@kungfu-tech/buildchain 3.0.5-alpha.7 → 3.0.5

package/README.md

@@ -1,32 +1,5 @@
 # Buildchain
 
-<!-- buildchain-auditable-demo:start -->
-## Buildchain beginner bootstrap
-
-[![Buildchain beginner bootstrap](docs/evidence/auditable-demo/f0413dc57e2b658fb75e82c4b7736ef87f4a573f6d6cbc1d690b52b723006492/beginner-bootstrap/demo.gif)](docs/evidence/auditable-demo/f0413dc57e2b658fb75e82c4b7736ef87f4a573f6d6cbc1d690b52b723006492/beginner-bootstrap/public-evidence.json)
-
-Animation scenario:
-
-```text
-$ buildchain init --cwd ./starter --type package --package-manager npm
-$ buildchain layout --cwd ./starter --json
-$ buildchain version
-```
-
-Native renditions: [1080p MP4](docs/evidence/auditable-demo/f0413dc57e2b658fb75e82c4b7736ef87f4a573f6d6cbc1d690b52b723006492/beginner-bootstrap/demo.mp4) · [1080p WebM](docs/evidence/auditable-demo/f0413dc57e2b658fb75e82c4b7736ef87f4a573f6d6cbc1d690b52b723006492/beginner-bootstrap/demo.webm) · [720p MP4](docs/evidence/auditable-demo/f0413dc57e2b658fb75e82c4b7736ef87f4a573f6d6cbc1d690b52b723006492/beginner-bootstrap/demo-720p.mp4) · [720p WebM](docs/evidence/auditable-demo/f0413dc57e2b658fb75e82c4b7736ef87f4a573f6d6cbc1d690b52b723006492/beginner-bootstrap/demo-720p.webm)
-
-[Static poster / reduced-motion fallback](docs/evidence/auditable-demo/f0413dc57e2b658fb75e82c4b7736ef87f4a573f6d6cbc1d690b52b723006492/beginner-bootstrap/poster.png)
-
-<details>
-<summary>Evidence and claim boundary</summary>
-
-This exact standalone-binary scenario proves deterministic local bootstrap behavior only; it does not grant release, repository, network, or production authority.
-
-[Release Passport](docs/evidence/auditable-demo/f0413dc57e2b658fb75e82c4b7736ef87f4a573f6d6cbc1d690b52b723006492/beginner-bootstrap/release-passport.json) · [auditable evidence](docs/evidence/auditable-demo/f0413dc57e2b658fb75e82c4b7736ef87f4a573f6d6cbc1d690b52b723006492/beginner-bootstrap/public-evidence.json)
-
-</details>
-<!-- buildchain-auditable-demo:end -->
-
 <!-- buildchain:badges:start -->
 
 [![KFD-1: passed](https://buildchain.libkungfu.dev/badges/v1/kfd-1/passed.svg)](https://github.com/kungfu-systems/buildchain/releases/latest/download/buildchain.release.json)
@@ -304,10 +277,6 @@ The active reusable workflow surfaces are:
   qualification, transcript-bound renderer smoke, optional media rendering
   from the exact passing Gate bundle, and opt-in content-addressed web-delivery
   profiles with independently verified rendition roles;
-- `.github/workflows/.declarative-auditable-demo.yml` for standalone binary
-  consumers that provide only a versioned multi-demo argv scenario and exact
-  same-run binary artifact coordinates; Buildchain owns isolated native
-  capture, Gate, Release Passport, materialization, and protected README PRs;
 - `.github/workflows/.build.yml` for deterministic multi-platform build and
   artifact contracts;
 - `.github/workflows/build.yml` for the single-config channel router that uses

package/actions/macos-credential-island/README.md

@@ -7,14 +7,6 @@ exact Developer ID Application identity into a temporary keychain, signs the
 application, submits Apple notarization, staples the application and DMG,
 verifies Gatekeeper, and writes bounded JSON evidence.
 
-DMG assembly uses a unique execution- and attempt-bound image path and volume
-name. Only the exact `hdiutil: create failed - Resource busy` failure is retried,
-with three attempts and a total retry delay of seven seconds. Certificate,
-entitlement, signature, notarization, provenance, and policy failures remain
-terminal. Attempt artifacts stay below the owned temporary root, and successful
-evidence binds the request, unsigned archive, runtime, runner attempt, toolchain,
-retry history, cleanup result, and signed output digests.
-
 The reusable Buildchain workflow invokes this action from a job bound to the
 caller's protected GitHub Environment. The job downloads the exact sealed
 Buildchain input and immutable action runtime, then uploads the signed payload

package/bin/buildchain.mjs

@@ -1623,7 +1623,7 @@ async function handlePaperCommand(args) {
 }
 
 async function handleReleasePropagationCommand(args) {
-    await runReleasePropagationCli(args);
+    runReleasePropagationCli(args);
     return;
 
 }

package/contracts/auditable-demo-media-profiles-v1.json

@@ -246,67 +246,6 @@
         "responsive-alternate-video"
       ]
     },
-    "responsive-long-form-web-delivery-v1": {
-      "extends": "responsive-web-delivery-v1",
-      "mode": "web-delivery",
-      "renditions": [
-        {
-          "path": "demo.gif",
-          "maximumBytes": 8388608,
-          "budgetBasis": {
-            "evidence": "contracts/evidence/auditable-demo-web-delivery-v1.json",
-            "observedPath": "demo.gif",
-            "observedBytes": 40826,
-            "multiplier": 128,
-            "rounding": "next-power-of-two"
-          }
-        },
-        {
-          "path": "demo.mp4",
-          "maximumBytes": 4194304,
-          "budgetBasis": {
-            "evidence": "contracts/evidence/auditable-demo-web-delivery-v1.json",
-            "observedPath": "demo.mp4",
-            "observedBytes": 27038,
-            "multiplier": 128,
-            "rounding": "next-power-of-two"
-          }
-        },
-        {
-          "path": "demo.webm",
-          "maximumBytes": 4194304,
-          "budgetBasis": {
-            "evidence": "contracts/evidence/auditable-demo-web-delivery-v1.json",
-            "observedPath": "demo.webm",
-            "observedBytes": 23383,
-            "multiplier": 128,
-            "rounding": "next-power-of-two"
-          }
-        },
-        {
-          "path": "demo-720p.mp4",
-          "maximumBytes": 4194304,
-          "budgetBasis": {
-            "evidence": "contracts/evidence/auditable-demo-web-delivery-v1.json",
-            "observedPath": "demo.mp4",
-            "observedBytes": 27038,
-            "multiplier": 128,
-            "rounding": "next-power-of-two"
-          }
-        },
-        {
-          "path": "demo-720p.webm",
-          "maximumBytes": 4194304,
-          "budgetBasis": {
-            "evidence": "contracts/evidence/auditable-demo-web-delivery-v1.json",
-            "observedPath": "demo.webm",
-            "observedBytes": 23383,
-            "multiplier": 128,
-            "rounding": "next-power-of-two"
-          }
-        }
-      ]
-    },
     "site-hero-v1": {
       "extends": "web-delivery-v1",
       "mode": "web-delivery",

package/contracts/evidence/auditable-demo-responsive-web-delivery-v1.json

@@ -1,5 +1,5 @@
 {
-  "evidenceRoot": "sha256:30417309facd1092631fd1bd3a104c3ec1f607c3310a61814b27d2145448ec36",
+  "evidenceRoot": "sha256:5bebb7ca41b7b509d63293c3c363fbff917d188fe1d6ae19a73d33424ea623ed",
   "inputs": {
     "complete-transcript.txt": "sha256:3cc1fc8a46d47fad052143b54ab261f08d007403c4ec00eba37b0a733f7cc615",
     "public-projection.json": "sha256:c5d5ec702189d2e6eed17419f2fd9a659c1b4cbcf7ee1a58ac8507ec2a748180",
@@ -14,12 +14,12 @@
       "production-site-deployment"
     ],
     "profile": {
-      "catalogRoot": "sha256:87578237079330ac2843113af2baff63031dc1363dba43cf3a59127ed2d255a2",
+      "catalogRoot": "sha256:cf885ac31104a36aa051fb62f47dd79b68bd671f7dfeeb1a458ea7d0cbf0c479",
       "id": "responsive-web-delivery-v1",
       "mode": "web-delivery",
       "profileRoot": "sha256:fdbda001970304af935f58af11ccfdb7c32ec466c9dd487cbb81ee1b19dc4556"
     },
-    "qualificationRoot": "sha256:b18547f31c6b00da9215021b6d54197cbda5fbb5dcb30a633161624b8d8d8af1",
+    "qualificationRoot": "sha256:1c588662db5abcc6776a43b3210f43555161b55ddf8aa4aa4530371bc1d26ec8",
     "renditions": [
       {
         "audioStreams": 0,

package/contracts/evidence/auditable-demo-web-delivery-v1.json

@@ -1,5 +1,5 @@
 {
-  "evidenceRoot": "sha256:6875cf065ccafda0127c57a17bc81f0f999fb543341e82072bc9b89f0c7a6f0a",
+  "evidenceRoot": "sha256:5a4fced32999b3007628dfaee32206b0f7512032e65fd57be455e59df2f5d877",
   "inputs": {
     "complete-transcript.txt": "sha256:f3723a3eda614134ab724ce9fbe1e0e5f916d809a8a3096f5e37c1458cb3656c",
     "public-projection.json": "sha256:127f9877f9750a85eada4338f088bee5460c5c71a83302652d3321667002c3c7",
@@ -14,12 +14,12 @@
       "production-site-deployment"
     ],
     "profile": {
-      "catalogRoot": "sha256:87578237079330ac2843113af2baff63031dc1363dba43cf3a59127ed2d255a2",
+      "catalogRoot": "sha256:cf885ac31104a36aa051fb62f47dd79b68bd671f7dfeeb1a458ea7d0cbf0c479",
       "id": "web-delivery-v1",
       "mode": "web-delivery",
       "profileRoot": "sha256:b6fb0a83414d03a7222fc50429e60ed68b6d47758b86ceaa316ecc659a01ae2b"
     },
-    "qualificationRoot": "sha256:d8b30192c848ba1c7f6e9a59b5dd1c9f38aae835bb94ad05ad55cdad4b6a8a2f",
+    "qualificationRoot": "sha256:a8509982ce43c133ef50bbb651bdba07b5b37bed06841ebb165f23b81e3b9fc1",
     "renditions": [
       {
         "audioStreams": 0,

package/dist/site/buildchain-contract.json

@@ -4,7 +4,7 @@
   "product": {
     "name": "Buildchain",
     "package": "@kungfu-tech/buildchain",
-    "version": "3.0.5-alpha.7",
+    "version": "3.0.5",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "majorLine": "v3",
@@ -52,7 +52,7 @@
         "retryable GitHub fallback fetches use a bounded attempt budget before exact source SHA and tree verification"
       ],
       "breakingDigest": "sha256:dfbedd543ae0c067982b5c8c02d98dd2f7f7df88752be97fb330da6b0ba30faa",
-      "auditDigest": "sha256:a604814e212e399e4908f7cd9393bcbc790a596ed12f16c0937deff49f8fc067"
+      "auditDigest": "sha256:1fff20be18b0ed638a02c2ae00258ee5a0052f466dd2338fe6f4935a31f94dfe"
     },
     {
       "contractVersion": 1,
@@ -91,7 +91,7 @@
         "alpha and stable channel selections use separate consumer contract locks by default"
       ],
       "breakingDigest": "sha256:c4597dfa89e1a58f1023905092b849644f5c080abf150aeba9c7e1cd5ed43962",
-      "auditDigest": "sha256:f5301f867cb3101e76fd00a294c722d81ce914e35ca57c75f7912f925d3d07a7"
+      "auditDigest": "sha256:752ef03f5cbfb4a74e21081a8a09d2e292c255af25776eb1d20b317317608425"
     },
     {
       "contractVersion": 1,
@@ -177,7 +177,7 @@
         "GitHub Release passport and evidence publication is delegated to promote-buildchain-ref after the semver release transaction completes"
       ],
       "breakingDigest": "sha256:acd401cfc46450115a3763fd4b679d85f185e8757ebd52510d6262e1533df4cf",
-      "auditDigest": "sha256:45f72dc26b1620b0f79558922b44449bda28b25ebc051a737137b5b01c220995"
+      "auditDigest": "sha256:9f7f7d80f3790df7e35b8214557bcfc94903259b07f130ddab582f523e0eafc4"
     },
     {
       "contractVersion": 1,
@@ -219,7 +219,7 @@
         "promotion reuses PR-stage release-candidate artifacts and does not run the heavy native build matrix"
       ],
       "breakingDigest": "sha256:aa30f22e3af0a89841310bdbdc900844dd95a66974db173fa140a71bbd7e82c0",
-      "auditDigest": "sha256:727d8fe9b0cce68e4808cc3b31b6cf95876a96bad4b5afc8fd441c669d71a1b1"
+      "auditDigest": "sha256:cb3776ccf4d09a4197da7f894c6c2f72b15d982b9e3c8e7c3576cc1607e2241b"
     },
     {
       "contractVersion": 1,
@@ -323,57 +323,6 @@
       "breakingDigest": "sha256:425f8d3d1ba205dd6fe35a20f1dc6dad7d7c563872283e3af79fea4d5c475692",
       "auditDigest": "sha256:4f0051783d637ff25a1154379dc0eb77a246ad7aee18e12a5e8ff0107aa61a90"
     },
-    {
-      "contractVersion": 1,
-      "stability": "stable",
-      "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
-      "id": "declarative-auditable-demo",
-      "kind": "workflow",
-      "path": ".github/workflows/.declarative-auditable-demo.yml",
-      "publicRef": "kungfu-systems/buildchain/.github/workflows/.declarative-auditable-demo.yml@v3",
-      "requiredInputs": [
-        "binary-artifact-name",
-        "binary-artifact-digest",
-        "renderer-image"
-      ],
-      "requiredOutputs": [
-        "source-sha",
-        "capture-artifact-name",
-        "capture-artifact-digest",
-        "evidence-artifact-name",
-        "evidence-artifact-digest",
-        "publication-pr-url"
-      ],
-      "breakingDefaults": {
-        "scenarioPathDefault": ".buildchain/auditable-demo.json",
-        "renderMediaDefault": false,
-        "materializeDefault": false,
-        "mediaProfileDefault": "responsive-web-delivery-v1",
-        "artifactRetentionDaysDefault": 14,
-        "executionBoundary": "exact-binary-network-none-secret-free-60-seconds"
-      },
-      "optionalInputs": [
-        "buildchain-repository",
-        "source-ref",
-        "scenario-path",
-        "render-media",
-        "media-profile",
-        "materialize",
-        "materialize-base-ref",
-        "artifact-retention-days"
-      ],
-      "guarantees": [
-        "one versioned declaration can contain multiple demos with multiple ordered literal argv steps",
-        "every demo uses the exact same-run standalone binary admitted by producer-owned artifact name and digest",
-        "capture runs without network or inherited secrets and retains independent native 1080p and 720p terminal dimensions",
-        "the generic adapter feeds the required auditable demo Gate and immutable renderer without product-specific glue",
-        "full rendering emits a content-addressed Release Passport and idempotent protected README update pull request",
-        "manual, alpha, and release callers use the same capture, Gate, renderer, passport, and materializer implementation",
-        "identity, compliance, Product System metadata, package metadata, registry history, scans, and generation grant no authority"
-      ],
-      "breakingDigest": "sha256:0bcba689ab5060e12230db4118895242ecb48677ff581ea0360b1833bdac558c",
-      "auditDigest": "sha256:49051fc60effa1d4077f461c841927b5a1ab411956e94b305cbf06d2895ab5d0"
-    },
     {
       "contractVersion": 1,
       "stability": "stable",
@@ -670,7 +619,7 @@
         "README badge block checks and writes are generated from machine-readable repository facts"
       ],
       "breakingDigest": "sha256:90a73892b2d6c214048448d5f45df75639bdf7b7e8fefd9c596e04b087407bcc",
-      "auditDigest": "sha256:9f5a8549d5d7cb42af5720a05ad3d64b6b06f6415013d62e93fcf7d404978495"
+      "auditDigest": "sha256:f3be0e8ce65d5860d1ad808990f78a1fd48c18207a9aacf1ba63fd0d0e51be40"
     },
     {
       "contractVersion": 1,
@@ -760,7 +709,7 @@
         "manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
       ],
       "breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
-      "auditDigest": "sha256:b4d64e6a19089520d4d5cdf49c270871f96f668e1d6edab35bb28d8f093fbfa3"
+      "auditDigest": "sha256:9d0c9ef674ac63470098f25c1fab6e5c64b632751d7aaa5d537970b07be7b84b"
     },
     {
       "contractVersion": 1,
@@ -782,7 +731,7 @@
         "agents can discover supported Node APIs without importing internal file paths"
       ],
       "breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
-      "auditDigest": "sha256:59cbb97c499c5c9573d9b32bb87da7ca13851760ccecec6dfb73fd0166ab11b1"
+      "auditDigest": "sha256:31e9f080b8ea31513ec1cc0db8d3cfd8cebf63d1ec6dd31048f77cfe4808fa2c"
     },
     {
       "contractVersion": 1,
@@ -833,7 +782,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:373723a73d188194d389dee04c394d3b79cb0c016a370f2f5d0f60979a02ed48",
-        "registryDigest": "sha256:1ca3dd555338d485c6aa052fa01a76fb0b20a4d0812a71965e97f7dfd748b111",
+        "registryDigest": "sha256:56e91795341365ea7684caed8f2d6fd81b1d5bd669b004545caefdbe63c0f98d",
         "inputClassifications": {
           "buildchain-ref": {
             "classification": "included",
@@ -960,7 +909,6 @@
         "checkout-cache-mode",
         "checkout-cache-reference-repository-template",
         "checkout-cache-timeout-seconds",
-        "checkout-history-mode",
         "compiler-cache-platforms-json",
         "compiler-cache-provider",
         "compiler-cache-required",
@@ -1012,8 +960,8 @@
       ],
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
-        "digest": "sha256:6088b850d18b276fccb71564a2afc7fbc1a3343036635b4fe2de960b99965498",
-        "registryDigest": "sha256:1ca3dd555338d485c6aa052fa01a76fb0b20a4d0812a71965e97f7dfd748b111",
+        "digest": "sha256:2e4c9e9af2162de2333c9b57bffcff77a76e9ed384b9f001ab8ef63d527197f9",
+        "registryDigest": "sha256:56e91795341365ea7684caed8f2d6fd81b1d5bd669b004545caefdbe63c0f98d",
         "inputClassifications": {
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
             "classification": "redacted",
@@ -1187,10 +1135,6 @@
             "classification": "digest-only",
             "source": "workflow-call-input"
           },
-          "checkout-history-mode": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
           "compiler-cache-platforms-json": {
             "classification": "digest-only",
             "source": "workflow-call-input"
@@ -1396,7 +1340,7 @@
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
       "breakingDigest": "sha256:6b8d38e92b2c67b5bc83fae0a3fd95bfa47582fbc176e6cdeebe7630a57534cb",
-      "auditDigest": "sha256:a604814e212e399e4908f7cd9393bcbc790a596ed12f16c0937deff49f8fc067"
+      "auditDigest": "sha256:1fff20be18b0ed638a02c2ae00258ee5a0052f466dd2338fe6f4935a31f94dfe"
     },
     {
       "contractVersion": 1,
@@ -1480,7 +1424,6 @@
         "checkout-cache-mode",
         "checkout-cache-reference-repository-template",
         "checkout-cache-timeout-seconds",
-        "checkout-history-mode",
         "compiler-cache-platforms-json",
         "compiler-cache-provider",
         "compiler-cache-required",
@@ -1532,8 +1475,8 @@
       ],
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
-        "digest": "sha256:7668105652e29bf41bbdaf73288cc285c78a7beaa287bf8502b8abc107837372",
-        "registryDigest": "sha256:1ca3dd555338d485c6aa052fa01a76fb0b20a4d0812a71965e97f7dfd748b111",
+        "digest": "sha256:105eed3eb8f772d4ed93d43e7da404d849b92eafab1b461c7a9b7cb94a8a6b3b",
+        "registryDigest": "sha256:56e91795341365ea7684caed8f2d6fd81b1d5bd669b004545caefdbe63c0f98d",
         "inputClassifications": {
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
             "classification": "redacted",
@@ -1719,10 +1662,6 @@
             "classification": "digest-only",
             "source": "workflow-call-input"
           },
-          "checkout-history-mode": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
           "compiler-cache-platforms-json": {
             "classification": "digest-only",
             "source": "workflow-call-input"
@@ -1924,7 +1863,7 @@
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
       "breakingDigest": "sha256:d40dd05d7e07473d4b2dc1b62fbb0ed6f06449b4d3a7c44a2e8014313e3c0273",
-      "auditDigest": "sha256:f5301f867cb3101e76fd00a294c722d81ce914e35ca57c75f7912f925d3d07a7"
+      "auditDigest": "sha256:752ef03f5cbfb4a74e21081a8a09d2e292c255af25776eb1d20b317317608425"
     },
     {
       "contractVersion": 1,
@@ -1994,7 +1933,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:8e42956a2c10fa109500e72b97994f06b3d22a19cc63a46f66410b2e81706e9d",
-        "registryDigest": "sha256:1ca3dd555338d485c6aa052fa01a76fb0b20a4d0812a71965e97f7dfd748b111",
+        "registryDigest": "sha256:56e91795341365ea7684caed8f2d6fd81b1d5bd669b004545caefdbe63c0f98d",
         "inputClassifications": {
           "artifact-name": {
             "classification": "included",
@@ -2211,7 +2150,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:c5274b37f04d0054559fdc8698c51bd0f0d8ae470baf163e9caa7699aa970575",
-        "registryDigest": "sha256:1ca3dd555338d485c6aa052fa01a76fb0b20a4d0812a71965e97f7dfd748b111",
+        "registryDigest": "sha256:56e91795341365ea7684caed8f2d6fd81b1d5bd669b004545caefdbe63c0f98d",
         "inputClassifications": {
           "artifact-path": {
             "classification": "digest-only",
@@ -2455,7 +2394,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:6b132790b9798e8a5dfbe095701d8e024c160a08bc7c4bd477ee79feef7a9cfd",
-        "registryDigest": "sha256:1ca3dd555338d485c6aa052fa01a76fb0b20a4d0812a71965e97f7dfd748b111",
+        "registryDigest": "sha256:56e91795341365ea7684caed8f2d6fd81b1d5bd669b004545caefdbe63c0f98d",
         "inputClassifications": {
           "artifact-name": {
             "classification": "included",
@@ -2637,7 +2576,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:6d71409659fbf8543c7e520b0c493d8afe86bdf60286b860bb917f0041ebc173",
-        "registryDigest": "sha256:1ca3dd555338d485c6aa052fa01a76fb0b20a4d0812a71965e97f7dfd748b111",
+        "registryDigest": "sha256:56e91795341365ea7684caed8f2d6fd81b1d5bd669b004545caefdbe63c0f98d",
         "inputClassifications": {
           "artifact-name": {
             "classification": "included",
@@ -2954,7 +2893,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:220710d81a41b50edb4dc65cea3e1e5d20805406eaaced65bc006718700696b9",
-        "registryDigest": "sha256:1ca3dd555338d485c6aa052fa01a76fb0b20a4d0812a71965e97f7dfd748b111",
+        "registryDigest": "sha256:56e91795341365ea7684caed8f2d6fd81b1d5bd669b004545caefdbe63c0f98d",
         "inputClassifications": {
           "BUILDCHAIN_ISSUE_APP_ID": {
             "classification": "redacted",
@@ -3385,7 +3324,7 @@
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
       "breakingDigest": "sha256:015d8de793adbd4c539416be7d7512e18cc92097e629b0203fa06d2c183e98bd",
-      "auditDigest": "sha256:727d8fe9b0cce68e4808cc3b31b6cf95876a96bad4b5afc8fd441c669d71a1b1"
+      "auditDigest": "sha256:cb3776ccf4d09a4197da7f894c6c2f72b15d982b9e3c8e7c3576cc1607e2241b"
     },
     {
       "contractVersion": 1,
@@ -3450,7 +3389,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:660579b5561e8e33375a3f3b1fefbb8a5bd8241a55ba43374d786fb772c24a12",
-        "registryDigest": "sha256:1ca3dd555338d485c6aa052fa01a76fb0b20a4d0812a71965e97f7dfd748b111",
+        "registryDigest": "sha256:56e91795341365ea7684caed8f2d6fd81b1d5bd669b004545caefdbe63c0f98d",
         "inputClassifications": {
           "agent-work-context-json": {
             "classification": "digest-only",
@@ -3585,7 +3524,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555",
-        "registryDigest": "sha256:1ca3dd555338d485c6aa052fa01a76fb0b20a4d0812a71965e97f7dfd748b111",
+        "registryDigest": "sha256:56e91795341365ea7684caed8f2d6fd81b1d5bd669b004545caefdbe63c0f98d",
         "inputClassifications": {}
       },
       "guarantees": [
@@ -3598,6 +3537,6 @@
       "auditDigest": "sha256:d07482cd66413a2fb3781a3b76f960b8151b6231841799647fe237820de2fde6"
     }
   ],
-  "compatibilityDigest": "sha256:76c3dd58a02887ecd6af33d63e749fef0a988a820fea99bdf4cb078cc48caa83",
-  "contractDigest": "sha256:a4d6ba754b6edebe27ca04d9c275ef7f63efa99c7e66dd84b13595cfc0a34b6c"
+  "compatibilityDigest": "sha256:3bbcaf835844260ed98414d3bd176667245d12131e13fc748e4c2fae12399691",
+  "contractDigest": "sha256:3f1edac6e6118619eece886cccfcf91c511c15be9ff97463a44cb97ec02886ce"
 }