport } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:404` |\n\n## `@kungfu-tech/buildchain/stable-candidate-ledger`\n\nTarget: `./packages/core/stable-candidate-ledger.js`. Public symbols: 11.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createStableCandidateLedger` | function: function createStableCandidateLedger({ repository, targetBranch, now = new Date().toISOString() } = {}) | { repository, targetBranch, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createStableCandidateLedger } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:56` |\n| `markStableCandidatePromoted` | function: function markStableCandidatePromoted(ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { markStableCandidatePromoted } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:229` |\n| `normalizeStableCandidateLedger` | function: function normalizeStableCandidateLedger(input, expected = {}) | input, expected = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeStableCandidateLedger } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:76` |\n| `qualifyStableCandidate` | function: function qualifyStableCandidate(ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {}) | ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { qualifyStableCandidate } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:139` |\n| `registerStableCandidate` | function: function registerStableCandidate(ledgerInput, candidateInput, { now = new Date().toISOString() } = {}) | ledgerInput, candidateInput, { now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { registerStableCandidate } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:106` |\n| `revokeStableCandidate` | function: function revokeStableCandidate(ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { revokeStableCandidate } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:185` |\n| `selectStableCandidate` | function: function selectStableCandidate(ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {}) | ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { selectStableCandidate } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:206` |\n| `setStableCandidateHold` | function: function setStableCandidateHold(ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {}) | ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { setStableCandidateHold } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:198` |\n| `STABLE_CANDIDATE_LEDGER_CONTRACT` | constant: const STABLE_CANDIDATE_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:1` |\n| `STABLE_CANDIDATE_STATES` | constant: const STABLE_CANDIDATE_STATES | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_STATES } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:2` |\n| `stableCandidatePromotionRefs` | function: function stableCandidatePromotionRefs(candidateInput, targetBranch) | candidateInput, targetBranch | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { stableCandidatePromotionRefs } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:264` |\n\n## `@kungfu-tech/buildchain/release-passport`\n\nTarget: `./packages/core/release-passport.js`. Public symbols: 23.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `AGENT_INDEX_CONTRACT` | constant: const AGENT_INDEX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { AGENT_INDEX_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:31` |\n| `ARTIFACT_EVIDENCE_CONTRACT` | constant: const ARTIFACT_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:29` |\n| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {}) | { cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectGitHubReleasePassport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:1488` |\n| `createArtifactEvidence` | function: function createArtifactEvidence({ assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {}) | { assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createArtifactEvidence } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:1158` |\n| `createInvariantPassportGate` | function: function createInvariantPassportGate(passportMetas = []) | passportMetas = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createInvariantPassportGate } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:201` |\n| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2628` |\n| `createReleasePassport` | function: function createReleasePassport({ cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {}) | { cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePassport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:1214` |\n| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = \"human\" } = {}) | { passportLocation, forAudience = \"human\" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2812` |\n| `IMPACT_LEDGER_CONTRACT` | constant: const IMPACT_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { IMPACT_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:30` |\n| `INVARIANT_PASSPORT_GATE_CONTRACT` | constant: const INVARIANT_PASSPORT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { INVARIANT_PASSPORT_GATE_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:37` |\n| `KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT` | constant: const KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:38` |\n| `KFD2_RELEASE_TRUST_PASSPORT_CONTRACT` | constant: const KFD2_RELEASE_TRUST_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_RELEASE_TRUST_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:35` |\n| `KFD2_TRUST_PROOF_CONTRACT` | constant: const KFD2_TRUST_PROOF_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_TRUST_PROOF_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:36` |\n| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2841` |\n| `PRODUCT_MECHANISM_CONTRACT` | constant: const PRODUCT_MECHANISM_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PRODUCT_MECHANISM_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:32` |\n| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2694` |\n| `RELEASE_CHECK_REPORT_CONTRACT` | constant: const RELEASE_CHECK_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CHECK_REPORT_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:33` |\n| `RELEASE_EVIDENCE_ATTACHMENT_CONTRACT` | constant: const RELEASE_EVIDENCE_ATTACHMENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:34` |\n| `RELEASE_PASSPORT_CONTRACT` | constant: const RELEASE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:28` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write, subprocess | `import { sha256File } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:216` |\n| `sha256Text` | function: function sha256Text(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Text } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:138` |\n| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2853` |\n| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2743` |\n\n## `@kungfu-tech/buildchain/release-passport-contract`\n\nTarget: `./packages/core/release-passport-contract.js`. Public symbols: 5.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createReleasePassportCheckManifest` | function: function createReleasePassportCheckManifest({ standards = kfdStandards } = {}) | { standards = kfdStandards } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePassportCheckManifest } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:147` |\n| `RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT` | constant: const RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:9` |\n| `RELEASE_PASSPORT_SCHEMA` | constant: const RELEASE_PASSPORT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:16` |\n| `RELEASE_PASSPORT_SCHEMA_ID` | constant: const RELEASE_PASSPORT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA_ID } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:7` |\n| `validateReleasePassportSchema` | function: function validateReleasePassportSchema(passport) | passport | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleasePassportSchema } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:256` |\n\n## `@kungfu-tech/buildchain/release-propagation`\n\nTarget: `./packages/core/release-propagation.js`. Public symbols: 22.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `claimReleasePropagationWork` | function: function claimReleasePropagationWork({ work, expectedWorkRoot, authority, familyState, } = {}) | { work, expectedWorkRoot, authority, familyState, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { claimReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-transitions.js:17` |\n| `completeReleasePropagationWork` | function: function completeReleasePropagationWork({ work, expectedWorkRoot, receipt, completionDecision, } = {}) | { work, expectedWorkRoot, receipt, completionDecision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { completeReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-transitions.js:110` |\n| `createReleasePropagationLock` | function: function createReleasePropagationLock({ graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {}) | { graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationLock } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:199` |\n| `createReleasePropagationReceipt` | function: function createReleasePropagationReceipt({ plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {}) | { plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationReceipt } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:370` |\n| `createReleasePropagationStageReceipt` | function: function createReleasePropagationStageReceipt({ work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {}) | { work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationStageReceipt } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work.js:214` |\n| `createReleasePropagationWork` | function: function createReleasePropagationWork({ plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {}) | { plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work.js:111` |\n| `normalizeReleasePropagationGraph` | function: function normalizeReleasePropagationGraph(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeReleasePropagationGraph } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:163` |\n| `planReleasePropagation` | function: function planReleasePropagation({ graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {}) | { graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planReleasePropagation } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:248` |\n| `readReleasePropagationJson` | function: function readReleasePropagationJson(value, { cwd = process.cwd(), label = \"json\" } = {}) | value, { cwd = process.cwd(), label = \"json\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readReleasePropagationJson } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:304` |\n| `recordReleasePropagationStage` | function: function recordReleasePropagationStage({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleasePropagationStage } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-transitions.js:45` |\n| `RELEASE_PROPAGATION_GRAPH_CONTRACT` | constant: const RELEASE_PROPAGATION_GRAPH_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_GRAPH_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:15` |\n| `RELEASE_PROPAGATION_LOCK_CONTRACT` | constant: const RELEASE_PROPAGATION_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_LOCK_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:17` |\n| `RELEASE_PROPAGATION_PLAN_CONTRACT` | value: RELEASE_PROPAGATION_PLAN_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_PROPAGATION_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:1` |\n| `RELEASE_PROPAGATION_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:18` |\n| `RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-constants.js:2` |\n| `RELEASE_PROPAGATION_WORK_CONTRACT` | constant: const RELEASE_PROPAGATION_WORK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-constants.js:1` |\n| `RELEASE_PROPAGATION_WORK_STAGES` | constant: const RELEASE_PROPAGATION_WORK_STAGES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_STAGES } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-constants.js:4` |\n| `repairReleasePropagationWork` | function: function repairReleasePropagationWork({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { repairReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-transitions.js:88` |\n| `resolvePropagationChannel` | function: function resolvePropagationChannel(edge, upstreamChannel) | edge, upstreamChannel | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePropagationChannel } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:190` |\n| `resumeReleasePropagationWork` | function: function resumeReleasePropagationWork(work) | work | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resumeReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work.js:514` |\n| `verifyReleasePropagationWork` | function: function verifyReleasePropagationWork(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work.js:482` |\n| `writeReleasePropagationLock` | function: function writeReleasePropagationLock({ plan, target = \"\", cwd = process.cwd(), output = \"\" } = {}) | { plan, target = \"\", cwd = process.cwd(), output = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleasePropagationLock } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:316` |\n\n## `@kungfu-tech/buildchain/release-activation-transaction`\n\nTarget: `./packages/core/release-activation-transaction.js`. Public symbols: 11.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `abortReleaseActivationTransaction` | function: function abortReleaseActivationTransaction(transaction, reason) | transaction, reason | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { abortReleaseActivationTransaction } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:277` |\n| `createReleaseActivationReceiptSet` | function: function createReleaseActivationReceiptSet({ transaction, receipts = [], } = {}) | { transaction, receipts = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:311` |\n| `createReleaseActivationTransaction` | function: function createReleaseActivationTransaction({ transactionId, mode = \"shadow\", bindings, owners, } = {}) | { transactionId, mode = \"shadow\", bindings, owners, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationTransaction } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:103` |\n| `recordReleaseActivationPhase` | function: function recordReleaseActivationPhase(transaction, phaseId, { receiptRoots = [], failure = \"\" } = {}) | transaction, phaseId, { receiptRoots = [], failure = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleaseActivationPhase } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:217` |\n| `RELEASE_ACTIVATION_CONTRACT` | constant: const RELEASE_ACTIVATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_CONTRACT } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:3` |\n| `RELEASE_ACTIVATION_PHASES` | constant: const RELEASE_ACTIVATION_PHASES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_PHASES } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:8` |\n| `RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT` | constant: const RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:5` |\n| `releaseActivationRoot` | function: function releaseActivationRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { releaseActivationRoot } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:38` |\n| `rollbackReleaseActivationTransaction` | function: function rollbackReleaseActivationTransaction(transaction, { toSiteSourceSha, reason } = {}) | transaction, { toSiteSourceSha, reason } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { rollbackReleaseActivationTransaction } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:290` |\n| `validateReleaseActivationReceiptSet` | function: function validateReleaseActivationReceiptSet(receiptSet, { allowShadow = true } = {}) | receiptSet, { allowShadow = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:376` |\n| `validateReleaseActivationTransaction` | function: function validateReleaseActivationTransaction(transaction) | transaction | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationTransaction } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:146` |\n\n## `@kungfu-tech/buildchain/surface-manifest`\n\nTarget: `./packages/core/surface-manifest.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `applySurfaceTimestampPolicy` | function: function applySurfaceTimestampPolicy(manifest, options = {}) | manifest, options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { applySurfaceTimestampPolicy } from \"@kungfu-tech/buildchain/surface-manifest\";` | `packages/core/surface-manifest.js:79` |\n| `createSurfaceTimestampPolicy` | function: function createSurfaceTimestampPolicy({ generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {}) | { generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createSurfaceTimestampPolicy } from \"@kungfu-tech/buildchain/surface-manifest\";` | `packages/core/surface-manifest.js:34` |\n| `SURFACE_TIMESTAMP_POLICY_CONTRACT` | constant: const SURFACE_TIMESTAMP_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { SURFACE_TIMESTAMP_POLICY_CONTRACT } from \"@kungfu-tech/buildchain/surface-manifest\";` | `packages/core/surface-manifest.js:1` |\n\n## `@kungfu-tech/buildchain/buildchain-kfd-claims`\n\nTarget: `./packages/core/buildchain-kfd-claims.js`. Public symbols: 10.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_AGENT_MANUALS` | constant: const BUILDCHAIN_AGENT_MANUALS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_AGENT_MANUALS } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-agent-manuals.js:1` |\n| `BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:14` |\n| `BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT` | constant: const BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:15` |\n| `createBuildchainKfd1Witness` | function: function createBuildchainKfd1Witness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd1Witness } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:530` |\n| `createBuildchainKfd2Claims` | function: function createBuildchainKfd2Claims({ root = process.cwd(), witnessFiles = {} } = {}) | { root = process.cwd(), witnessFiles = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd2Claims } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:687` |\n| `createBuildchainKfd3ArtifactWitness` | function: function createBuildchainKfd3ArtifactWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3ArtifactWitness } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:647` |\n| `createBuildchainKfd3PrebuildWitness` | function: function createBuildchainKfd3PrebuildWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3PrebuildWitness } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:583` |\n| `createBuildchainKfdClaimRegistry` | function: function createBuildchainKfdClaimRegistry({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdClaimRegistry } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:510` |\n| `createBuildchainKfdSurfaceRegistry` | function: function createBuildchainKfdSurfaceRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdSurfaceRegistry } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:411` |\n| `createBuildchainPublicClaimDefinitions` | function: function createBuildchainPublicClaimDefinitions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicClaimDefinitions } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:226` |"
+    },
     {
       "id": "manual:observed-evidence-patrol",
       "title": "Observed Evidence Patrol",
@@ -2252,7 +3629,7 @@
       ],
       "maturity": "stable",
       "sourcePath": "docs/site-bundle-contract.md",
-      "digest": "sha256:40831ce35dca6ac2a3a81d54a83fb0e5ab064137829a4f7844e5d80ba61aa65c",
+      "digest": "sha256:36a4e60e91f500ea1dcdbef97cd0250a2c26562b98d8d3622e8e0f9df2aad23b",
       "headings": [
         {
           "level": 1,
@@ -2290,7 +3667,7 @@
           "anchor": "rendering-boundary"
         }
       ],
-      "markdown": "# Site Bundle Contract\n\n`@kungfu-tech/buildchain` publishes `dist/site/` as the package-owned fact\nsource for `buildchain.libkungfu.dev` and other documentation surfaces.\n\nThe website may design navigation, visual hierarchy, examples, and explanatory\ncopy around these facts. It should not hand-write the current Buildchain\nrelease mechanics, command registry, workflow registry, or artifact schema.\n\n## Files\n\n```text\ndist/site/\n  buildchain-site.json\n  site-manifest.json\n  publication-registry.json\n  capability-registry.json\n  cli-registry.json\n  manual-registry.json\n  node-api-registry.json\n  workflow-registry.json\n  public-surface-audit.json\n  release-model.json\n  artifact-schemas.json\n  buildchain-contract.json\n  kfd-claims.json\n  product-mechanism.json\n  release-provenance.json\n  agent-index.json\n```\n\n`buildchain-site.json` is the top-level bundle entrypoint.\nIt includes a `homepage` object generated from `README.md`, including\n`homepage.sections`, `homepage.displayPlan`, and a\n`homepage.rendererContract` that is implementation metadata rather than\nordinary homepage copy. Site repositories should consume those fields instead\nof parsing `README.md` themselves.\nWhen the README intro starts with the managed Buildchain badge block,\n`homepage.lead` contains that complete marker-delimited block and\n`homepage.mechanismSummary` starts with prose after the block. A renderer must\nnot repair or recombine split badge fragments.\nIt also includes a `pages` collection that mirrors `page-registry.json`, so a\nsite repository can build the full Buildchain public documentation surface from\nthe npm package without scanning the source checkout.\n`capability-registry.json` is the navigation spine for that page surface. It\ngroups manuals, pages, CLI commands, workflows, actions, Node API exports, and\nKFD claim facts into stable product capability groups. Site repositories should\nrender navigation from this registry first, then use `page-registry.json`,\n`manual-registry.json`, `cli-registry.json`, `node-api-registry.json`, and\n`workflow-registry.json` for the concrete entries inside each group.\n`page-registry.json` is the complete page fact source: README homepage content,\nall packaged `docs/*.md` manuals, action README files, the Node API package\noverview, and fixture guides.\n`buildchain-contract.json` is the machine-readable Buildchain runtime contract\nworld used by floating-ref contract locks. It records public workflow/action/CLI\nsurfaces, compatibility digests, and audit digests for the files that implement\nthose surfaces.\n`manual-registry.json` enumerates the packaged Markdown manuals with source\ndigests so an agent can find complete operating documentation from the npm\nartifact. `node-api-registry.json` enumerates public Node import surfaces from\n`package.json#exports`, so agents do not have to infer supported APIs from\ninternal paths.\n`kfd-claims.json` is the Buildchain-owned KFD claim registry. It is generated\nfrom `packages/core/buildchain-kfd-claims.js` and enumerates the public release\nclaims plus the KFD-3 collaboration surfaces that Buildchain self-verifies\nduring release promotion.\n`public-surface-audit.json` is the reverse enumeration report for those\nsurfaces. It enumerates real CLI commands from `bin/buildchain.mjs`, workflow\ninputs, action inputs, site pages, and documentation command references, then\ncompares those sets with `cli-registry.json`, `workflow-registry.json`, and\n`page-registry.json`. Buildchain's self-check fails closed when an enumerable\npublic surface is missing from the generated registries.\n`publication-registry.json` is the package-owned publication archive registry\nfor downstream papers surfaces. Site repositories can render latest reader\nroutes, immutable version artifact routes, source bundles, and publication\npassport links from this file instead of keeping their own fixture registry.\n\n## Timestamp and Reproducibility Policy\n\nEvery Buildchain-owned surface manifest uses the same timestamp policy fields:\n\n- `generatedAt`: when the manifest JSON was generated.\n- `publishedAt`: when the surface was published, when known.\n- `reproducible`: whether the manifest declares its reproducibility inputs.\n- `timestampPolicy`: `ci-injected` for release/workflow-generated public\n  artifacts, or `source-date-epoch` for local deterministic source checks.\n- `deterministicInputs`: the source files, revisions, package metadata, and\n  declared Buildchain contracts that determine the manifest bytes.\n- `sourceDateEpoch` / `sourceRevision`: the deterministic time input or source\n  revision used to reproduce the manifest.\n- `timestampPolicyDetails.timestampFieldsParticipateInArtifactDigest`: whether\n  timestamp fields are included in the artifact digest being audited.\n\nThe policy is defined by `@kungfu-tech/buildchain/surface-manifest` and applies\nto the root site bundle, `site-manifest.json`, and web-surface deployment\nmanifests for named surfaces such as KFD, Buildchain, and Core. Site\nrepositories should render these fields; they should not invent their own\nmanifest time semantics.\n\nSource checkouts may use `SOURCE_DATE_EPOCH` for deterministic local checks.\nPublished CI/release artifacts should inject real timestamps with\n`BUILDCHAIN_SITE_GENERATED_AT` / `BUILDCHAIN_SITE_PUBLISHED_AT` or the matching\n`BUILDCHAIN_SURFACE_*` variables, so public manifests do not expose epoch time\nas if it were a real metadata time.\n\nVersion-state branches may already contain a generated manifest for the current\npackage version with `timestampPolicy: ci-injected`. In that case\n`generate-site-bundle.mjs --check` preserves the existing timestamp policy as\nthe deterministic input instead of rewriting public release metadata back to\nepoch time.\n\n## npm Consumption\n\n```bash\nnpm install @kungfu-tech/buildchain\n```\n\nThen read files from:\n\n```text\nnode_modules/@kungfu-tech/buildchain/dist/site/\n```\n\nPackage exports are also provided for direct JSON-aware consumers:\n\n```js\nimport siteManifest from \"@kungfu-tech/buildchain/site/site-manifest.json\" with { type: \"json\" };\n```\n\n## Generation\n\n```bash\npnpm run generate:site\npnpm run check:site\n```\n\n`check:site` fails when generated files are stale. `pnpm run check` includes\nthis gate, so release candidates cannot publish an out-of-date site bundle.\n\n## Scope\n\nThe P0 bundle includes:\n\n- README-derived homepage fields and display plan;\n- capability-grouped navigation facts for docs, CLI, Node API, workflows,\n  actions, and KFD claims;\n- complete markdown page registry for public Buildchain docs, action manuals,\n  Node API overview, and fixtures;\n- site manifest;\n- publication archive registry for downstream papers surfaces;\n- CLI command registry;\n- manual registry for packaged agent-facing documentation;\n- Node API registry for public package exports;\n- workflow/action registry;\n- release model facts;\n- artifact and evidence schema index;\n- Buildchain runtime contract world for `@v3` floating-ref compatibility checks,\n  KFD-1/KFD-2/KFD-3 release gates, GitHub Release evidence publication, and\n  site-consumption contracts;\n- Buildchain KFD claim registry for release-passport self verification and\n  agent-first public claim discovery;\n- product mechanism manifest;\n- release provenance;\n- agent read order.\n\nFuture minor lines can add examples, recipes, fixture indexes, and richer\nschema metadata without breaking existing consumers.\n\n`release-propagation.md` describes the package-to-package or package-to-site\nrelease chain model. The site bundle exposes that document and the\n`release-propagation` CLI entry so downstream sites can render the current\nBuildchain-owned propagation contract instead of hand-writing it.\n`publication-registry.json` is the static site-consumption entrypoint for\npublication archive pages. It uses the\n`kungfu-buildchain-publication-release-registry` contract and declares the\nmutable latest/canonical routes separately from append-only immutable version\nprefixes.\n\n## Rendering Boundary\n\nBuildchain owns the homepage wording, section ordering intent, complete\nmarkdown page registry, release model facts, workflow/action registry, CLI\nregistry, manual registry, Node API registry, KFD claim registry, and\nrelease-passport evidence vocabulary. The site owns HTML, CSS, responsive\nlayout, navigation, visual assets, decorative media, markdown-to-HTML rendering,\nand progressive disclosure within the Buildchain-provided\n`homepage.displayPlan` and page metadata.\n\nThe page registry is also part of Buildchain's KFD-3 collaboration-interface\nsurface. Releases declare it as a site-consumption contract, and Buildchain's\nKFD-3 witness generation includes the underlying markdown sources as public\ndocumentation surfaces. If a page is public enough for the site to render, it\nmust be declared and hash-bound in the package-owned site bundle."
+      "markdown": "# Site Bundle Contract\n\n`@kungfu-tech/buildchain` publishes `dist/site/` as the package-owned fact\nsource for `buildchain.libkungfu.dev` and other documentation surfaces.\n\nThe website may design navigation, visual hierarchy, examples, and explanatory\ncopy around these facts. It should not hand-write the current Buildchain\nrelease mechanics, command registry, workflow registry, or artifact schema.\n\n## Files\n\n```text\ndist/site/\n  buildchain-site.json\n  site-manifest.json\n  publication-registry.json\n  capability-registry.json\n  cli-registry.json\n  manual-registry.json\n  node-api-registry.json\n  workflow-registry.json\n  public-surface-audit.json\n  release-model.json\n  artifact-schemas.json\n  buildchain-contract.json\n  kfd-claims.json\n  product-mechanism.json\n  release-provenance.json\n  agent-index.json\n```\n\n`buildchain-site.json` is the top-level bundle entrypoint.\nIt includes a `homepage` object generated from `README.md`, including\n`homepage.sections`, `homepage.displayPlan`, and a\n`homepage.rendererContract` that is implementation metadata rather than\nordinary homepage copy. Site repositories should consume those fields instead\nof parsing `README.md` themselves.\nWhen the README intro starts with the managed Buildchain badge block,\n`homepage.lead` contains that complete marker-delimited block and\n`homepage.mechanismSummary` starts with prose after the block. A renderer must\nnot repair or recombine split badge fragments.\nIt also includes a `pages` collection that mirrors `page-registry.json`, so a\nsite repository can build the full Buildchain public documentation surface from\nthe npm package without scanning the source checkout.\n`capability-registry.json` is the navigation spine for that page surface. It\ngroups manuals, pages, CLI commands, workflows, actions, Node API exports, and\nKFD claim facts into stable product capability groups. Site repositories should\nrender navigation from this registry first, then use `page-registry.json`,\n`manual-registry.json`, `cli-registry.json`, `node-api-registry.json`, and\n`workflow-registry.json` for the concrete entries inside each group.\n`page-registry.json` is the complete page fact source: README homepage content,\nall packaged `docs/*.md` manuals, action README files, the Node API package\noverview, and fixture guides.\n`buildchain-contract.json` is the machine-readable Buildchain runtime contract\nworld used by floating-ref contract locks. It records public workflow/action/CLI\nsurfaces, compatibility digests, and audit digests for the files that implement\nthose surfaces.\n`manual-registry.json` enumerates the packaged Markdown manuals with source\ndigests so an agent can find complete operating documentation from the npm\nartifact. `node-api-registry.json` enumerates public Node import surfaces from\n`package.json#exports` and closes each JavaScript subpath over its exact exported\nsymbols. Each symbol includes its source-derived signature and parameters,\nconservative return/error contract, detected side effects, maturity, example\nimport, and source location, so agents do not have to infer supported APIs from\ninternal paths. `cli-registry.json` similarly retains every governed command\npath, syntax, option, alias, and side-effect-free help command projected from\nthe runtime registry and usage authority.\n`kfd-claims.json` is the Buildchain-owned KFD claim registry. It is generated\nfrom `packages/core/buildchain-kfd-claims.js` and enumerates the public release\nclaims plus the KFD-3 collaboration surfaces that Buildchain self-verifies\nduring release promotion.\n`public-surface-audit.json` is the reverse enumeration report for those\nsurfaces. It enumerates real CLI commands from `bin/buildchain.mjs`, workflow\ninputs, action inputs, site pages, and documentation command references, then\ncompares those sets with `cli-registry.json`, `workflow-registry.json`, and\n`page-registry.json`. Buildchain's self-check fails closed when an enumerable\npublic surface is missing from the generated registries.\n`publication-registry.json` is the package-owned publication archive registry\nfor downstream papers surfaces. Site repositories can render latest reader\nroutes, immutable version artifact routes, source bundles, and publication\npassport links from this file instead of keeping their own fixture registry.\n\n## Timestamp and Reproducibility Policy\n\nEvery Buildchain-owned surface manifest uses the same timestamp policy fields:\n\n- `generatedAt`: when the manifest JSON was generated.\n- `publishedAt`: when the surface was published, when known.\n- `reproducible`: whether the manifest declares its reproducibility inputs.\n- `timestampPolicy`: `ci-injected` for release/workflow-generated public\n  artifacts, or `source-date-epoch` for local deterministic source checks.\n- `deterministicInputs`: the source files, revisions, package metadata, and\n  declared Buildchain contracts that determine the manifest bytes.\n- `sourceDateEpoch` / `sourceRevision`: the deterministic time input or source\n  revision used to reproduce the manifest.\n- `timestampPolicyDetails.timestampFieldsParticipateInArtifactDigest`: whether\n  timestamp fields are included in the artifact digest being audited.\n\nThe policy is defined by `@kungfu-tech/buildchain/surface-manifest` and applies\nto the root site bundle, `site-manifest.json`, and web-surface deployment\nmanifests for named surfaces such as KFD, Buildchain, and Core. Site\nrepositories should render these fields; they should not invent their own\nmanifest time semantics.\n\nSource checkouts may use `SOURCE_DATE_EPOCH` for deterministic local checks.\nPublished CI/release artifacts should inject real timestamps with\n`BUILDCHAIN_SITE_GENERATED_AT` / `BUILDCHAIN_SITE_PUBLISHED_AT` or the matching\n`BUILDCHAIN_SURFACE_*` variables, so public manifests do not expose epoch time\nas if it were a real metadata time.\n\nVersion-state branches may already contain a generated manifest for the current\npackage version with `timestampPolicy: ci-injected`. In that case\n`generate-site-bundle.mjs --check` preserves the existing timestamp policy as\nthe deterministic input instead of rewriting public release metadata back to\nepoch time.\n\n## npm Consumption\n\n```bash\nnpm install @kungfu-tech/buildchain\n```\n\nThen read files from:\n\n```text\nnode_modules/@kungfu-tech/buildchain/dist/site/\n```\n\nPackage exports are also provided for direct JSON-aware consumers:\n\n```js\nimport siteManifest from \"@kungfu-tech/buildchain/site/site-manifest.json\" with { type: \"json\" };\n```\n\n## Generation\n\n```bash\npnpm run generate:reference\npnpm run generate:site\npnpm run check:site\n```\n\n`check:site` fails when generated files are stale. `pnpm run check` includes\nthis gate, so release candidates cannot publish an out-of-date site bundle.\n\n## Scope\n\nThe P0 bundle includes:\n\n- README-derived homepage fields and display plan;\n- capability-grouped navigation facts for docs, CLI, Node API, workflows,\n  actions, and KFD claims;\n- complete markdown page registry for public Buildchain docs, action manuals,\n  Node API overview, and fixtures;\n- site manifest;\n- publication archive registry for downstream papers surfaces;\n- CLI command registry plus full-path generated human reference;\n- manual registry for packaged agent-facing documentation;\n- Node API registry plus per-symbol generated human reference for public package exports;\n- workflow/action registry;\n- release model facts;\n- artifact and evidence schema index;\n- Buildchain runtime contract world for `@v3` floating-ref compatibility checks,\n  KFD-1/KFD-2/KFD-3 release gates, GitHub Release evidence publication, and\n  site-consumption contracts;\n- Buildchain KFD claim registry for release-passport self verification and\n  agent-first public claim discovery;\n- product mechanism manifest;\n- release provenance;\n- agent read order.\n\nFuture minor lines can add examples, recipes, fixture indexes, and richer\nschema metadata without breaking existing consumers.\n\n`release-propagation.md` describes the package-to-package or package-to-site\nrelease chain model. The site bundle exposes that document and the\n`release-propagation` CLI entry so downstream sites can render the current\nBuildchain-owned propagation contract instead of hand-writing it.\n`publication-registry.json` is the static site-consumption entrypoint for\npublication archive pages. It uses the\n`kungfu-buildchain-publication-release-registry` contract and declares the\nmutable latest/canonical routes separately from append-only immutable version\nprefixes.\n\n## Rendering Boundary\n\nBuildchain owns the homepage wording, section ordering intent, complete\nmarkdown page registry, release model facts, workflow/action registry, CLI\nregistry, manual registry, Node API registry, KFD claim registry, and\nrelease-passport evidence vocabulary. The site owns HTML, CSS, responsive\nlayout, navigation, visual assets, decorative media, markdown-to-HTML rendering,\nand progressive disclosure within the Buildchain-provided\n`homepage.displayPlan` and page metadata.\n\nThe page registry is also part of Buildchain's KFD-3 collaboration-interface\nsurface. Releases declare it as a site-consumption contract, and Buildchain's\nKFD-3 witness generation includes the underlying markdown sources as public\ndocumentation surfaces. If a page is public enough for the site to render, it\nmust be declared and hash-bound in the package-owned site bundle."
     },
     {
       "id": "manual:stable-candidate-patrol",
@@ -2401,7 +3778,7 @@
       ],
       "maturity": "stable",
       "sourcePath": "docs/versioning.md",
-      "digest": "sha256:5dd27f3c4a412a23093e5d33746a5d5d40353625c8ffe89a961978fc5de9c03e",
+      "digest": "sha256:bdb155e873f9c2ea5cd40bdde057d2c2f90322f0d4575de77fe1670bd040e643",
       "headings": [
         {
           "level": 1,
@@ -2429,7 +3806,7 @@
           "anchor": "runner-policy"
         }
       ],
-      "markdown": "---\nstatus: draft\nperiod: ongoing\ntheme: buildchain-versioning\ndoc_type: policy\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: unreviewed\nlast_reviewed: 2026-07-31\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-07-30\n  invisible_context_boundary: Live release and provider state must be verified independently.\n---\n\n# Buildchain Versioning\n\nBuildchain uses semantic version lines to describe public contracts, not only\ncode size. A release can be small in diff size and still open a new minor line\nwhen it adds a durable surface that consumers, workflows, or agents can depend\non.\n\n## Lines\n\n| Line  | Meaning                                                                                                                                                                      |\n| ----- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |\n| Patch | Compatible fix, hardening, documentation correction, or implementation repair inside an existing surface.                                                                    |\n| Minor | New compatible welded surface: reusable workflow output, CLI command family, config protocol, published subpath, evidence file, runner contract, or agent-readable artifact. |\n| Major | Breaking semantic change, removed stable surface, changed branch/tag governance, or incompatible protocol rewrite.                                                           |\n\nKungfu minor lines are long-lived trains. `v3.0`, `v3.1`, and `v3.2` can each\nreceive many patch releases. The major ref, such as `v3`, points at the\nselected stable major entrypoint; the minor ref, such as `v3.2`, points at the\nlatest stable production patch for that minor line.\n\n## Welded Surfaces\n\nThese surfaces are classified independently; the final release impact is the\nhighest impact across the affected registered surfaces:\n\n- reusable workflow inputs, outputs, and artifact contracts;\n- public CLI command families and their machine-readable JSON shapes;\n- public npm exports such as `@kungfu-tech/buildchain/logging`;\n- config protocols such as `buildchain.toml`;\n- release governance state machines and protected ref semantics;\n- release evidence contracts such as passport, artifact evidence, impact\n  ledger, and agent index files;\n- binary distribution shapes that users can install or automate against.\n\nFor each surface:\n\n- content, documentation, or implementation-only work that does not touch a\n  registered surface is patch;\n- additive fields, new commands, new exports, new evidence sections, or new\n  registered surfaces are minor;\n- removals, incompatible renames, changed meanings, newly required fields,\n  weakened trust gates, or changed ref flow are major.\n\nThe release passport records this as `surfaceImpacts[]` plus\n`versionImpact.final`. The final impact must equal the highest surface impact,\nso an agent cannot silently label a release patch when one machine surface needs\nminor review.\n\n`surfaceImpacts[]` is mandatory for production release passports (`release/*`)\nand major publish-gate passports. Alpha, local, and legacy passport contexts\nkeep the field optional so temporary validation can proceed without pretending\nto be a production release decision.\n\nExample: a KFD document such as KFD-2 is content and remains patch, but adding a\n`kind` field to the machine-consumed KFD `registry.json` is an additive change\nto the `kfd-registry-schema` surface and therefore requires minor-impact\nreview. This avoids both false shortcuts: \"new KFD means minor\" and \"all KFD\nrepository changes are patch\".\n\n## Decision Log\n\n| Date       | Action       | Line    | Faces                                                                                                                                                                        | Class    | Rationale                                                                                                                                                                                                                                                                                                                              | PR    |\n| ---------- | ------------ | ------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----- |\n| 2026-07-31 | extend-minor | `v3.0`  | auditable-demo-workflow, auditable-demo-media-profile, auditable-demo-media-receipt                                                                                          | additive | Add an opt-in responsive profile that binds source-resolution and exact 1280x720 MP4/WebM/GIF renditions to one Gate and receipt while rejecting upscales, aspect-ratio drift, and profile changes between Gate-only and full-render paths.                                                                                              |       |\n| 2026-07-31 | extend-minor | `v3.0`  | release-candidate-family-evidence, release-passport-evidence-attachment, promotion-action, release-passport-cli                                                             | additive | Restore all-ref v2 parity for optional Initiative-family candidate binding and typed product-owned release evidence attachments while retaining Kungfu native Family State authority and the newer v3 post-activation released-evidence stage.                                                                                         | #2089 |\n| 2026-07-30 | extend-minor | `v3.0`  | reusable-build-workflow, observed-evidence-bundle, release-passport-json-reader, web-surface-release-governance                                                               | additive | Add bounded artifact compression and remote-read controls plus transactional derived evidence projections while repairing release-PR runtime handoff so production remains protected-main-only.                                                                                                                                       |       |\n| 2026-07-29 | extend-minor | `v3.0`  | artifact-signing-config, apple-developer-id-authority, artifact-signing-evidence                                                                                             | additive | Extend the consumer-neutral signing declaration to macOS compound archives, including nested wheel Mach-O signing, PEP 427 RECORD repair, safe archive reconstruction, and whole-product notarization under the same protected authority.                                                                                              |       |\n| 2026-07-28 | extend-minor | `v3.0`  | auditable-demo-workflow, auditable-demo-media-profile, auditable-demo-media-receipt                                                                                          | additive | Add opt-in archive, web-delivery, and site-hero profiles; independently bind codec, container, audio, layout, byte-budget, role, and fast-start facts into a v2 media receipt while preserving the existing archive default.                                                                                                           |       |\n| 2026-07-26 | extend-minor | `v3.0`  | auditable-demo-workflow, auditable-demo-evidence                                                                                                                             | additive | Forward-port the consumer-neutral reusable Gate that binds exact same-run GitHub Artifacts to checked-in adapters and immutable renderer evidence, with optional media rendering only from the exact passing Gate bundle.                                                                                                              | #1862 |\n| 2026-07-23 | extend-minor | `v2.14` | credential-island-macos-input, protected-signer-job, macos-signing-evidence, action-subpaths                                                                                 | additive | The reusable build surface can seal an exact source-bound macOS app and hand it to a protected caller environment, where an immutable Buildchain action signs, notarizes, staples, Gatekeeper-assesses, and returns an auditable additional release-candidate platform without exposing credentials to consumer lifecycle jobs.        |       |\n| 2026-07-20 | extend-minor | `v2.14` | anchored-derived-version-material, build-controller-evidence, release-passport, package-subpaths, release-propagation-controller                                             | additive | Anchored/manual consumers can declare derived version witnesses that Buildchain regenerates and verifies before heavy builds, binds to exact alpha/release trees and passports, and admits during protected promotion; propagation receipts now model their existing optional consumer stages.                                         |       |\n| 2026-07-17 | extend-minor | `v2.14` | merge-queue-config, release-line-governance-inheritance                                                                                                                      | additive | Buildchain config can explicitly enable, inherit, or disable exact dev-channel merge queues, and release-line bootstrap reconciles the declared or inherited policy before moving the repository default branch.                                                                                                                       |       |\n| 2026-07-16 | open-minor   | `v2.14` | dev-merge-queue-governance                                                                                                                                                   | additive | The public CLI adds a dry-run-first, idempotent merge-queue governance command that verifies required workflow event compatibility before applying an exact dev-channel ruleset and removing the strict up-to-date race.                                                                                                               |       |\n| 2026-07-15 | open-minor   | `v2.13` | artifact-verification-envelope, package-subpaths                                                                                                                             | additive | The public envelope seals exact artifact, provenance, identity, lifecycle, revocation, and existing KFD assessment roots into one consumer-ready KFX admission input, with a dedicated Node API export and fail-closed verifier.                                                                                                       |       |\n| 2026-07-11 | open-minor   | `v2.12` | channel-build-router, channel-selection-protocol                                                                                                                             | additive | The public `build.yml` reusable workflow lets consumers declare one build job while Buildchain selects generic major alpha for development/prerelease intent and stable major for production release intent, with explicit overrides, separate locks, and fail-closed ambiguity handling.                                              |       |\n| 2026-07-08 | open-minor   | `v2.9`  | build-facts-contract                                                                                                                                                         | additive | Build Facts add a public CLI command family, Node API export, config protocol, module/product fact contracts, release-passport evidence section, and Kungfu legacy buildinfo projection from the same source facts.                                                                                                                    |       |\n| 2026-07-06 | open-minor   | `v2.8`  | kfd-1-contract-world-release-gate, kfd-2-release-trust-passport-audit, kfd-3-collaboration-interface-trust-proof, publish-source-lock-enforcement, required-check-protection | additive | KFD release gates add KFD-1 self contract verification, KFD-2 public release trust claim audit, KFD-3 collaboration-interface trust proofs, publish-side source-lock enforcement for promote-only wrappers, and protected channel required checks repaired to bind GitHub Actions check runs instead of legacy commit status contexts. |       |\n| 2026-07-04 | open-minor   | `v2.5`  | scheduled-integration-governance                                                                                                                                             | additive | Scheduled integration governance adds scheduled feature-branch discovery, conflict-free integration, reporting, and agent-visible governance automation for dev-line maintenance.                                                                                                                                                      |       |\n| 2026-07-03 | open-minor   | `v2.4`  | infra-contract-lifecycle                                                                                                                                                     | additive | Infra contract lifecycle adds the provider-neutral `infra-contract` CLI command family, project type, adapter capability contract, lifecycle evidence bundle, propagation evidence, CI evidence mode, and consumer-facing contract artifacts.                                                                                          |       |\n| 2026-07-02 | open-minor   | `v2.3`  | web-surface-host-mapping                                                                                                                                                     | additive | Web surface host mapping adds first-class multi-host surface bindings, reusable workflow URL outputs, per-surface deployment overrides, and an agent-readable fixture contract.                                                                                                                                                        |       |\n| 2026-07-02 | open-minor   | `v2.2`  | release-passport, binary-distribution                                                                                                                                        | additive | Release passport and binary distribution add agent-readable release passport files, artifact evidence, impact ledger, agent index, GitHub Release collection and verification commands, and standalone binary assets.                                                                                                                  |       |\n| 2026-07-02 | open-minor   | `v2.1`  | logging-sdk, cli-observability, package-subpaths                                                                                                                             | additive | Buildchain toolkit observability adds the public logging SDK, CLI observability commands, and package subpaths that consumers can import.                                                                                                                                                                                              |       |\n\n## Runner Policy\n\nThe `v2.2` binary distribution lane uses GitHub-hosted runners for production\nassets because that is the easiest release path for external users to reproduce:\n\n- `ubuntu-24.04`\n- `macos-latest`\n- `windows-2022`\n\nSelf-hosted runners remain compatibility fixtures. They prove Buildchain's\nprotocol does not depend on GitHub-hosted images, but they do not define the\npublic binary distribution path."
+      "markdown": "---\nstatus: draft\nperiod: ongoing\ntheme: buildchain-versioning\ndoc_type: policy\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: unreviewed\nlast_reviewed: 2026-08-01\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-07-30\n  invisible_context_boundary: Live release and provider state must be verified independently.\n---\n\n# Buildchain Versioning\n\nBuildchain uses semantic version lines to describe public contracts, not only\ncode size. A release can be small in diff size and still open a new minor line\nwhen it adds a durable surface that consumers, workflows, or agents can depend\non.\n\n## Lines\n\n| Line  | Meaning                                                                                                                                                                      |\n| ----- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |\n| Patch | Compatible fix, hardening, documentation correction, or implementation repair inside an existing surface.                                                                    |\n| Minor | New compatible welded surface: reusable workflow output, CLI command family, config protocol, published subpath, evidence file, runner contract, or agent-readable artifact. |\n| Major | Breaking semantic change, removed stable surface, changed branch/tag governance, or incompatible protocol rewrite.                                                           |\n\nKungfu minor lines are long-lived trains. `v3.0`, `v3.1`, and `v3.2` can each\nreceive many patch releases. The major ref, such as `v3`, points at the\nselected stable major entrypoint; the minor ref, such as `v3.2`, points at the\nlatest stable production patch for that minor line.\n\n## Welded Surfaces\n\nThese surfaces are classified independently; the final release impact is the\nhighest impact across the affected registered surfaces:\n\n- reusable workflow inputs, outputs, and artifact contracts;\n- public CLI command families and their machine-readable JSON shapes;\n- public npm exports such as `@kungfu-tech/buildchain/logging`;\n- config protocols such as `buildchain.toml`;\n- release governance state machines and protected ref semantics;\n- release evidence contracts such as passport, artifact evidence, impact\n  ledger, and agent index files;\n- binary distribution shapes that users can install or automate against.\n\nFor each surface:\n\n- content, documentation, or implementation-only work that does not touch a\n  registered surface is patch;\n- additive fields, new commands, new exports, new evidence sections, or new\n  registered surfaces are minor;\n- removals, incompatible renames, changed meanings, newly required fields,\n  weakened trust gates, or changed ref flow are major.\n\nThe release passport records this as `surfaceImpacts[]` plus\n`versionImpact.final`. The final impact must equal the highest surface impact,\nso an agent cannot silently label a release patch when one machine surface needs\nminor review.\n\n`surfaceImpacts[]` is mandatory for production release passports (`release/*`)\nand major publish-gate passports. Alpha, local, and legacy passport contexts\nkeep the field optional so temporary validation can proceed without pretending\nto be a production release decision.\n\nExample: a KFD document such as KFD-2 is content and remains patch, but adding a\n`kind` field to the machine-consumed KFD `registry.json` is an additive change\nto the `kfd-registry-schema` surface and therefore requires minor-impact\nreview. This avoids both false shortcuts: \"new KFD means minor\" and \"all KFD\nrepository changes are patch\".\n\n## Decision Log\n\n| Date       | Action       | Line    | Faces                                                                                                                                                                        | Class    | Rationale                                                                                                                                                                                                                                                                                                                              | PR    |\n| ---------- | ------------ | ------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----- |\n| 2026-08-01 | extend-minor | `v3.0`  | cli-reference-registry, node-api-symbol-registry, golden-path-manual                                                                                                         | additive | Add generated, drift-checked CLI and Node API reference registries to the public site bundle, plus a package-tested first-user Golden Path; existing command execution and import semantics remain unchanged.                                                                                                                          |       |\n| 2026-07-31 | extend-minor | `v3.0`  | auditable-demo-workflow, auditable-demo-media-profile, auditable-demo-media-receipt                                                                                          | additive | Add an opt-in responsive profile that binds source-resolution and exact 1280x720 MP4/WebM/GIF renditions to one Gate and receipt while rejecting upscales, aspect-ratio drift, and profile changes between Gate-only and full-render paths.                                                                                            |       |\n| 2026-07-31 | extend-minor | `v3.0`  | release-candidate-family-evidence, release-passport-evidence-attachment, promotion-action, release-passport-cli                                                              | additive | Restore all-ref v2 parity for optional Initiative-family candidate binding and typed product-owned release evidence attachments while retaining Kungfu native Family State authority and the newer v3 post-activation released-evidence stage.                                                                                         | #2089 |\n| 2026-07-30 | extend-minor | `v3.0`  | reusable-build-workflow, observed-evidence-bundle, release-passport-json-reader, web-surface-release-governance                                                              | additive | Add bounded artifact compression and remote-read controls plus transactional derived evidence projections while repairing release-PR runtime handoff so production remains protected-main-only.                                                                                                                                        |       |\n| 2026-07-29 | extend-minor | `v3.0`  | artifact-signing-config, apple-developer-id-authority, artifact-signing-evidence                                                                                             | additive | Extend the consumer-neutral signing declaration to macOS compound archives, including nested wheel Mach-O signing, PEP 427 RECORD repair, safe archive reconstruction, and whole-product notarization under the same protected authority.                                                                                              |       |\n| 2026-07-28 | extend-minor | `v3.0`  | auditable-demo-workflow, auditable-demo-media-profile, auditable-demo-media-receipt                                                                                          | additive | Add opt-in archive, web-delivery, and site-hero profiles; independently bind codec, container, audio, layout, byte-budget, role, and fast-start facts into a v2 media receipt while preserving the existing archive default.                                                                                                           |       |\n| 2026-07-26 | extend-minor | `v3.0`  | auditable-demo-workflow, auditable-demo-evidence                                                                                                                             | additive | Forward-port the consumer-neutral reusable Gate that binds exact same-run GitHub Artifacts to checked-in adapters and immutable renderer evidence, with optional media rendering only from the exact passing Gate bundle.                                                                                                              | #1862 |\n| 2026-07-23 | extend-minor | `v2.14` | credential-island-macos-input, protected-signer-job, macos-signing-evidence, action-subpaths                                                                                 | additive | The reusable build surface can seal an exact source-bound macOS app and hand it to a protected caller environment, where an immutable Buildchain action signs, notarizes, staples, Gatekeeper-assesses, and returns an auditable additional release-candidate platform without exposing credentials to consumer lifecycle jobs.        |       |\n| 2026-07-20 | extend-minor | `v2.14` | anchored-derived-version-material, build-controller-evidence, release-passport, package-subpaths, release-propagation-controller                                             | additive | Anchored/manual consumers can declare derived version witnesses that Buildchain regenerates and verifies before heavy builds, binds to exact alpha/release trees and passports, and admits during protected promotion; propagation receipts now model their existing optional consumer stages.                                         |       |\n| 2026-07-17 | extend-minor | `v2.14` | merge-queue-config, release-line-governance-inheritance                                                                                                                      | additive | Buildchain config can explicitly enable, inherit, or disable exact dev-channel merge queues, and release-line bootstrap reconciles the declared or inherited policy before moving the repository default branch.                                                                                                                       |       |\n| 2026-07-16 | open-minor   | `v2.14` | dev-merge-queue-governance                                                                                                                                                   | additive | The public CLI adds a dry-run-first, idempotent merge-queue governance command that verifies required workflow event compatibility before applying an exact dev-channel ruleset and removing the strict up-to-date race.                                                                                                               |       |\n| 2026-07-15 | open-minor   | `v2.13` | artifact-verification-envelope, package-subpaths                                                                                                                             | additive | The public envelope seals exact artifact, provenance, identity, lifecycle, revocation, and existing KFD assessment roots into one consumer-ready KFX admission input, with a dedicated Node API export and fail-closed verifier.                                                                                                       |       |\n| 2026-07-11 | open-minor   | `v2.12` | channel-build-router, channel-selection-protocol                                                                                                                             | additive | The public `build.yml` reusable workflow lets consumers declare one build job while Buildchain selects generic major alpha for development/prerelease intent and stable major for production release intent, with explicit overrides, separate locks, and fail-closed ambiguity handling.                                              |       |\n| 2026-07-08 | open-minor   | `v2.9`  | build-facts-contract                                                                                                                                                         | additive | Build Facts add a public CLI command family, Node API export, config protocol, module/product fact contracts, release-passport evidence section, and Kungfu legacy buildinfo projection from the same source facts.                                                                                                                    |       |\n| 2026-07-06 | open-minor   | `v2.8`  | kfd-1-contract-world-release-gate, kfd-2-release-trust-passport-audit, kfd-3-collaboration-interface-trust-proof, publish-source-lock-enforcement, required-check-protection | additive | KFD release gates add KFD-1 self contract verification, KFD-2 public release trust claim audit, KFD-3 collaboration-interface trust proofs, publish-side source-lock enforcement for promote-only wrappers, and protected channel required checks repaired to bind GitHub Actions check runs instead of legacy commit status contexts. |       |\n| 2026-07-04 | open-minor   | `v2.5`  | scheduled-integration-governance                                                                                                                                             | additive | Scheduled integration governance adds scheduled feature-branch discovery, conflict-free integration, reporting, and agent-visible governance automation for dev-line maintenance.                                                                                                                                                      |       |\n| 2026-07-03 | open-minor   | `v2.4`  | infra-contract-lifecycle                                                                                                                                                     | additive | Infra contract lifecycle adds the provider-neutral `infra-contract` CLI command family, project type, adapter capability contract, lifecycle evidence bundle, propagation evidence, CI evidence mode, and consumer-facing contract artifacts.                                                                                          |       |\n| 2026-07-02 | open-minor   | `v2.3`  | web-surface-host-mapping                                                                                                                                                     | additive | Web surface host mapping adds first-class multi-host surface bindings, reusable workflow URL outputs, per-surface deployment overrides, and an agent-readable fixture contract.                                                                                                                                                        |       |\n| 2026-07-02 | open-minor   | `v2.2`  | release-passport, binary-distribution                                                                                                                                        | additive | Release passport and binary distribution add agent-readable release passport files, artifact evidence, impact ledger, agent index, GitHub Release collection and verification commands, and standalone binary assets.                                                                                                                  |       |\n| 2026-07-02 | open-minor   | `v2.1`  | logging-sdk, cli-observability, package-subpaths                                                                                                                             | additive | Buildchain toolkit observability adds the public logging SDK, CLI observability commands, and package subpaths that consumers can import.                                                                                                                                                                                              |       |\n\n## Runner Policy\n\nThe `v2.2` binary distribution lane uses GitHub-hosted runners for production\nassets because that is the easiest release path for external users to reproduce:\n\n- `ubuntu-24.04`\n- `macos-latest`\n- `windows-2022`\n\nSelf-hosted runners remain compatibility fixtures. They prove Buildchain's\nprotocol does not depend on GitHub-hosted images, but they do not define the\npublic binary distribution path."
     },
     {
       "id": "manual:web-surface-deployments",
@@ -2831,7 +4208,7 @@
   "pageRegistry": {
     "path": "page-registry.json",
     "contract": "kungfu-buildchain-site-page-registry",
-    "pageCount": 60,
+    "pageCount": 63,
     "categories": [
       "action",
       "api",
@@ -2858,7 +4235,7 @@
         "homepagePriority": 10,
         "defaultPresentation": "release-passport-install",
         "includeInFirstScreen": true,
-        "markdown": "For v3, use the published npm package and verify the release passport before\ntrusting release evidence:\n\n```bash\ncurl -LO https://github.com/kungfu-systems/buildchain/releases/download/v3.0.0/buildchain.release.json\ncurl -LO https://github.com/kungfu-systems/buildchain/releases/download/v3.0.0/artifact-evidence.json\nnpx @kungfu-tech/buildchain@3.0.0 verify release-passport buildchain.release.json\nnpx @kungfu-tech/buildchain@3.0.0 version\n```\n\nThe v3.0.0 release publishes evidence assets but no standalone platform archives.\nThe names below describe the optional archive contract used by legacy release\nlines:\n\n- `buildchain-x86_64-unknown-linux-gnu.tar.gz`\n- `buildchain-aarch64-apple-darwin.tar.gz`\n- `buildchain-x86_64-pc-windows-msvc.zip`\n- `checksums.txt`\n- `buildchain.release.json`\n- `artifact-evidence.json`\n- `product-mechanism.json`\n- `impact.json`\n- `agent-index.json`\n- `check-report.json`\n- `llms.txt`\n- `buildchain-release-bundle.tar.gz`\n- `buildchain-release-bundle.json`\n\nLoose top-level `buildchain` and `buildchain.exe` assets are intentionally not\npublished. The executable lives inside each platform archive, which prevents\nLinux and macOS artifacts from overwriting each other in a merged release lane.\n\nFor npm consumers:\n\n```bash\nnpm install -D @kungfu-tech/buildchain\nnpx buildchain version\nnpx buildchain doctor --json\n```\n\nThe npm package is also the Buildchain toolkit. Use the command when a workflow\nor shell step needs an executable; use the ESM APIs directly from JavaScript\nbuild scripts. JavaScript callers should import the package instead of spawning\nthe CLI or unpacking the standalone binary:\n\n```js\nimport {\n  createBuildchainLogger,\n  verifyBuildchainLogEvents,\n} from \"@kungfu-tech/buildchain/logging\";\n\nconst logger = createBuildchainLogger({\n  path: \".buildchain/logs/native-build.jsonl\",\n  source: \"user\",\n  component: \"native-build\",\n});\n\nawait logger.span(\"native.compile\", { phase: \"build\" }, async () => {\n  await compileNativeTargets();\n});\n\nconst report = verifyBuildchainLogEvents({\n  path: logger.path,\n  requireEvents: [\"native.compile.start\", \"native.compile.end\"],\n});\n```\n\nThe package also ships `dist/site/` as the Buildchain-owned fact source for\n`buildchain.libkungfu.dev`.\n\nRepositories can also generate README status badges from Buildchain-owned facts\ninstead of hand-maintaining badge Markdown:\n\n```bash\nbuildchain badges bundle --check\nbuildchain badges bundle --write\nbuildchain badges readme --check\nbuildchain badges readme --write\n```"
+        "markdown": "New repository adopters should follow the [15–30 minute Golden Path](docs/getting-started.md).\nThe commands below are the shorter verification-only route for an existing\nconsumer.\n\nFor v3, use the published npm package and verify the release passport before\ntrusting release evidence:\n\n```bash\ncurl -LO https://github.com/kungfu-systems/buildchain/releases/download/v3.0.0/buildchain.release.json\ncurl -LO https://github.com/kungfu-systems/buildchain/releases/download/v3.0.0/artifact-evidence.json\nnpx @kungfu-tech/buildchain@3.0.0 verify release-passport buildchain.release.json\nnpx @kungfu-tech/buildchain@3.0.0 version\n```\n\nThe v3.0.0 release publishes evidence assets but no standalone platform archives.\nThe names below describe the optional archive contract used by legacy release\nlines:\n\n- `buildchain-x86_64-unknown-linux-gnu.tar.gz`\n- `buildchain-aarch64-apple-darwin.tar.gz`\n- `buildchain-x86_64-pc-windows-msvc.zip`\n- `checksums.txt`\n- `buildchain.release.json`\n- `artifact-evidence.json`\n- `product-mechanism.json`\n- `impact.json`\n- `agent-index.json`\n- `check-report.json`\n- `llms.txt`\n- `buildchain-release-bundle.tar.gz`\n- `buildchain-release-bundle.json`\n\nLoose top-level `buildchain` and `buildchain.exe` assets are intentionally not\npublished. The executable lives inside each platform archive, which prevents\nLinux and macOS artifacts from overwriting each other in a merged release lane.\n\nFor npm consumers:\n\n```bash\nnpm install -D @kungfu-tech/buildchain\nnpx buildchain version\nnpx buildchain doctor --json\n```\n\nThe npm package is also the Buildchain toolkit. Use the command when a workflow\nor shell step needs an executable; use the ESM APIs directly from JavaScript\nbuild scripts. JavaScript callers should import the package instead of spawning\nthe CLI or unpacking the standalone binary:\n\n```js\nimport {\n  createBuildchainLogger,\n  verifyBuildchainLogEvents,\n} from \"@kungfu-tech/buildchain/logging\";\n\nconst logger = createBuildchainLogger({\n  path: \".buildchain/logs/native-build.jsonl\",\n  source: \"user\",\n  component: \"native-build\",\n});\n\nawait logger.span(\"native.compile\", { phase: \"build\" }, async () => {\n  await compileNativeTargets();\n});\n\nconst report = verifyBuildchainLogEvents({\n  path: logger.path,\n  requireEvents: [\"native.compile.start\", \"native.compile.end\"],\n});\n```\n\nThe package also ships `dist/site/` as the Buildchain-owned fact source for\n`buildchain.libkungfu.dev`.\n\nRepositories can also generate README status badges from Buildchain-owned facts\ninstead of hand-maintaining badge Markdown:\n\n```bash\nbuildchain badges bundle --check\nbuildchain badges bundle --write\nbuildchain badges readme --check\nbuildchain badges readme --write\n```"
       },
       {
         "id": "use-buildchain",
@@ -2950,7 +4327,15 @@
       "path": "docs/MAP.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:f6e378d0d583568b0ee90c8805b83b6f0a4faf0d1efa6e4a995482b5ecb8f538"
+      "digest": "sha256:0731b18f6a7aa6a164197080fac3b57ff161640a28433c4cd26adcf145403fb5"
+    },
+    {
+      "id": "getting-started",
+      "title": "Golden Path",
+      "path": "docs/getting-started.md",
+      "plane": "use",
+      "exists": true,
+      "digest": "sha256:806224481f542786ed2e60226417bd1ba673099a3110f564357792bdbf637403"
     },
     {
       "id": "auditable-demo",
@@ -3078,7 +4463,7 @@
       "path": "docs/site-bundle-contract.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:40831ce35dca6ac2a3a81d54a83fb0e5ab064137829a4f7844e5d80ba61aa65c"
+      "digest": "sha256:36a4e60e91f500ea1dcdbef97cd0250a2c26562b98d8d3622e8e0f9df2aad23b"
     },
     {
       "id": "migration-inventory",
@@ -3110,7 +4495,23 @@
       "path": "docs/cli.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:009640d0f4d5a670d8e5a73e4a14250d62c3cc0c3bd165aa84200e0098ef898e"
+      "digest": "sha256:0c8721e9c2f449e96aa8adefe99b016b193ab2876c02f3c61186794ac1873e90"
+    },
+    {
+      "id": "cli-reference",
+      "title": "Generated CLI reference",
+      "path": "docs/cli-reference.md",
+      "plane": "use",
+      "exists": true,
+      "digest": "sha256:c728fe693ab591ab5b52f4276a817ec5a013c79833f0d20ca2cc137e85ae51ca"
+    },
+    {
+      "id": "node-api-reference",
+      "title": "Generated Node API reference",
+      "path": "docs/node-api-reference.md",
+      "plane": "use",
+      "exists": true,
+      "digest": "sha256:2df82d2f754898d2f463ec0795e20f903f534dd537ac971e62b140beb21d49ee"
     },
     {
       "id": "build-facts",
@@ -3190,7 +4591,7 @@
       "path": "docs/versioning.md",
       "plane": "why",
       "exists": true,
-      "digest": "sha256:5dd27f3c4a412a23093e5d33746a5d5d40353625c8ffe89a961978fc5de9c03e"
+      "digest": "sha256:bdb155e873f9c2ea5cd40bdde057d2c2f90322f0d4575de77fe1670bd040e643"
     },
     {
       "id": "web-surface-deployments",