@kungfu-tech/buildchain 3.0.8 → 3.0.9-alpha.0

package/dist/site/public-surface-audit.json

@@ -320,7 +320,7 @@
       {
         "id": "kfd-support",
         "source": "bin/buildchain.mjs",
-        "usage": "buildchain kfd support project --matrix-json <file-or-json> --gate-json <file-or-json>..."
+        "usage": "buildchain kfd support project --manifest-json <file-or-json> --manifest-gate-json <file-or-json>"
       },
       {
         "id": "kfd-upstream-check",
@@ -1054,6 +1054,7 @@
           "release-passport-kfd-3-artifact-verify-command",
           "release-passport-kfd-3-artifact-witness-jsons",
           "release-passport-kfd-3-prebuild-witness-jsons",
+          "release-passport-kfd-adopter-manifest-json",
           "release-passport-kfd-product-gate-jsons",
           "release-passport-kfd-support-matrix-json",
           "release-passport-output-dir",
@@ -1077,7 +1078,7 @@
           "target-sha",
           "trusted-publishing"
         ],
-        "inputCount": 110,
+        "inputCount": 111,
         "secrets": [
           "BUILDCHAIN_ISSUE_APP_ID",
           "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -1899,17 +1900,24 @@
         "secretCount": 1,
         "outputs": [
           "active-candidate-pr",
+          "candidate-generation",
+          "candidate-tree-sha",
           "controller-state",
+          "cut-root",
+          "drift-root",
           "eligible",
+          "hold-root",
           "next-candidate-sha",
           "prior-state-root",
           "promotion-pr",
           "result-path",
+          "runtime-sha",
           "selected-sha",
           "settlement-action",
-          "source-lock-ref"
+          "source-lock-ref",
+          "train-root"
         ],
-        "outputCount": 10
+        "outputCount": 17
       },
       {
         "id": "dev-delivery-warrant-cancel",
@@ -2561,6 +2569,7 @@
           "release-passport-kfd-3-artifact-verify-command",
           "release-passport-kfd-3-artifact-witness-jsons",
           "release-passport-kfd-3-prebuild-witness-jsons",
+          "release-passport-kfd-adopter-manifest-json",
           "release-passport-kfd-product-gate-jsons",
           "release-passport-kfd-support-matrix-json",
           "release-passport-output-dir",
@@ -2584,7 +2593,7 @@
           "target-sha",
           "trusted-publishing"
         ],
-        "inputCount": 101,
+        "inputCount": 102,
         "secrets": [
           "BUILDCHAIN_ISSUE_APP_ID",
           "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -2954,6 +2963,7 @@
           "release-passport-kfd-3-artifact-verify-command",
           "release-passport-kfd-3-artifact-witness-jsons",
           "release-passport-kfd-3-prebuild-witness-jsons",
+          "release-passport-kfd-adopter-manifest-json",
           "release-passport-kfd-product-gate-jsons",
           "release-passport-kfd-support-matrix-json",
           "release-passport-output-dir",
@@ -2973,7 +2983,7 @@
           "transaction-state-path",
           "verification-command"
         ],
-        "inputCount": 80
+        "inputCount": 81
       },
       {
         "id": "release-tail",
@@ -7992,9 +8002,9 @@
     "cliRegistryPath": "dist/site/cli-registry.json",
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
-    "cliRegistryDigest": "e7b90e95dabcffb3fecb8e84cec48d7a99261c5e90732aff0ebc174b01c4e35c",
-    "workflowRegistryDigest": "964686c03a329b906a9f832d81c60eed8a50d2d2770b9b9f4ede2dbe32f9b98b",
-    "pageRegistryDigest": "83e4701148132712b684efb1f474943752ad8371e60f598f162b553f504e987f"
+    "cliRegistryDigest": "099c0db9c5346942aee236af2cb7b6a7a91fbb2c54ebb17b7a2544a339c00d40",
+    "workflowRegistryDigest": "7620a721ba5b6a49aecea324e64b3c1ba2086f05eebd2b287b88d67fa6e904c6",
+    "pageRegistryDigest": "e3b142a9012a80b0478a48431fd2a3d5290301b667ceb565fb7314ef7f693214"
   },
   "comparison": {
     "missingCliRegistry": [],

package/dist/site/publication-registry.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-publication-release-registry",
-  "generatedAt": "2026-08-11T00:43:51.000Z",
-  "publishedAt": "2026-08-11T00:43:51.000Z",
+  "generatedAt": "2026-08-11T02:37:23.000Z",
+  "publishedAt": "2026-08-11T02:37:23.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "827fa0252c0546816c33ec89e66ca505ad6d5162",
+  "sourceRevision": "6af9bdc4632a39f0c6af9aec6f856d885698d019",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "3.0.8",
+    "version": "3.0.9-alpha.0",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/release-passport-check-manifest.json

@@ -16,10 +16,11 @@
       "result": "check-report.json"
     },
     "kfdSupportProjection": {
-      "inputSchema": "schemas/kfd-product-gate-input-v1.schema.json",
-      "projectionSchema": "schemas/kfd-support-projection-v1.schema.json",
+      "authorityContract": "kfd.adopter-conformance-manifest/v1",
+      "gateContract": "kungfu-buildchain-kfd-adopter-manifest-gate",
+      "bindingContract": "kungfu-buildchain-kfd-adopter-release-binding",
       "evidence": "kfd-support.json",
-      "rule": "The passport mirrors one product-owned support matrix and validated product-gate results without widening any claim state."
+      "rule": "The standard adopter manifest is the sole declaration authority; the legacy support matrix is an exact derived projection only."
     }
   },
   "ownership": {
@@ -42,6 +43,7 @@
       "platformArtifactManifests",
       "distTagPromotion",
       "controllerReceipts",
+      "kfdAdopter",
       "kfdSupport",
       "githubArtifactAttestations",
       "artifacts",
@@ -78,7 +80,16 @@
           "agentRuntimeAdapterRequest": "https://kfd.libkungfu.dev/schemas/kfd-agent-runtime/adapter-request.schema.json",
           "agentRuntimeAdapterResponse": "https://kfd.libkungfu.dev/schemas/kfd-agent-runtime/adapter-response.schema.json",
           "agentRuntimeSuite": "https://kfd.libkungfu.dev/schemas/kfd-agent-runtime/suite.schema.json",
-          "agentRuntimeReport": "https://kfd.libkungfu.dev/schemas/kfd-agent-runtime/report.schema.json"
+          "agentRuntimeReport": "https://kfd.libkungfu.dev/schemas/kfd-agent-runtime/report.schema.json",
+          "selfConformanceState": "https://kfd.libkungfu.dev/schemas/kfd-self-conformance/state.schema.json",
+          "selfConformanceBootstrapAnchor": "https://kfd.libkungfu.dev/schemas/kfd-self-conformance/bootstrap-anchor.schema.json",
+          "selfConformanceTransitionBundle": "https://kfd.libkungfu.dev/schemas/kfd-self-conformance/transition-bundle.schema.json",
+          "selfConformanceTransitionReport": "https://kfd.libkungfu.dev/schemas/kfd-self-conformance/transition-report.schema.json",
+          "selfConformancePackageManifest": "https://kfd.libkungfu.dev/schemas/kfd-self-conformance/package-manifest.schema.json",
+          "selfConformanceVectorRegistry": "https://kfd.libkungfu.dev/schemas/kfd-self-conformance/vector-registry.schema.json",
+          "selfConformanceLifecycleGateRequest": "https://kfd.libkungfu.dev/schemas/kfd-self-conformance/lifecycle-gate-request.schema.json",
+          "selfConformanceLifecycleGateReport": "https://kfd.libkungfu.dev/schemas/kfd-self-conformance/lifecycle-gate-report.schema.json",
+          "adopterConformanceManifest": "https://kfd.libkungfu.dev/schemas/kfd-adopter-conformance/manifest.schema.json"
         },
         "schemaPaths": {
           "metadata": "schemas/kfd-standards.schema.json",
@@ -100,7 +111,16 @@
           "agentRuntimeAdapterRequest": "schemas/kfd-agent-runtime/adapter-request.schema.json",
           "agentRuntimeAdapterResponse": "schemas/kfd-agent-runtime/adapter-response.schema.json",
           "agentRuntimeSuite": "schemas/kfd-agent-runtime/suite.schema.json",
-          "agentRuntimeReport": "schemas/kfd-agent-runtime/report.schema.json"
+          "agentRuntimeReport": "schemas/kfd-agent-runtime/report.schema.json",
+          "selfConformanceState": "schemas/kfd-self-conformance/state.schema.json",
+          "selfConformanceBootstrapAnchor": "schemas/kfd-self-conformance/bootstrap-anchor.schema.json",
+          "selfConformanceTransitionBundle": "schemas/kfd-self-conformance/transition-bundle.schema.json",
+          "selfConformanceTransitionReport": "schemas/kfd-self-conformance/transition-report.schema.json",
+          "selfConformancePackageManifest": "schemas/kfd-self-conformance/package-manifest.schema.json",
+          "selfConformanceVectorRegistry": "schemas/kfd-self-conformance/vector-registry.schema.json",
+          "selfConformanceLifecycleGateRequest": "schemas/kfd-self-conformance/lifecycle-gate-request.schema.json",
+          "selfConformanceLifecycleGateReport": "schemas/kfd-self-conformance/lifecycle-gate-report.schema.json",
+          "adopterConformanceManifest": "schemas/kfd-adopter-conformance/manifest.schema.json"
         },
         "compatibility": {
           "packageLine": "v1.0",
@@ -193,6 +213,14 @@
       {
         "when": "kfdSupport is present",
         "pointer": "evidence.kfdSupport"
+      },
+      {
+        "when": "kfdAdopter is present",
+        "pointer": "evidence.kfdAdopterManifest"
+      },
+      {
+        "when": "kfdAdopter is present",
+        "pointer": "evidence.kfdAdopterGate"
       }
     ],
     "rule": "The normative checker resolves every declared sibling relative to the passport and fails closed on missing required evidence, digest drift, or semantic mismatch."

package/dist/site/release-provenance.json

@@ -30,6 +30,8 @@
       "./issue-reporting": "./packages/core/issue-reporting.js",
       "./kfd": "./packages/core/kfd.js",
       "./kfd-product-gates": "./packages/core/kfd-product-gates.js",
+      "./kfd-adopter-manifest": "./packages/core/kfd-adopter-manifest.js",
+      "./kfd-adopter-release-binding": "./packages/core/artifact-verification-envelope.js",
       "./kfd-agent-hub": "./packages/core/kfd-agent-hub.js",
       "./buildchain-layout": "./packages/core/buildchain-layout.js",
       "./release-line-bootstrap": "./packages/core/release-line-bootstrap.js",
@@ -84,7 +86,6 @@
       "./site/schemas/release-passport-v1.schema.json": "./dist/site/schemas/release-passport-v1.schema.json",
       "./site/schemas/kfd-agent-hub-adoption.schema.json": "./dist/site/schemas/kfd-agent-hub-adoption.schema.json",
       "./site/schemas/kfd-product-gate-input-v1.schema.json": "./dist/site/schemas/kfd-product-gate-input-v1.schema.json",
-      "./site/schemas/kfd-support-projection-v1.schema.json": "./dist/site/schemas/kfd-support-projection-v1.schema.json",
       "./site/buildchain-contract.json": "./dist/site/buildchain-contract.json",
       "./site/product-mechanism.json": "./dist/site/product-mechanism.json",
       "./site/release-provenance.json": "./dist/site/release-provenance.json",

package/dist/site/schemas/release-passport-v1.schema.json

@@ -202,6 +202,9 @@
     "kfd-3": {
       "type": "object"
     },
+    "kfdAdopter": {
+      "type": "object"
+    },
     "kfdSupport": {
       "type": "object"
     }

package/dist/site/site-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-manifest",
-  "generatedAt": "2026-08-11T00:43:51.000Z",
-  "publishedAt": "2026-08-11T00:43:51.000Z",
+  "generatedAt": "2026-08-11T02:37:23.000Z",
+  "publishedAt": "2026-08-11T02:37:23.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "827fa0252c0546816c33ec89e66ca505ad6d5162",
+  "sourceRevision": "6af9bdc4632a39f0c6af9aec6f856d885698d019",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "3.0.8",
+    "version": "3.0.9-alpha.0",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",
@@ -85,7 +85,7 @@
       "path": "docs/release-passport.md",
       "plane": "verify",
       "exists": true,
-      "digest": "sha256:e1ca1d470de4faeb9f7f0a57228aebbc166d0c96d03a5603fc576ad955c497a4"
+      "digest": "sha256:4ce3c2edb095d7a103b3b1d22033b4ac3709ce709f8990b21995d491898bd051"
     },
     {
       "id": "github-artifact-attestation",
@@ -133,7 +133,7 @@
       "path": "docs/release-train.md",
       "plane": "verify",
       "exists": true,
-      "digest": "sha256:550e50726ff479730bee1abe7839776308396bb01613e31a3ed6e898297619fa"
+      "digest": "sha256:7e97af1d4b32e34e944e5137d8a4d3b4efdd357e0542b4f483d941bc003be495"
     },
     {
       "id": "release-propagation",
@@ -229,7 +229,7 @@
       "path": "docs/cli.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:1707dd8989e1630b5ba9381c6f8aabbbc64288590628cbae9058ea6f56f9037c"
+      "digest": "sha256:142d4c11dde521dae8d829372ef28eb0b7b4d05ff29d0ce35d7fc33a7230dca5"
     },
     {
       "id": "cli-reference",
@@ -237,7 +237,7 @@
       "path": "docs/cli-reference.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:3b203848db87e68762417e768eb8a09a7e653eb30fb7cc21354e72678706b714"
+      "digest": "sha256:9b3b7425b5a487afa81520cfac215466c71265915c1465bf6f185cb42b1c340e"
     },
     {
       "id": "node-api-reference",
@@ -245,7 +245,7 @@
       "path": "docs/node-api-reference.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:34f39632494c0f4d4961fd79fc8ac94466da56c29f04f09e706f402d98ef125c"
+      "digest": "sha256:5caa3d6020c9449cb57bdeff92ec04255e7dafca8dd3639d3e134d72e75c5a2d"
     },
     {
       "id": "build-facts",
@@ -261,7 +261,7 @@
       "path": "docs/kfd-support.md",
       "plane": "verify",
       "exists": true,
-      "digest": "sha256:3a6143e450ab7976a50788fee48ec4d7313706774ff5cf8f71075a7b9e196e01"
+      "digest": "sha256:4efc8fb6f94293b75606aa0631dfa122edccc970c2cfc00c7e35f81817ea8335"
     },
     {
       "id": "kfd-agent-hub",

package/dist/site/workflow-registry.json

@@ -543,6 +543,7 @@
         "release-passport-kfd-3-artifact-verify-command",
         "release-passport-kfd-3-artifact-witness-jsons",
         "release-passport-kfd-3-prebuild-witness-jsons",
+        "release-passport-kfd-adopter-manifest-json",
         "release-passport-kfd-product-gate-jsons",
         "release-passport-kfd-support-matrix-json",
         "release-passport-output-dir",
@@ -566,7 +567,7 @@
         "target-sha",
         "trusted-publishing"
       ],
-      "inputCount": 110,
+      "inputCount": 111,
       "secrets": [
         "BUILDCHAIN_ISSUE_APP_ID",
         "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -1698,17 +1699,24 @@
       "secretCount": 1,
       "outputs": [
         "active-candidate-pr",
+        "candidate-generation",
+        "candidate-tree-sha",
         "controller-state",
+        "cut-root",
+        "drift-root",
         "eligible",
+        "hold-root",
         "next-candidate-sha",
         "prior-state-root",
         "promotion-pr",
         "result-path",
+        "runtime-sha",
         "selected-sha",
         "settlement-action",
-        "source-lock-ref"
+        "source-lock-ref",
+        "train-root"
       ],
-      "outputCount": 10,
+      "outputCount": 17,
       "surface": "repository-patrol",
       "capabilityGroup": "governance-versioning",
       "status": "active",
@@ -1953,7 +1961,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "3.0.8",
+      "introducedVersion": "3.0.9-alpha.0",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -1974,7 +1982,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "3.0.8",
+      "introducedVersion": "3.0.9-alpha.0",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -1995,7 +2003,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "3.0.8",
+      "introducedVersion": "3.0.9-alpha.0",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2045,7 +2053,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "3.0.8",
+      "introducedVersion": "3.0.9-alpha.0",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2560,6 +2568,7 @@
         "release-passport-kfd-3-artifact-verify-command",
         "release-passport-kfd-3-artifact-witness-jsons",
         "release-passport-kfd-3-prebuild-witness-jsons",
+        "release-passport-kfd-adopter-manifest-json",
         "release-passport-kfd-product-gate-jsons",
         "release-passport-kfd-support-matrix-json",
         "release-passport-output-dir",
@@ -2583,7 +2592,7 @@
         "target-sha",
         "trusted-publishing"
       ],
-      "inputCount": 101,
+      "inputCount": 102,
       "secrets": [
         "BUILDCHAIN_ISSUE_APP_ID",
         "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -3082,6 +3091,7 @@
         "release-passport-kfd-3-artifact-verify-command",
         "release-passport-kfd-3-artifact-witness-jsons",
         "release-passport-kfd-3-prebuild-witness-jsons",
+        "release-passport-kfd-adopter-manifest-json",
         "release-passport-kfd-product-gate-jsons",
         "release-passport-kfd-support-matrix-json",
         "release-passport-output-dir",
@@ -3101,7 +3111,7 @@
         "transaction-state-path",
         "verification-command"
       ],
-      "inputCount": 80,
+      "inputCount": 81,
       "capabilityGroup": "release-passport-trust",
       "status": "active",
       "owner": "buildchain-actions",

package/docs/aws-us-elastic-runner-burst-plane.md

@@ -380,7 +380,7 @@ host, including at least one full run, plus proof that:
 ### Phase 3 lifecycle controller
 
 `scripts/aws-macos-jit-controller.mjs` is the operator boundary for the paid
-campaign. It has three explicit mutation modes:
+campaign. It has four explicit mutation modes:
 
 - `launch-campaign` binds the exact repository source, AMI, availability zone,
   tagged Dedicated Host, and reusable instance. Before paid allocation it
@@ -395,6 +395,16 @@ campaign. It has three explicit mutation modes:
   mode-0600 temporary file into a distinct SSM SecureString, sends only the
   credential-free bootstrap through SSM, and removes the parameter plus runner
   registration if command delivery fails.
+- `rebind-campaign` repairs the source of an allocated but unused campaign
+  without buying another host. It requires the workflow to remain manually
+  disabled, the replacement source to be a strict descendant on the same
+  campaign ref, and every prior matching run to contain zero jobs and zero
+  artifacts. It also requires no registered JIT runner, SSM parameter, or
+  bootstrap evidence and verifies the one exact host, instance, and encrypted
+  volume. The operation updates only those resources' source tags and the
+  existing GitHub ref, emits a zero-allocation receipt, and compensates back to
+  the prior source if the ref update or readback fails. It never calls
+  `AllocateHosts`, `RunInstances`, or workflow dispatch.
 - `close-campaign` refuses execution before the provider's 24-hour minimum,
   verifies the encrypted delete-on-termination root volume, removes scoped JIT
   residue, terminates the exact instance, and requires a `ReleaseHosts` DryRun
@@ -405,8 +415,10 @@ campaign. It has three explicit mutation modes:
 Every execute mode requires the exact source SHA and campaign id to be repeated
 through `--confirm-source-sha` and `--confirm-campaign-id`. `run-job` also
 requires `--confirm-run-id`; `launch-campaign` additionally requires the
-expected workload account through `--account-id`. Omitting `--execute` emits a
-deterministic plan without changing AWS or GitHub state.
+expected workload account through `--account-id`. `rebind-campaign`
+additionally repeats the prior source, host, and instance identities and
+requires `--confirm-zero-allocation`. Omitting `--execute` emits a deterministic
+plan without changing AWS or GitHub state.
 
 ## Provider lifecycle
 

package/docs/cli-reference.md

@@ -203,11 +203,11 @@ buildchain collect
 
 - Help: `buildchain collect github-release --help`
 - Canonical id: `collect-github-release`
-- Options: `--anchor-manifest-json`, `--assets-dir`, `--assets-json`, `--base-passport-json`, `--build-facts-json`, `--build-summary-json`, `--dist-tag-evidence-json`, `--github-artifact-attestation-policy-json`, `--impact-json`, `--invariant-passport-cmd`, `--invariant-passport-json`, `--json`, `--kfd-1-witness-json`, `--kfd-2-claim-json`, `--kfd-3-artifact-verify-cmd`, `--kfd-3-artifact-witness-json`, `--kfd-3-prebuild-witness-json`, `--kfd-agent-hub-evidence-json`, `--kfd-product-gate-json`, `--kfd-support-matrix-json`, `--output-dir`, `--package-set-json`, `--platform-manifest-json`, `--product-name`, `--publish-evidence-json`, `--publish-json`, `--release-evidence-json`, `--release-extra-json`, `--release-json`, `--repository`, `--require-base-kfd`, `--tag`, `--transaction-json`, `--trusted-publishing-json`
+- Options: `--anchor-manifest-json`, `--assets-dir`, `--assets-json`, `--base-passport-json`, `--build-facts-json`, `--build-summary-json`, `--dist-tag-evidence-json`, `--github-artifact-attestation-policy-json`, `--impact-json`, `--invariant-passport-cmd`, `--invariant-passport-json`, `--json`, `--kfd-1-witness-json`, `--kfd-2-claim-json`, `--kfd-3-artifact-verify-cmd`, `--kfd-3-artifact-witness-json`, `--kfd-3-prebuild-witness-json`, `--kfd-adopter-manifest-json`, `--kfd-agent-hub-evidence-json`, `--kfd-product-gate-json`, `--kfd-support-matrix-json`, `--output-dir`, `--package-set-json`, `--platform-manifest-json`, `--product-name`, `--publish-evidence-json`, `--publish-json`, `--release-evidence-json`, `--release-extra-json`, `--release-json`, `--repository`, `--require-base-kfd`, `--tag`, `--transaction-json`, `--trusted-publishing-json`
 - Syntax:
 
 ```text
-buildchain collect github-release --tag <tag> [--repository <owner/repo>] [--assets-dir <dir>] [--assets-json <json-or-path>] [--release-json <json-or-path>] [--package-set-json <json-or-path>] [--product-name <name>] [--publish-evidence-json <json-or-path>] [--trusted-publishing-json <json-or-path>] [--transaction-json <json-or-path>] [--anchor-manifest-json <json-or-path>] [--impact-json <json-or-path>] [--build-summary-json <json-or-path>] [--build-facts-json <json-or-path>]... [--platform-manifest-json <json-or-path>]... [--dist-tag-evidence-json <json-or-path>] [--kfd-1-witness-json <json-or-path>]... [--kfd-2-claim-json <json-or-path>]... [--kfd-3-prebuild-witness-json <json-or-path>]... [--kfd-3-artifact-witness-json <json-or-path>]... [--kfd-3-artifact-verify-cmd <command>] [--kfd-support-matrix-json <json-or-path>] [--kfd-product-gate-json <json-or-path>]... [--invariant-passport-json <json-or-path>]... [--invariant-passport-cmd <command>] [--release-evidence-json <json-or-path>]... [--github-artifact-attestation-policy-json <json-or-path>]... [--kfd-agent-hub-evidence-json <json-or-path>] [--base-passport-json <json-or-path>] [--require-base-kfd] [--release-extra-json <json-or-path>] [--publish-json <json-or-path>] [--output-dir <dir>] [--json]
+buildchain collect github-release --tag <tag> [--repository <owner/repo>] [--assets-dir <dir>] [--assets-json <json-or-path>] [--release-json <json-or-path>] [--package-set-json <json-or-path>] [--product-name <name>] [--publish-evidence-json <json-or-path>] [--trusted-publishing-json <json-or-path>] [--transaction-json <json-or-path>] [--anchor-manifest-json <json-or-path>] [--impact-json <json-or-path>] [--build-summary-json <json-or-path>] [--build-facts-json <json-or-path>]... [--platform-manifest-json <json-or-path>]... [--dist-tag-evidence-json <json-or-path>] [--kfd-1-witness-json <json-or-path>]... [--kfd-2-claim-json <json-or-path>]... [--kfd-3-prebuild-witness-json <json-or-path>]... [--kfd-3-artifact-witness-json <json-or-path>]... [--kfd-3-artifact-verify-cmd <command>] [--kfd-adopter-manifest-json <json-or-path>] [--kfd-support-matrix-json <json-or-path>] [--kfd-product-gate-json <json-or-path>]... [--invariant-passport-json <json-or-path>]... [--invariant-passport-cmd <command>] [--release-evidence-json <json-or-path>]... [--github-artifact-attestation-policy-json <json-or-path>]... [--kfd-agent-hub-evidence-json <json-or-path>] [--base-passport-json <json-or-path>] [--require-base-kfd] [--release-extra-json <json-or-path>] [--publish-json <json-or-path>] [--output-dir <dir>] [--json]
 ```
 
 ## `create`
@@ -1230,22 +1230,22 @@ buildchain kfd status [--cwd <dir>] [--json]
 
 - Help: `buildchain kfd support project --help`
 - Canonical id: `kfd-support`
-- Options: `--checked-at`, `--expected-source-sha`, `--gate-json`, `--json`, `--matrix-json`, `--output`
+- Options: `--checked-at`, `--expected-source-sha`, `--json`, `--manifest-gate-json`, `--manifest-json`, `--output`
 - Syntax:
 
 ```text
-buildchain kfd support project --matrix-json <file-or-json> --gate-json <file-or-json>... [--expected-source-sha <sha>] [--checked-at <date-time>] [--output <file>] [--json]
+buildchain kfd support project --manifest-json <file-or-json> --manifest-gate-json <file-or-json> [--expected-source-sha <sha>] [--checked-at <date-time>] [--output <file>] [--json]
 ```
 
 ### `buildchain kfd support verify`
 
 - Help: `buildchain kfd support verify --help`
 - Canonical id: `kfd-support`
-- Options: `--checked-at`, `--expected-source-sha`, `--json`, `--projection-json`
+- Options: `--checked-at`, `--expected-source-sha`, `--json`, `--manifest-gate-json`, `--manifest-json`, `--projection-json`
 - Syntax:
 
 ```text
-buildchain kfd support verify --projection-json <file-or-json> [--expected-source-sha <sha>] [--checked-at <date-time>] [--json]
+buildchain kfd support verify --projection-json <file-or-json> --manifest-json <file-or-json> --manifest-gate-json <file-or-json> [--expected-source-sha <sha>] [--checked-at <date-time>] [--json]
 ```
 
 ### `buildchain kfd upstream check`

package/docs/cli.md

@@ -442,9 +442,8 @@ buildchain kfd migrate-layout --write
 buildchain kfd 4 gate --input-json kfd-4-gate-input.json --output kfd-4-gate.json
 buildchain kfd 5 gate --input-json kfd-5-gate-input.json --output kfd-5-gate.json
 buildchain kfd 7 gate --input-json kfd-7-gate-input.json --output kfd-7-gate.json
-buildchain kfd support project --matrix-json support-matrix.json \
-  --gate-json kfd-4-gate.json --gate-json kfd-5-gate.json \
-  --gate-json kfd-7-gate.json --output kfd-support.json
+buildchain kfd support project --manifest-json adopter-manifest.json \
+  --manifest-gate-json adopter-manifest-gate.json --output kfd-support.json
 ```
 
 KFD-1 commands generate and validate contract-world release evidence:

package/docs/dev-alpha-candidate-patrol.md

@@ -8,12 +8,12 @@ confidence: high
 sensitivity: public
 evidence_grade: A
 review_state: self-reviewed
-last_reviewed: 2026-08-04
+last_reviewed: 2026-08-11
 ai_provenance:
   model_family: GPT-5
   product: Codex
-  generated_at: 2026-08-04
-  visible_context: Existing Buildchain source locks, Kungfu exact-source Alpha preflight, Dev Patrol, cancelled duplicate runs, protected auto-merge policy, repository release governance, and the consumer-owned settlement renderer threat model.
+  generated_at: 2026-08-11
+  visible_context: Buildchain v3 Release Train and Release Cut contracts, existing source locks, exact-source Alpha preflight, Dev Patrol, cancelled duplicate runs, protected auto-merge policy, repository release governance, and the consumer-owned settlement renderer threat model.
   invisible_context_boundary: No credentials, private logs, or private configuration were used.
 ---
 
@@ -33,12 +33,21 @@ head), and selects the newest commit that satisfies all of these conditions:
   succeeded; and
 - both runs are within the caller's evidence age limit.
 
-The selected commit can be behind the observed development head when newer
+When no managed candidate is active, the selected commit can be behind the observed development head when newer
 commits have not completed both workflows yet. The decision binds the observed
 head, selected SHA, and count of skipped newer commits. This makes a slow native
 verification lane live under continuous development without silently treating
 an unqualified head as releasable.
 
+Before any new selection, the v3 controller now resolves the open managed PR and
+validates its embedded authoritative Release Train. If one exists, the frozen
+Release Cut wins: Candidate Patrol does not scan for or retain a newer qualified
+candidate. It returns the cut's exact candidate commit, candidate tree,
+generation, Alpha base, Buildchain runtime and authority roots. A newer dev head
+is appended once as a rooted, non-invalidating observation. Repeated webhooks or
+a restarted controller observing the same dev head reuse the existing
+observation and do not change the candidate identity.
+
 A cancelled workflow run carries no qualification verdict, so a newer
 cancelled duplicate does not erase the prior completed verdict for the same
 workflow and source SHA. Other non-success conclusions remain authoritative:
@@ -64,15 +73,19 @@ The companion state is
 - `eligible-for-settlement`: a qualified candidate exists and no managed Alpha
   candidate PR is active;
 - `active`: exactly one managed candidate PR is open;
-- `retained-next`: an active PR remains authoritative and the newest different
-  qualified SHA is retained as `nextCandidate`;
+- `held`: the active Release Cut failed exact candidate, tree, Alpha-base,
+  runtime or route readback and cannot resume;
+- `superseded`: the embedded train contains a valid explicit supersession
+  transition;
 - `stale`: the available exact-SHA evidence pair is outside policy age; or
 - `blocked`: qualification or reconciliation failed closed.
 
-When a newer qualified SHA replaces an earlier `nextCandidate`, the state also
-records that earlier SHA as `supersededCandidate`. Every state carries exact
-repository, source/target refs and SHAs, workflow-run evidence through the
-candidate decision, and canonical decision/state roots.
+New v3 states embed the complete `kungfu-buildchain-release-train/v1` record.
+`held` states include a rooted `kungfu-buildchain-release-train-hold/v1`
+receipt with the expected cut and observed coordinates. Dev movement alone is
+not an allowed supersession cause. Legacy markers remain readable by the core
+contract, but the active-train workflow refuses to manufacture missing Release
+Cut authority for an already-open legacy PR.
 
 ## Reusable workflow
 
@@ -107,20 +120,32 @@ the rendered bytes. Concurrent qualification progress therefore fails closed
 and is recomputed by the next patrol instead of attaching a declaration to the
 wrong candidate.
 
-The separately permissioned `settle` job re-runs the exact observation before
-any write. With no active managed candidate, it creates one branch named from
+The separately permissioned `settle` job checks out the exact Buildchain runtime
+commit used by `observe`, re-runs the exact observation, and compare-and-swap
+checks the selected SHA, prior controller root and Release Cut root before any
+write. With no active managed candidate, it reads the candidate tree and creates
+one rooted Release Cut before it creates one branch named from
 the target branch and the first 12 characters of the full source SHA. An
 existing branch must point to the same full SHA or the run fails. With one
-active managed candidate, it only updates the machine-readable state marker in
-that PR body so repeated events and rapid dev progress cannot create another
-candidate PR or another heavy candidate build. Foreign human-authored Alpha PRs
-are ignored. More than one open Buildchain-managed candidate fails closed.
+active managed candidate, it validates the candidate ref, tree, Alpha base and
+runtime before returning that same SHA to every checkout/build consumer. It only
+updates the machine-readable state marker when a new dev observation or hold
+receipt must be persisted. Repeated events and rapid dev progress cannot create
+another candidate PR or another heavy candidate build. Foreign human-authored
+Alpha PRs are ignored. More than one open Buildchain-managed candidate fails
+closed.
 
 The PR body is the bounded durable controller state: it preserves the active
-candidate and newest retained `nextCandidate` without introducing an always-on
-service. Once the active PR settles or is abandoned, the next execution
-recomputes current exact-SHA qualification and creates only the newest still
-fresh candidate. It never trusts a `workflow_run` trigger SHA as evidence.
+Release Train without introducing an always-on service. Once the active PR
+settles, is explicitly superseded, or is abandoned, the next execution may
+recompute current exact-SHA qualification and cut a new generation under the
+Release Train contract. It never trusts a `workflow_run` trigger SHA as
+evidence.
+
+The workflow exposes `train-root`, `cut-root`, `candidate-generation`,
+`candidate-tree-sha`, `runtime-sha`, `drift-root` and `hold-root` alongside the
+selected SHA. Alpha build orchestration should bind to those outputs and treat
+a non-empty hold root as a fail-closed result.
 
 The caller may additionally set `auto-merge: true` and choose `merge-method`
 from `merge`, `squash`, or `rebase`. Buildchain only arms GitHub auto-merge for