@kungfu-tech/buildchain 3.0.8 → 3.0.9-alpha.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (57) hide show
  1. package/actions/promote-buildchain-ref/README.md +8 -7
  2. package/bin/buildchain.mjs +34 -33
  3. package/bin/internal/trust-release-release-handlers.mjs +5 -0
  4. package/dist/site/agent-index.json +0 -1
  5. package/dist/site/artifact-schemas.json +0 -2
  6. package/dist/site/badge-endpoint-registry.json +9 -9
  7. package/dist/site/badges/v1/kfd-8/aligned.json +1 -1
  8. package/dist/site/badges/v1/kfd-8/declared.json +1 -1
  9. package/dist/site/badges/v1/kfd-8/downgraded.json +1 -1
  10. package/dist/site/badges/v1/kfd-8/draft.json +1 -1
  11. package/dist/site/badges/v1/kfd-8/failed.json +1 -1
  12. package/dist/site/badges/v1/kfd-8/missing.json +1 -1
  13. package/dist/site/badges/v1/kfd-8/passed.json +1 -1
  14. package/dist/site/badges/v1/kfd-8/planned.json +1 -1
  15. package/dist/site/buildchain-contract.json +27 -22
  16. package/dist/site/buildchain-site.json +38 -28
  17. package/dist/site/capability-registry.json +1 -1
  18. package/dist/site/cli-registry.json +8 -7
  19. package/dist/site/controller-registry.json +6 -2
  20. package/dist/site/kfd-claims.json +34 -7
  21. package/dist/site/kfd-upstream-aggregate.json +10 -10
  22. package/dist/site/manual-registry.json +6 -6
  23. package/dist/site/node-api-registry.json +754 -228
  24. package/dist/site/page-registry.json +28 -18
  25. package/dist/site/public-surface-audit.json +19 -9
  26. package/dist/site/publication-registry.json +4 -4
  27. package/dist/site/release-passport-check-manifest.json +33 -5
  28. package/dist/site/release-provenance.json +2 -1
  29. package/dist/site/schemas/release-passport-v1.schema.json +3 -0
  30. package/dist/site/site-manifest.json +10 -10
  31. package/dist/site/workflow-registry.json +19 -9
  32. package/docs/aws-us-elastic-runner-burst-plane.md +15 -3
  33. package/docs/cli-reference.md +6 -6
  34. package/docs/cli.md +2 -3
  35. package/docs/dev-alpha-candidate-patrol.md +45 -20
  36. package/docs/kfd-support.md +7 -7
  37. package/docs/node-api-reference.md +179 -140
  38. package/docs/release-passport.md +18 -12
  39. package/docs/release-train.md +8 -0
  40. package/package.json +4 -3
  41. package/packages/core/artifact-verification-envelope.js +114 -0
  42. package/packages/core/dev-alpha-active-release-train.js +460 -0
  43. package/packages/core/dev-alpha-candidate-selection.js +181 -0
  44. package/packages/core/index.js +4 -5
  45. package/packages/core/kfd-adopter-manifest.js +390 -0
  46. package/packages/core/kfd-product-gates.js +0 -300
  47. package/packages/core/release-passport-contract.js +219 -6
  48. package/packages/core/release-passport.js +139 -242
  49. package/scripts/aws-macos-jit-controller-core.mjs +76 -0
  50. package/scripts/aws-macos-jit-controller.mjs +29 -0
  51. package/scripts/aws-macos-jit-source-rebind.mjs +503 -0
  52. package/scripts/buildchain-cli-help.mjs +4 -2
  53. package/scripts/check-inventory.mjs +2 -2
  54. package/scripts/dev-alpha-candidate-patrol.mjs +196 -201
  55. package/scripts/generate-site-bundle.mjs +1 -8
  56. package/scripts/site-capability-metadata.mjs +3 -1
  57. package/dist/site/schemas/kfd-support-projection-v1.schema.json +0 -106
package/docs/kfd-support.md CHANGED
@@ -45,9 +45,8 @@ buildchain kfd 4 schema --json
45
45
  buildchain kfd 4 gate --input-json kfd-4-gate-input.json --json
46
46
  buildchain kfd 5 gate --input-json kfd-5-gate-input.json --json
47
47
  buildchain kfd 7 gate --input-json kfd-7-gate-input.json --json
48
- buildchain kfd support project --matrix-json support-matrix.json \
49
- --gate-json kfd-4-gate.json --gate-json kfd-5-gate.json \
50
- --gate-json kfd-7-gate.json --json
48
+ buildchain kfd support project --manifest-json adopter-manifest.json \
49
+ --manifest-gate-json adopter-manifest-gate.json --json
51
50
  ```
52
51
 
53
52
  KFD-1, KFD-2, and KFD-3 have concrete Buildchain workflows. KFD-4, KFD-5, and
@@ -75,10 +74,11 @@ KFD records and evidence by SHA-256. The result uses
75
74
  - KFD-7 requires a qualified and activated Domain Profile, independent review,
76
75
  product witnesses, all 13 evidence obligations, and negative evidence.
77
76
 
78
- `buildchain kfd support project` joins the three gate results with the
79
- product-owned KFD-1..13 matrix. It rejects normative metadata drift, source or
80
- freshness mismatch, gate/matrix disagreement, KFD-4/5 candidate widening,
81
- KFD-6 support, KFD-8..13 promotion, or any unsupported shipped-support claim.
77
+ `buildchain kfd support project` derives a compatibility projection from the
78
+ standard adopter manifest and its exact passing gate. The adopter manifest is
79
+ the sole KFD-1..13 declaration authority; the command rejects stale package,
80
+ source, witness, registry, verifier-set, and KFD-4/5/7 gate roots. The emitted
81
+ matrix is not an independent declaration and cannot widen adopter claims.
82
82
 
83
83
  ## KFD-1
84
84