@kungfu-tech/buildchain 3.0.6-alpha.1 → 3.0.6-alpha.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (75) hide show
  1. package/README.md +4 -4
  2. package/actions/promote-buildchain-ref/README.md +8 -0
  3. package/bin/buildchain.mjs +13 -1
  4. package/contracts/auditable-demo-scenario-v1.schema.json +52 -0
  5. package/contracts/release-candidate-recovery-v1.schema.json +102 -0
  6. package/dist/site/buildchain-contract.json +129 -34
  7. package/dist/site/buildchain-site.json +171 -45
  8. package/dist/site/capability-registry.json +5 -5
  9. package/dist/site/cli-registry.json +40 -4
  10. package/dist/site/controller-registry.json +56 -4
  11. package/dist/site/kfd-claims.json +184 -20
  12. package/dist/site/kfd-upstream-aggregate.json +1 -1
  13. package/dist/site/manual-registry.json +10 -10
  14. package/dist/site/node-api-registry.json +1242 -121
  15. package/dist/site/page-registry.json +157 -31
  16. package/dist/site/public-surface-audit.json +422 -21
  17. package/dist/site/publication-authority-registry.json +66 -1
  18. package/dist/site/publication-registry.json +4 -4
  19. package/dist/site/release-provenance.json +2 -0
  20. package/dist/site/site-manifest.json +14 -14
  21. package/dist/site/workflow-registry.json +197 -15
  22. package/docs/MAP.md +1 -0
  23. package/docs/auditable-demo.md +58 -11
  24. package/docs/aws-us-elastic-runner-burst-plane.md +23 -19
  25. package/docs/cli-reference.md +154 -0
  26. package/docs/dev-alpha-candidate-patrol.md +13 -5
  27. package/docs/dev-delivery-warrant.md +158 -0
  28. package/docs/node-api-reference.md +96 -38
  29. package/docs/publication-authority.md +11 -0
  30. package/docs/publish-transaction.md +10 -1
  31. package/docs/release-candidate.md +106 -12
  32. package/docs/release-governance.md +52 -0
  33. package/docs/reusable-build-surface.md +11 -1
  34. package/docs/shifu-gate-profiles.md +12 -1
  35. package/docs/versioning.md +2 -0
  36. package/package.json +3 -1
  37. package/packages/core/buildchain-contract.js +30 -2
  38. package/packages/core/buildchain-publication-authority.js +3 -1
  39. package/packages/core/channel-candidate.js +2 -21
  40. package/packages/core/channel-promotion-baseline.js +199 -0
  41. package/packages/core/dev-delivery-candidate-identity.js +94 -0
  42. package/packages/core/dev-delivery-common.js +73 -0
  43. package/packages/core/dev-delivery-proof.js +252 -0
  44. package/packages/core/dev-delivery-warrant-cancellation.js +94 -0
  45. package/packages/core/dev-delivery-warrant-settlement.js +73 -0
  46. package/packages/core/dev-delivery-warrant.js +591 -0
  47. package/packages/core/index.js +7 -0
  48. package/packages/core/release-candidate-recovery.js +386 -0
  49. package/scripts/auditable-demo-bundle-verification.mjs +148 -0
  50. package/scripts/auditable-demo-platform.mjs +86 -50
  51. package/scripts/auditable-demo-presentation.mjs +83 -0
  52. package/scripts/auditable-demo-renditions.mjs +264 -0
  53. package/scripts/auditable-demo.mjs +24 -30
  54. package/scripts/build-contract-core.mjs +58 -3
  55. package/scripts/buildchain-cli-help.mjs +8 -0
  56. package/scripts/buildchain-patrol.mjs +9 -0
  57. package/scripts/check-inventory.mjs +13 -2
  58. package/scripts/dev-alpha-candidate-patrol.mjs +45 -48
  59. package/scripts/dev-delivery-proof.mjs +193 -0
  60. package/scripts/dev-delivery-warrant.mjs +426 -0
  61. package/scripts/dev-pr-auto-merge.mjs +488 -46
  62. package/scripts/dev-pr-delivery-warrant.mjs +209 -0
  63. package/scripts/gate-profile-core.mjs +24 -0
  64. package/scripts/generate-site-bundle.mjs +2 -2
  65. package/scripts/git-fetch-process-tree.mjs +142 -0
  66. package/scripts/lifecycle-substage-evidence.mjs +274 -0
  67. package/scripts/locked-source-checkout.mjs +6 -3
  68. package/scripts/release-candidate-resolver.mjs +35 -3
  69. package/scripts/resolve-artifact-transfer-mode.mjs +9 -0
  70. package/scripts/resolve-build-contract.mjs +7 -0
  71. package/scripts/resume-from-candidate-run.mjs +498 -0
  72. package/scripts/route-offline-runners.mjs +1 -0
  73. package/scripts/run-lifecycle-core.mjs +9 -9
  74. package/scripts/shifu-gate-profile.mjs +10 -16
  75. package/scripts/site-capability-metadata.mjs +15 -0
@@ -271,6 +271,19 @@
271
271
  "runnerPolicy": "unqualified",
272
272
  "notes": ""
273
273
  },
274
+ {
275
+ "workflowPath": ".github/workflows/buildchain-dev-delivery.yml",
276
+ "authorityClass": "governance-write",
277
+ "publicationCapable": false,
278
+ "capabilityIds": [],
279
+ "credentialMode": "none",
280
+ "publisherWorkflowMode": "fixed",
281
+ "publisherWorkflowPath": ".github/workflows/buildchain-dev-delivery.yml",
282
+ "environment": "",
283
+ "environmentMode": "fixed",
284
+ "runnerPolicy": "unqualified",
285
+ "notes": ""
286
+ },
274
287
  {
275
288
  "workflowPath": ".github/workflows/buildchain-patrol-daily.yml",
276
289
  "authorityClass": "governance-write",
@@ -362,6 +375,32 @@
362
375
  "runnerPolicy": "unqualified",
363
376
  "notes": ""
364
377
  },
378
+ {
379
+ "workflowPath": ".github/workflows/dev-delivery-warrant-cancel.yml",
380
+ "authorityClass": "governance-write",
381
+ "publicationCapable": false,
382
+ "capabilityIds": [],
383
+ "credentialMode": "none",
384
+ "publisherWorkflowMode": "fixed",
385
+ "publisherWorkflowPath": ".github/workflows/dev-delivery-warrant-cancel.yml",
386
+ "environment": "",
387
+ "environmentMode": "fixed",
388
+ "runnerPolicy": "unqualified",
389
+ "notes": ""
390
+ },
391
+ {
392
+ "workflowPath": ".github/workflows/dev-delivery-warrant-close.yml",
393
+ "authorityClass": "governance-write",
394
+ "publicationCapable": false,
395
+ "capabilityIds": [],
396
+ "credentialMode": "none",
397
+ "publisherWorkflowMode": "fixed",
398
+ "publisherWorkflowPath": ".github/workflows/dev-delivery-warrant-close.yml",
399
+ "environment": "",
400
+ "environmentMode": "fixed",
401
+ "runnerPolicy": "unqualified",
402
+ "notes": ""
403
+ },
365
404
  {
366
405
  "workflowPath": ".github/workflows/dev-merge-queue-governance.yml",
367
406
  "authorityClass": "governance-write",
@@ -795,6 +834,18 @@
795
834
  ],
796
835
  "classified": true
797
836
  },
837
+ {
838
+ "path": ".github/workflows/buildchain-candidate-recovery-dogfood-failure.yml",
839
+ "signals": [],
840
+ "classified": false
841
+ },
842
+ {
843
+ "path": ".github/workflows/buildchain-dev-delivery.yml",
844
+ "signals": [
845
+ "write-permission"
846
+ ],
847
+ "classified": true
848
+ },
798
849
  {
799
850
  "path": ".github/workflows/buildchain-patrol-daily.yml",
800
851
  "signals": [
@@ -860,6 +911,20 @@
860
911
  ],
861
912
  "classified": true
862
913
  },
914
+ {
915
+ "path": ".github/workflows/dev-delivery-warrant-cancel.yml",
916
+ "signals": [
917
+ "write-permission"
918
+ ],
919
+ "classified": true
920
+ },
921
+ {
922
+ "path": ".github/workflows/dev-delivery-warrant-close.yml",
923
+ "signals": [
924
+ "write-permission"
925
+ ],
926
+ "classified": true
927
+ },
863
928
  {
864
929
  "path": ".github/workflows/dev-merge-queue-governance.yml",
865
930
  "signals": [],
@@ -1019,5 +1084,5 @@
1019
1084
  "classified": false
1020
1085
  }
1021
1086
  ],
1022
- "registryDigest": "bb343f7253b9497e1c9aee3cea170dd5f33fd5e807ea1de805a0fdda5a904bcc"
1087
+ "registryDigest": "fd4b5def78f58e64badfd6d9d4cce801cab3c15ae81aa89357ef02d15f7ad99d"
1023
1088
  }
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-publication-release-registry",
4
- "generatedAt": "2026-08-03T09:35:55.854Z",
5
- "publishedAt": "2026-08-03T09:35:55.854Z",
4
+ "generatedAt": "2026-08-06T03:18:26.054Z",
5
+ "publishedAt": "2026-08-06T03:18:26.054Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "88a8b532ce69ee3def5926a42c9cd75e4809ae88",
22
+ "sourceRevision": "2e685b037b979732297210d74b480d5e061a7aa4",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -32,7 +32,7 @@
32
32
  },
33
33
  "package": {
34
34
  "name": "@kungfu-tech/buildchain",
35
- "version": "3.0.6-alpha.1",
35
+ "version": "3.0.6-alpha.3",
36
36
  "versionSource": "package.json#version"
37
37
  },
38
38
  "sourceKind": "package-site-bundle",
@@ -25,6 +25,7 @@
25
25
  "./cache-evidence": "./packages/core/cache-evidence.js",
26
26
  "./controller-evidence": "./packages/core/controller-evidence.js",
27
27
  "./diagnostics": "./packages/core/diagnostics.js",
28
+ "./dev-delivery-warrant": "./packages/core/dev-delivery-warrant.js",
28
29
  "./homebrew": "./packages/core/homebrew.js",
29
30
  "./issue-reporting": "./packages/core/issue-reporting.js",
30
31
  "./kfd": "./packages/core/kfd.js",
@@ -47,6 +48,7 @@
47
48
  "./github-governance-authority": "./packages/core/github-governance-authority.js",
48
49
  "./kfd-gate": "./packages/core/kfd-gate.js",
49
50
  "./release-candidate": "./packages/core/release-candidate.js",
51
+ "./release-candidate-recovery": "./packages/core/release-candidate-recovery.js",
50
52
  "./stable-candidate-ledger": "./packages/core/stable-candidate-ledger.js",
51
53
  "./release-passport": "./packages/core/release-passport.js",
52
54
  "./release-passport-contract": "./packages/core/release-passport-contract.js",
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "contract": "kungfu-buildchain-site-manifest",
4
- "generatedAt": "2026-08-03T09:35:55.854Z",
5
- "publishedAt": "2026-08-03T09:35:55.854Z",
4
+ "generatedAt": "2026-08-06T03:18:26.054Z",
5
+ "publishedAt": "2026-08-06T03:18:26.054Z",
6
6
  "reproducible": true,
7
7
  "timestampPolicy": "ci-injected",
8
8
  "deterministicInputs": [
@@ -19,7 +19,7 @@
19
19
  "declared Buildchain surface manifest contract"
20
20
  ],
21
21
  "sourceDateEpoch": "0",
22
- "sourceRevision": "88a8b532ce69ee3def5926a42c9cd75e4809ae88",
22
+ "sourceRevision": "2e685b037b979732297210d74b480d5e061a7aa4",
23
23
  "timestampPolicyDetails": {
24
24
  "contract": "kungfu-buildchain-surface-timestamp-policy",
25
25
  "timestampFields": [
@@ -37,7 +37,7 @@
37
37
  },
38
38
  "package": {
39
39
  "name": "@kungfu-tech/buildchain",
40
- "version": "3.0.6-alpha.1",
40
+ "version": "3.0.6-alpha.3",
41
41
  "versionSource": "package.json#version"
42
42
  },
43
43
  "entrypoint": "buildchain-site.json",
@@ -53,7 +53,7 @@
53
53
  "path": "docs/MAP.md",
54
54
  "plane": "use",
55
55
  "exists": true,
56
- "digest": "sha256:0ea7f59030e5a087e3ff7e9eb591fec8d92c64399799e554aa1fa7ecb6a263ae"
56
+ "digest": "sha256:d76416d8cd04dcdb560b7d06fef287fa22d6b186a729cb92cd4cf71cebbac1e9"
57
57
  },
58
58
  {
59
59
  "id": "getting-started",
@@ -69,7 +69,7 @@
69
69
  "path": "docs/auditable-demo.md",
70
70
  "plane": "verify",
71
71
  "exists": true,
72
- "digest": "sha256:7e1426d8200bd4e7a7e6684c872f47075cd37d0bddbb262ea3263eaad846b540"
72
+ "digest": "sha256:c49e734fdfe3b74d317e23a523e198f1194b2c7cd16cca87e8e3a3ffc7bf589f"
73
73
  },
74
74
  {
75
75
  "id": "install",
@@ -109,7 +109,7 @@
109
109
  "path": "docs/publication-authority.md",
110
110
  "plane": "verify",
111
111
  "exists": true,
112
- "digest": "sha256:6c91ee89d1ed5c0c570806684738916876556b2f1bcbf4be4f73f30ff89e98a4"
112
+ "digest": "sha256:a1650158943d95b979d164ca98a73d7919fda577d648e4a4a9d04588ec698796"
113
113
  },
114
114
  {
115
115
  "id": "github-governance-authority",
@@ -125,7 +125,7 @@
125
125
  "path": "docs/release-candidate.md",
126
126
  "plane": "verify",
127
127
  "exists": true,
128
- "digest": "sha256:fbcffddf1e2c50502186b7ba557e29f96be59a1da6d438aabd4d1f9ce32b5915"
128
+ "digest": "sha256:71161bb57229fe6b66ca131189d3ff3f1dd1a8ca7f6894aa1f596827cb8167f3"
129
129
  },
130
130
  {
131
131
  "id": "release-propagation",
@@ -229,7 +229,7 @@
229
229
  "path": "docs/cli-reference.md",
230
230
  "plane": "use",
231
231
  "exists": true,
232
- "digest": "sha256:73d34a3b46ecfb772b806f0d79754772446fcc13d7f349b508a0c0212e97fcec"
232
+ "digest": "sha256:2365e125d38e43b68a4af277a91be7aca708a8bf785954ed4589dbd9a5d8db97"
233
233
  },
234
234
  {
235
235
  "id": "node-api-reference",
@@ -237,7 +237,7 @@
237
237
  "path": "docs/node-api-reference.md",
238
238
  "plane": "use",
239
239
  "exists": true,
240
- "digest": "sha256:ae49a589091d1ab91d29f2d6ac52cf2551a9d0b1f78350965b408f40fd219e29"
240
+ "digest": "sha256:3fbfe0227cf929f0ddc2050605d071643cee0b302a4c31920b4f9047c923ae8c"
241
241
  },
242
242
  {
243
243
  "id": "build-facts",
@@ -277,7 +277,7 @@
277
277
  "path": "docs/reusable-build-surface.md",
278
278
  "plane": "use",
279
279
  "exists": true,
280
- "digest": "sha256:fe06637d604101269b013163be558c1ecc842276e27f2b5abfb6eea39e98feb0"
280
+ "digest": "sha256:7bc04f658d7e298872756278c60143d8edf5dfb841d0b0d3ea62af8028735b54"
281
281
  },
282
282
  {
283
283
  "id": "publish-transaction",
@@ -285,7 +285,7 @@
285
285
  "path": "docs/publish-transaction.md",
286
286
  "plane": "verify",
287
287
  "exists": true,
288
- "digest": "sha256:3a9ef099d5d93d9b558c7b6a0aa4403dfcce1479ce5d6fc36ecb3e34cdd5bb6d"
288
+ "digest": "sha256:72466943bb459f6857f23ac6f92bcf4714dcd2f535c38a9f0e34864b36404e06"
289
289
  },
290
290
  {
291
291
  "id": "release-governance",
@@ -293,7 +293,7 @@
293
293
  "path": "docs/release-governance.md",
294
294
  "plane": "why",
295
295
  "exists": true,
296
- "digest": "sha256:fc7f0add1afce775c327d50a1e269a7040865e65ca2441dbeb8d0373c5f8d5aa"
296
+ "digest": "sha256:481640f398d966dca4f1f2e29a8100f0f479315ee19e65b0e259720f2b61213f"
297
297
  },
298
298
  {
299
299
  "id": "release-flow",
@@ -317,7 +317,7 @@
317
317
  "path": "docs/versioning.md",
318
318
  "plane": "why",
319
319
  "exists": true,
320
- "digest": "sha256:bdb155e873f9c2ea5cd40bdde057d2c2f90322f0d4575de77fe1670bd040e643"
320
+ "digest": "sha256:793db9414d11aeb314ff2d37a52481826ca5f636d08eaf93772d37962a51484f"
321
321
  },
322
322
  {
323
323
  "id": "web-surface-deployments",
@@ -176,9 +176,10 @@
176
176
  "shifu-cache-profile-ref",
177
177
  "untrusted-policy",
178
178
  "verify-command",
179
+ "verify-substage-evidence-path",
179
180
  "working-directory"
180
181
  ],
181
- "inputCount": 85,
182
+ "inputCount": 86,
182
183
  "secrets": [
183
184
  "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
184
185
  "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -283,12 +284,13 @@
283
284
  "materialize",
284
285
  "materialize-base-ref",
285
286
  "media-profile",
287
+ "render-failure-advisory",
286
288
  "render-media",
287
289
  "renderer-image",
288
290
  "scenario-path",
289
291
  "source-ref"
290
292
  ],
291
- "inputCount": 11,
293
+ "inputCount": 12,
292
294
  "secrets": [
293
295
  "DEMO_UPDATE_TOKEN"
294
296
  ],
@@ -299,9 +301,10 @@
299
301
  "evidence-artifact-digest",
300
302
  "evidence-artifact-name",
301
303
  "publication-pr-url",
304
+ "render-result",
302
305
  "source-sha"
303
306
  ],
304
- "outputCount": 6,
307
+ "outputCount": 7,
305
308
  "surface": "declarative-auditable-demo",
306
309
  "capabilityGroup": "api-cli-reference",
307
310
  "status": "preview",
@@ -392,6 +395,7 @@
392
395
  "auto-no-gate",
393
396
  "buildchain-ref",
394
397
  "buildchain-repository",
398
+ "consumer-gate-command",
395
399
  "consumer-predicate-digest",
396
400
  "consumer-predicate-id",
397
401
  "consumer-qualification-required",
@@ -419,7 +423,7 @@
419
423
  "target-ref",
420
424
  "used-nonces-json"
421
425
  ],
422
- "inputCount": 33,
426
+ "inputCount": 34,
423
427
  "secrets": [
424
428
  "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY"
425
429
  ],
@@ -491,6 +495,7 @@
491
495
  "publication-control-plane-audit-json",
492
496
  "publication-expected-json",
493
497
  "publication-gate-aggregate-json",
498
+ "publication-gate-command",
494
499
  "publication-package-name",
495
500
  "publication-product",
496
501
  "publication-publisher-workflow-path",
@@ -514,6 +519,7 @@
514
519
  "release-candidate-family-evidence-required",
515
520
  "release-candidate-family-evidence-root",
516
521
  "release-candidate-family-initiative-id",
522
+ "release-candidate-wait-seconds",
517
523
  "release-candidate-workflow-file",
518
524
  "release-candidate-workflow-name",
519
525
  "release-passport",
@@ -538,13 +544,22 @@
538
544
  "release-propagation-config-path",
539
545
  "required-artifact-count",
540
546
  "required-status-check",
547
+ "resume-buildchain-runtime-sha",
548
+ "resume-candidate-repository",
549
+ "resume-candidate-run-id",
550
+ "resume-expected-candidate-root",
551
+ "resume-expected-candidate-runtime-sha",
552
+ "resume-expected-source-tree",
553
+ "resume-expected-workflow-file",
554
+ "resume-expected-workflow-name",
555
+ "resume-transaction-id",
541
556
  "runner-preset",
542
557
  "standalone-binary-distribution",
543
558
  "target-ref",
544
559
  "target-sha",
545
560
  "trusted-publishing"
546
561
  ],
547
- "inputCount": 95,
562
+ "inputCount": 106,
548
563
  "secrets": [
549
564
  "BUILDCHAIN_ISSUE_APP_ID",
550
565
  "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -577,10 +592,13 @@
577
592
  "publication-commit-evidence-path",
578
593
  "publication-commit-payload-root",
579
594
  "publication-commit-url",
595
+ "release-candidate-action",
580
596
  "release-candidate-artifact",
597
+ "release-candidate-recovery-receipt-artifact",
598
+ "release-candidate-recovery-root",
581
599
  "release-propagation-work-artifact"
582
600
  ],
583
- "outputCount": 20,
601
+ "outputCount": 23,
584
602
  "surface": "reusable-workflow",
585
603
  "capabilityGroup": "api-cli-reference",
586
604
  "status": "active",
@@ -1271,9 +1289,10 @@
1271
1289
  "shifu-cache-profile-ref",
1272
1290
  "untrusted-policy",
1273
1291
  "verify-command",
1292
+ "verify-substage-evidence-path",
1274
1293
  "working-directory"
1275
1294
  ],
1276
- "inputCount": 88,
1295
+ "inputCount": 89,
1277
1296
  "secrets": [
1278
1297
  "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
1279
1298
  "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -1367,6 +1386,48 @@
1367
1386
  "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
1368
1387
  "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
1369
1388
  },
1389
+ {
1390
+ "id": "buildchain-candidate-recovery-dogfood-failure",
1391
+ "path": ".github/workflows/buildchain-candidate-recovery-dogfood-failure.yml",
1392
+ "reusable": false,
1393
+ "inputs": [],
1394
+ "inputCount": 0,
1395
+ "secrets": [],
1396
+ "secretCount": 0,
1397
+ "outputs": [],
1398
+ "outputCount": 0,
1399
+ "surface": "repository-workflow",
1400
+ "capabilityGroup": "api-cli-reference",
1401
+ "status": "active",
1402
+ "owner": "buildchain-workflows",
1403
+ "maturity": "active",
1404
+ "introducedVersion": "pre-3.0.2-alpha.4",
1405
+ "compatibilityPromise": "preserved-through-the-v3-major-line",
1406
+ "deprecationReplacement": "",
1407
+ "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
1408
+ "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
1409
+ },
1410
+ {
1411
+ "id": "buildchain-dev-delivery",
1412
+ "path": ".github/workflows/buildchain-dev-delivery.yml",
1413
+ "reusable": false,
1414
+ "inputs": [],
1415
+ "inputCount": 0,
1416
+ "secrets": [],
1417
+ "secretCount": 0,
1418
+ "outputs": [],
1419
+ "outputCount": 0,
1420
+ "surface": "dev-governance",
1421
+ "capabilityGroup": "governance-versioning",
1422
+ "status": "active",
1423
+ "owner": "buildchain-workflows",
1424
+ "maturity": "active",
1425
+ "introducedVersion": "pre-3.0.2-alpha.4",
1426
+ "compatibilityPromise": "preserved-through-the-v3-major-line",
1427
+ "deprecationReplacement": "",
1428
+ "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
1429
+ "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
1430
+ },
1370
1431
  {
1371
1432
  "id": "buildchain-patrol-daily",
1372
1433
  "path": ".github/workflows/buildchain-patrol-daily.yml",
@@ -1647,6 +1708,87 @@
1647
1708
  "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
1648
1709
  "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
1649
1710
  },
1711
+ {
1712
+ "id": "dev-delivery-warrant-cancel",
1713
+ "path": ".github/workflows/dev-delivery-warrant-cancel.yml",
1714
+ "reusable": true,
1715
+ "inputs": [
1716
+ "buildchain-ref",
1717
+ "buildchain-repository",
1718
+ "event-action",
1719
+ "expected-candidate-id",
1720
+ "expected-old-state-root",
1721
+ "expected-pr-number",
1722
+ "expected-source-head-sha",
1723
+ "observed-source-head-sha",
1724
+ "outcome",
1725
+ "reason",
1726
+ "target-branch",
1727
+ "terminal-evidence-root"
1728
+ ],
1729
+ "inputCount": 12,
1730
+ "secrets": [
1731
+ "github-token"
1732
+ ],
1733
+ "secretCount": 1,
1734
+ "outputs": [
1735
+ "cancellation-action",
1736
+ "cancellation-receipt-root",
1737
+ "final-state-root"
1738
+ ],
1739
+ "outputCount": 3,
1740
+ "surface": "repository-workflow",
1741
+ "capabilityGroup": "governance-versioning",
1742
+ "status": "active",
1743
+ "owner": "buildchain-workflows",
1744
+ "maturity": "active",
1745
+ "introducedVersion": "pre-3.0.2-alpha.4",
1746
+ "compatibilityPromise": "preserved-through-the-v3-major-line",
1747
+ "deprecationReplacement": "",
1748
+ "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
1749
+ "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
1750
+ },
1751
+ {
1752
+ "id": "dev-delivery-warrant-close",
1753
+ "path": ".github/workflows/dev-delivery-warrant-close.yml",
1754
+ "reusable": true,
1755
+ "inputs": [
1756
+ "buildchain-ref",
1757
+ "buildchain-repository",
1758
+ "current-base-sha",
1759
+ "expected-head-sha",
1760
+ "expected-pr-number",
1761
+ "merge-group-head-sha",
1762
+ "merge-group-tree-sha",
1763
+ "outcome",
1764
+ "reason",
1765
+ "replay-tree-sha",
1766
+ "required-context-roots-json",
1767
+ "target-branch",
1768
+ "terminal-evidence-root"
1769
+ ],
1770
+ "inputCount": 13,
1771
+ "secrets": [
1772
+ "github-token"
1773
+ ],
1774
+ "secretCount": 1,
1775
+ "outputs": [
1776
+ "close-receipt-root",
1777
+ "final-state-root",
1778
+ "integration-proof-root"
1779
+ ],
1780
+ "outputCount": 3,
1781
+ "surface": "repository-workflow",
1782
+ "capabilityGroup": "governance-versioning",
1783
+ "status": "active",
1784
+ "owner": "buildchain-workflows",
1785
+ "maturity": "active",
1786
+ "introducedVersion": "pre-3.0.2-alpha.4",
1787
+ "compatibilityPromise": "preserved-through-the-v3-major-line",
1788
+ "deprecationReplacement": "",
1789
+ "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
1790
+ "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
1791
+ },
1650
1792
  {
1651
1793
  "id": "dev-merge-queue-governance",
1652
1794
  "path": ".github/workflows/dev-merge-queue-governance.yml",
@@ -1673,35 +1815,60 @@
1673
1815
  "path": ".github/workflows/dev-pr-auto-merge.yml",
1674
1816
  "reusable": true,
1675
1817
  "inputs": [
1818
+ "affected-paths-json",
1676
1819
  "allowed-head-prefixes",
1820
+ "assignment-root",
1677
1821
  "block-labels",
1678
1822
  "buildchain-ref",
1679
1823
  "buildchain-repository",
1824
+ "closure-root",
1825
+ "delivery-class",
1826
+ "delivery-priority",
1827
+ "delivery-warrant-mode",
1828
+ "dependency-root",
1829
+ "diagnostic-context",
1680
1830
  "dry-run",
1831
+ "expected-head-sha",
1832
+ "expected-pr-number",
1833
+ "initiative-root",
1681
1834
  "landing-mode",
1682
1835
  "max-merges",
1683
1836
  "merge-method",
1837
+ "plan-root",
1838
+ "project-cut-proof-json",
1684
1839
  "queue-admission-context",
1685
1840
  "ready-label",
1686
1841
  "require-approval",
1687
1842
  "required-status-checks",
1688
1843
  "same-repository-only",
1689
- "target-branch"
1690
- ],
1691
- "inputCount": 14,
1844
+ "shard-evidence-roots-json",
1845
+ "source-identity-root",
1846
+ "source-patch-root",
1847
+ "target-branch",
1848
+ "toolchain-root",
1849
+ "warrant-lease-seconds"
1850
+ ],
1851
+ "inputCount": 32,
1692
1852
  "secrets": [
1693
1853
  "github-token"
1694
1854
  ],
1695
1855
  "secretCount": 1,
1696
1856
  "outputs": [
1697
1857
  "action-count",
1858
+ "admission-receipt-root",
1859
+ "admission-state",
1698
1860
  "enqueued-count",
1699
1861
  "evaluated-count",
1700
1862
  "final-base-sha",
1701
1863
  "merged-count",
1702
- "skipped-count"
1864
+ "project-cut-proof-root",
1865
+ "skipped-count",
1866
+ "source-proof-root",
1867
+ "warrant-receipt-root",
1868
+ "warrant-state-commit",
1869
+ "warrant-state-root"
1703
1870
  ],
1704
- "outputCount": 6,
1871
+ "outputCount": 13,
1705
1872
  "surface": "dev-governance",
1706
1873
  "capabilityGroup": "governance-versioning",
1707
1874
  "status": "active",
@@ -2220,6 +2387,7 @@
2220
2387
  "publication-control-plane-audit-json",
2221
2388
  "publication-expected-json",
2222
2389
  "publication-gate-aggregate-json",
2390
+ "publication-gate-command",
2223
2391
  "publication-package-name",
2224
2392
  "publication-product",
2225
2393
  "publication-publisher-workflow-path",
@@ -2243,6 +2411,7 @@
2243
2411
  "release-candidate-family-evidence-required",
2244
2412
  "release-candidate-family-evidence-root",
2245
2413
  "release-candidate-family-initiative-id",
2414
+ "release-candidate-wait-seconds",
2246
2415
  "release-candidate-workflow-file",
2247
2416
  "release-candidate-workflow-name",
2248
2417
  "release-passport",
@@ -2267,13 +2436,22 @@
2267
2436
  "release-propagation-config-path",
2268
2437
  "required-artifact-count",
2269
2438
  "required-status-check",
2439
+ "resume-buildchain-runtime-sha",
2440
+ "resume-candidate-repository",
2441
+ "resume-candidate-run-id",
2442
+ "resume-expected-candidate-root",
2443
+ "resume-expected-candidate-runtime-sha",
2444
+ "resume-expected-source-tree",
2445
+ "resume-expected-workflow-file",
2446
+ "resume-expected-workflow-name",
2447
+ "resume-transaction-id",
2270
2448
  "runner-preset",
2271
2449
  "standalone-binary-distribution",
2272
2450
  "target-ref",
2273
2451
  "target-sha",
2274
2452
  "trusted-publishing"
2275
2453
  ],
2276
- "inputCount": 87,
2454
+ "inputCount": 98,
2277
2455
  "secrets": [
2278
2456
  "BUILDCHAIN_ISSUE_APP_ID",
2279
2457
  "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -2318,10 +2496,13 @@
2318
2496
  "publication-commit-evidence-path",
2319
2497
  "publication-commit-payload-root",
2320
2498
  "publication-commit-url",
2499
+ "release-candidate-action",
2321
2500
  "release-candidate-artifact",
2501
+ "release-candidate-recovery-receipt-artifact",
2502
+ "release-candidate-recovery-root",
2322
2503
  "release-propagation-work-artifact"
2323
2504
  ],
2324
- "outputCount": 32,
2505
+ "outputCount": 35,
2325
2506
  "surface": "release-governance",
2326
2507
  "capabilityGroup": "reusable-build",
2327
2508
  "status": "active",
@@ -2836,10 +3017,11 @@
2836
3017
  "required",
2837
3018
  "sample-process-tree",
2838
3019
  "stage",
3020
+ "substage-evidence-path",
2839
3021
  "summary-path",
2840
3022
  "timeout-minutes"
2841
3023
  ],
2842
- "inputCount": 21,
3024
+ "inputCount": 22,
2843
3025
  "capabilityGroup": "reusable-build",
2844
3026
  "status": "active",
2845
3027
  "owner": "buildchain-actions",
package/docs/MAP.md CHANGED
@@ -111,6 +111,7 @@ replace them.
111
111
  | Why does Buildchain use branch-driven release governance? | [`release-governance.md`](release-governance.md) | why | stable |
112
112
  | How do protected dev branches and scheduled ready-PR merging work? | [`release-governance.md`](release-governance.md#protected-dev-branches) | use | stable |
113
113
  | How do slow required checks land reliably on a busy dev channel? | [`release-governance.md`](release-governance.md#protected-dev-branches) + [`cli.md`](cli.md#commands) | use | preview |
114
+ | How does the durable fair Dev Delivery Warrant Queue prevent slow-candidate starvation? | [`dev-delivery-warrant.md`](dev-delivery-warrant.md) | use/verify | preview |
114
115
  | How do I coalesce rapid Dev changes, preserve release runner priority, and retry only transient failed jobs? | [`dev-qualification-patrol.md`](dev-qualification-patrol.md) | use/verify | preview |
115
116
  | How do I run daily, weekly, or monthly repository patrols? | [`release-governance.md`](release-governance.md#buildchain-patrol) | use | stable |
116
117
  | How does Buildchain decide patch, minor, and major release lines? | [`versioning.md`](versioning.md) | why | stable |