@kungfu-tech/buildchain 3.0.6 → 3.0.7-alpha.0

package/dist/site/public-surface-audit.json

@@ -3,15 +3,20 @@
   "contract": "kungfu-buildchain-public-surface-reverse-audit",
   "status": "passed",
   "summary": {
-    "cliCommandCount": 112,
-    "workflowCount": 64,
-    "actionCount": 6,
-    "sitePageCount": 65,
-    "docCommandRefCount": 881,
+    "cliCommandCount": 114,
+    "workflowCount": 65,
+    "actionCount": 7,
+    "sitePageCount": 69,
+    "docCommandRefCount": 922,
     "failureCount": 0
   },
   "enumerated": {
     "cliCommands": [
+      {
+        "id": "architecture",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain architecture validate [--cwd <dir>] [--json]"
+      },
       {
         "id": "audit",
         "source": "bin/buildchain.mjs",
@@ -492,6 +497,11 @@
         "source": "bin/buildchain.mjs",
         "usage": "buildchain release-propagation <plan|write-lock|work|entry|pickup> ..."
       },
+      {
+        "id": "release-tail",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain release-tail plan --declaration <json-or-path> [--output <path>]"
+      },
       {
         "id": "release-transaction",
         "source": "bin/buildchain.mjs",
@@ -968,6 +978,7 @@
           "buildchain-ref",
           "buildchain-repository",
           "channel",
+          "declarative-release-tail",
           "dry-run",
           "github-artifact-attestation-environment",
           "github-artifact-attestation-policy-json",
@@ -990,12 +1001,14 @@
           "promotion-shell-sha",
           "promotion-target-ref",
           "publication-admission-json",
+          "publication-authority-workflow-path",
           "publication-auto-admission",
           "publication-auto-no-gate",
           "publication-commit-command",
           "publication-commit-evidence-path",
           "publication-consumer-predicate-id",
           "publication-consumer-qualification-command",
+          "publication-consumer-qualification-controller-sha",
           "publication-control-plane-audit-json",
           "publication-expected-json",
           "publication-gate-aggregate-json",
@@ -1064,7 +1077,7 @@
           "target-sha",
           "trusted-publishing"
         ],
-        "inputCount": 107,
+        "inputCount": 110,
         "secrets": [
           "BUILDCHAIN_ISSUE_APP_ID",
           "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -1101,9 +1114,14 @@
           "release-candidate-artifact",
           "release-candidate-recovery-receipt-artifact",
           "release-candidate-recovery-root",
-          "release-propagation-work-artifact"
+          "release-propagation-work-artifact",
+          "release-tail-declaration-root",
+          "release-tail-receipt-roots-json",
+          "release-tail-state-root",
+          "release-tail-transaction-root",
+          "release-tail-transaction-state"
         ],
-        "outputCount": 23
+        "outputCount": 28
       },
       {
         "id": ".release-docker",
@@ -2402,6 +2420,7 @@
           "buildchain-repository",
           "buildchain-stable-contract-lock-path",
           "channel",
+          "declarative-release-tail",
           "dry-run",
           "github-artifact-attestation-environment",
           "github-artifact-attestation-policy-json",
@@ -2419,6 +2438,7 @@
           "publication-commit-evidence-path",
           "publication-consumer-predicate-id",
           "publication-consumer-qualification-command",
+          "publication-consumer-qualification-controller-sha",
           "publication-control-plane-audit-json",
           "publication-expected-json",
           "publication-gate-aggregate-json",
@@ -2487,7 +2507,7 @@
           "target-sha",
           "trusted-publishing"
         ],
-        "inputCount": 99,
+        "inputCount": 101,
         "secrets": [
           "BUILDCHAIN_ISSUE_APP_ID",
           "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -2536,9 +2556,14 @@
           "release-candidate-artifact",
           "release-candidate-recovery-receipt-artifact",
           "release-candidate-recovery-root",
-          "release-propagation-work-artifact"
+          "release-propagation-work-artifact",
+          "release-tail-declaration-root",
+          "release-tail-receipt-roots-json",
+          "release-tail-state-root",
+          "release-tail-transaction-root",
+          "release-tail-transaction-state"
         ],
-        "outputCount": 35
+        "outputCount": 40
       },
       {
         "id": "release-governance-reconcile",
@@ -2628,6 +2653,32 @@
         ],
         "outputCount": 13
       },
+      {
+        "id": "release-tail",
+        "path": ".github/workflows/release-tail.yml",
+        "reusable": true,
+        "inputs": [
+          "buildchain-ref",
+          "capsule-contract",
+          "capsule-path",
+          "capsule-root",
+          "evidence-path",
+          "state-path"
+        ],
+        "inputCount": 6,
+        "secrets": [
+          "http-token"
+        ],
+        "secretCount": 1,
+        "outputs": [
+          "binding-root",
+          "evidence-root",
+          "state-root",
+          "transaction-root",
+          "transaction-state"
+        ],
+        "outputCount": 5
+      },
       {
         "id": "release-verify",
         "path": ".github/workflows/release-verify.yml",
@@ -2768,6 +2819,7 @@
           "branch-protection-bypass-apps",
           "branch-protection-bypass-teams",
           "branch-protection-bypass-users",
+          "declarative-release-tail",
           "dry-run",
           "expected-publication-version",
           "generated-pull-request-token",
@@ -2777,6 +2829,7 @@
           "github-release-artifact-paths",
           "github-release-notes",
           "github-release-title",
+          "plan-before-target-advance",
           "promote-only-release-candidate",
           "publication-capability-json",
           "publication-gate-aggregate-json",
@@ -2829,6 +2882,7 @@
           "release-passport-platform-manifest-paths",
           "release-passport-product-name",
           "release-passport-promotion-routing-json",
+          "release-tail-state-path",
           "require-governance",
           "require-publication-qualification",
           "require-publish-source-lock",
@@ -2841,7 +2895,21 @@
           "transaction-state-path",
           "verification-command"
         ],
-        "inputCount": 76
+        "inputCount": 79
+      },
+      {
+        "id": "release-tail",
+        "path": "actions/release-tail/action.yml",
+        "inputs": [
+          "capsule",
+          "capsule-contract",
+          "capsule-root",
+          "evidence-path",
+          "github-token",
+          "http-token",
+          "state-path"
+        ],
+        "inputCount": 7
       },
       {
         "id": "report-buildchain-issue",
@@ -2946,6 +3014,10 @@
         "id": "action:promote-buildchain-ref",
         "category": "action"
       },
+      {
+        "id": "action:release-tail",
+        "category": "action"
+      },
       {
         "id": "action:report-buildchain-issue",
         "category": "action"
@@ -3126,6 +3198,10 @@
         "id": "manual:publication-authority",
         "category": "manual"
       },
+      {
+        "id": "manual:publication-rehearsal",
+        "category": "manual"
+      },
       {
         "id": "manual:publish-transaction",
         "category": "manual"
@@ -3158,6 +3234,14 @@
         "id": "manual:release-propagation",
         "category": "manual"
       },
+      {
+        "id": "manual:release-tail-contract",
+        "category": "manual"
+      },
+      {
+        "id": "manual:release-tail-provider-plane",
+        "category": "manual"
+      },
       {
         "id": "manual:reusable-build-surface",
         "category": "manual"
@@ -3196,6 +3280,81 @@
       }
     ],
     "docCommandRefs": [
+      {
+        "id": "architecture",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain architecture"
+      },
+      {
+        "id": "architecture",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain architecture list"
+      },
+      {
+        "id": "architecture",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain architecture qualify --authority-revision"
+      },
+      {
+        "id": "architecture",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain architecture show"
+      },
+      {
+        "id": "architecture",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain architecture validate"
+      },
+      {
+        "id": "architecture",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain architecture"
+      },
+      {
+        "id": "architecture",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain architecture --help"
+      },
+      {
+        "id": "architecture",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain architecture list"
+      },
+      {
+        "id": "architecture",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain architecture list --help"
+      },
+      {
+        "id": "architecture",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain architecture qualify"
+      },
+      {
+        "id": "architecture",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain architecture qualify --help"
+      },
+      {
+        "id": "architecture",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain architecture show"
+      },
+      {
+        "id": "architecture",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain architecture show --help"
+      },
+      {
+        "id": "architecture",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain architecture validate"
+      },
+      {
+        "id": "architecture",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain architecture validate --help"
+      },
       {
         "id": "audit",
         "path": "docs/cli-reference.md",
@@ -6966,6 +7125,136 @@
         "path": "docs/release-propagation.md",
         "command": "buildchain release-propagation work push-branch"
       },
+      {
+        "id": "release-tail",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain release-tail"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain release-tail compat --hooks-json"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain release-tail init --declaration"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain release-tail plan --declaration"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain release-tail rehearse --capsule"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain release-tail"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain release-tail"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain release-tail"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain release-tail --help"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain release-tail compat"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain release-tail compat --help"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain release-tail init"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain release-tail init --help"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain release-tail plan"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain release-tail plan --help"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain release-tail rehearse"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain release-tail rehearse --help"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain release-tail status"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain release-tail status --help"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain release-tail verify"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/cli-reference.md",
+        "command": "buildchain release-tail verify --help"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/publication-rehearsal.md",
+        "command": "buildchain release-tail rehearse"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/release-tail-provider-plane.md",
+        "command": "buildchain release-tail plan --declaration"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/release-tail-provider-plane.md",
+        "command": "buildchain release-tail init --declaration"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/release-tail-provider-plane.md",
+        "command": "buildchain release-tail verify --state"
+      },
+      {
+        "id": "release-tail",
+        "path": "docs/release-tail-provider-plane.md",
+        "command": "buildchain release-tail plan"
+      },
       {
         "id": "release-transaction",
         "path": "docs/cli-reference.md",
@@ -7607,9 +7896,9 @@
     "cliRegistryPath": "dist/site/cli-registry.json",
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
-    "cliRegistryDigest": "2e7804e1fa8ef08bbe59fcf58908e47daef4dc145675fc9a989862671e40f993",
-    "workflowRegistryDigest": "20c6b31e754f9f0ffb15362bd1b646376e9cf2698951d5f502a5bafcdfd523e7",
-    "pageRegistryDigest": "50489f303fc5343c6c13ed307f0f7d008fa8deee7f32dd8ff701d47775b210df"
+    "cliRegistryDigest": "e7b90e95dabcffb3fecb8e84cec48d7a99261c5e90732aff0ebc174b01c4e35c",
+    "workflowRegistryDigest": "47cfb7dbfcdc13f9830c3bc10457cb4c794c4953a584afcf6996b94ed0a6adba",
+    "pageRegistryDigest": "f9d958e6261b25997c2c65c24f3cea8e846ef55091dfa1dbf39a69c6786a30c7"
   },
   "comparison": {
     "missingCliRegistry": [],

package/dist/site/publication-authority-registry.json

@@ -623,6 +623,24 @@
       "runnerPolicy": "unqualified",
       "notes": ""
     },
+    {
+      "workflowPath": ".github/workflows/release-tail.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "artifact.publish",
+        "release.activate",
+        "released-evidence.synthesize",
+        "signed-channel.commit"
+      ],
+      "credentialMode": "caller-secrets",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/release-tail.yml",
+      "environment": "caller-bound",
+      "environmentMode": "caller-bound",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
     {
       "workflowPath": ".github/workflows/release-verify.yml",
       "authorityClass": "governance-write",
@@ -1054,6 +1072,13 @@
       ],
       "classified": true
     },
+    {
+      "path": ".github/workflows/release-tail.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
     {
       "path": ".github/workflows/release-verify.yml",
       "signals": [
@@ -1084,5 +1109,5 @@
       "classified": false
     }
   ],
-  "registryDigest": "fd4b5def78f58e64badfd6d9d4cce801cab3c15ae81aa89357ef02d15f7ad99d"
+  "registryDigest": "1600e39eb978298c3204b3250c479f8451dfe62f552405c7db2ad2142cd93f63"
 }

package/dist/site/publication-registry.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-publication-release-registry",
-  "generatedAt": "2026-08-07T01:27:51.160Z",
-  "publishedAt": "2026-08-07T01:27:51.160Z",
+  "generatedAt": "2026-08-07T20:20:23.000Z",
+  "publishedAt": "2026-08-07T20:20:23.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "4d3415855debb03bac01c4f5d11417f0d1ea42d8",
+  "sourceRevision": "f1f1ef71bc3aa1488876dbb98533fa98cecc4d9a",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "3.0.6",
+    "version": "3.0.7-alpha.0",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/release-provenance.json

@@ -54,6 +54,11 @@
       "./release-passport-contract": "./packages/core/release-passport-contract.js",
       "./release-propagation": "./packages/core/release-propagation.js",
       "./release-activation-transaction": "./packages/core/release-activation-transaction.js",
+      "./release-tail-provider-plane": "./packages/core/release-tail-provider-plane.js",
+      "./release-tail-provider-adapters": "./packages/core/release-tail-provider-adapters.js",
+      "./release-tail-compatibility": "./packages/core/release-tail-compatibility.js",
+      "./publication-rehearsal-runtime": "./packages/core/publication-rehearsal-runtime.js",
+      "./publication-rehearsal-projection": "./packages/core/publication-rehearsal-projection.js",
       "./surface-manifest": "./packages/core/surface-manifest.js",
       "./buildchain-kfd-claims": "./packages/core/buildchain-kfd-claims.js",
       "./site/buildchain-site.json": "./dist/site/buildchain-site.json",