@kungfu-tech/buildchain 3.0.8 → 3.0.9-alpha.1

package/dist/site/public-surface-audit.json

@@ -320,7 +320,7 @@
       {
         "id": "kfd-support",
         "source": "bin/buildchain.mjs",
-        "usage": "buildchain kfd support project --matrix-json <file-or-json> --gate-json <file-or-json>..."
+        "usage": "buildchain kfd support project --manifest-json <file-or-json> --manifest-gate-json <file-or-json>"
       },
       {
         "id": "kfd-upstream-check",
@@ -1054,6 +1054,7 @@
           "release-passport-kfd-3-artifact-verify-command",
           "release-passport-kfd-3-artifact-witness-jsons",
           "release-passport-kfd-3-prebuild-witness-jsons",
+          "release-passport-kfd-adopter-manifest-json",
           "release-passport-kfd-product-gate-jsons",
           "release-passport-kfd-support-matrix-json",
           "release-passport-output-dir",
@@ -1077,7 +1078,7 @@
           "target-sha",
           "trusted-publishing"
         ],
-        "inputCount": 110,
+        "inputCount": 111,
         "secrets": [
           "BUILDCHAIN_ISSUE_APP_ID",
           "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -1899,17 +1900,24 @@
         "secretCount": 1,
         "outputs": [
           "active-candidate-pr",
+          "candidate-generation",
+          "candidate-tree-sha",
           "controller-state",
+          "cut-root",
+          "drift-root",
           "eligible",
+          "hold-root",
           "next-candidate-sha",
           "prior-state-root",
           "promotion-pr",
           "result-path",
+          "runtime-sha",
           "selected-sha",
           "settlement-action",
-          "source-lock-ref"
+          "source-lock-ref",
+          "train-root"
         ],
-        "outputCount": 10
+        "outputCount": 17
       },
       {
         "id": "dev-delivery-warrant-cancel",
@@ -2561,6 +2569,7 @@
           "release-passport-kfd-3-artifact-verify-command",
           "release-passport-kfd-3-artifact-witness-jsons",
           "release-passport-kfd-3-prebuild-witness-jsons",
+          "release-passport-kfd-adopter-manifest-json",
           "release-passport-kfd-product-gate-jsons",
           "release-passport-kfd-support-matrix-json",
           "release-passport-output-dir",
@@ -2584,7 +2593,7 @@
           "target-sha",
           "trusted-publishing"
         ],
-        "inputCount": 101,
+        "inputCount": 102,
         "secrets": [
           "BUILDCHAIN_ISSUE_APP_ID",
           "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -2954,6 +2963,7 @@
           "release-passport-kfd-3-artifact-verify-command",
           "release-passport-kfd-3-artifact-witness-jsons",
           "release-passport-kfd-3-prebuild-witness-jsons",
+          "release-passport-kfd-adopter-manifest-json",
           "release-passport-kfd-product-gate-jsons",
           "release-passport-kfd-support-matrix-json",
           "release-passport-output-dir",
@@ -2973,7 +2983,7 @@
           "transaction-state-path",
           "verification-command"
         ],
-        "inputCount": 80
+        "inputCount": 81
       },
       {
         "id": "release-tail",
@@ -7992,9 +8002,9 @@
     "cliRegistryPath": "dist/site/cli-registry.json",
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
-    "cliRegistryDigest": "e7b90e95dabcffb3fecb8e84cec48d7a99261c5e90732aff0ebc174b01c4e35c",
-    "workflowRegistryDigest": "964686c03a329b906a9f832d81c60eed8a50d2d2770b9b9f4ede2dbe32f9b98b",
-    "pageRegistryDigest": "83e4701148132712b684efb1f474943752ad8371e60f598f162b553f504e987f"
+    "cliRegistryDigest": "099c0db9c5346942aee236af2cb7b6a7a91fbb2c54ebb17b7a2544a339c00d40",
+    "workflowRegistryDigest": "9fa0cedd177e417d0c4bd90259a5e05753ae464a745e1422fccac8c730b84011",
+    "pageRegistryDigest": "ee81a397669a6cd47f646a8a8106ff0e618bf2548465d843767720d950fb00ad"
   },
   "comparison": {
     "missingCliRegistry": [],

package/dist/site/publication-registry.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-publication-release-registry",
-  "generatedAt": "2026-08-11T00:43:51.000Z",
-  "publishedAt": "2026-08-11T00:43:51.000Z",
+  "generatedAt": "2026-08-11T04:56:56.000Z",
+  "publishedAt": "2026-08-11T04:56:56.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "827fa0252c0546816c33ec89e66ca505ad6d5162",
+  "sourceRevision": "4e258111f28280445fa2a66fac48d24c7982a461",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "3.0.8",
+    "version": "3.0.9-alpha.1",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/release-passport-check-manifest.json

@@ -16,10 +16,11 @@
       "result": "check-report.json"
     },
     "kfdSupportProjection": {
-      "inputSchema": "schemas/kfd-product-gate-input-v1.schema.json",
-      "projectionSchema": "schemas/kfd-support-projection-v1.schema.json",
+      "authorityContract": "kfd.adopter-conformance-manifest/v1",
+      "gateContract": "kungfu-buildchain-kfd-adopter-manifest-gate",
+      "bindingContract": "kungfu-buildchain-kfd-adopter-release-binding",
       "evidence": "kfd-support.json",
-      "rule": "The passport mirrors one product-owned support matrix and validated product-gate results without widening any claim state."
+      "rule": "The standard adopter manifest is the sole declaration authority; the legacy support matrix is an exact derived projection only."
     }
   },
   "ownership": {
@@ -42,6 +43,7 @@
       "platformArtifactManifests",
       "distTagPromotion",
       "controllerReceipts",
+      "kfdAdopter",
       "kfdSupport",
       "githubArtifactAttestations",
       "artifacts",
@@ -78,7 +80,16 @@
           "agentRuntimeAdapterRequest": "https://kfd.libkungfu.dev/schemas/kfd-agent-runtime/adapter-request.schema.json",
           "agentRuntimeAdapterResponse": "https://kfd.libkungfu.dev/schemas/kfd-agent-runtime/adapter-response.schema.json",
           "agentRuntimeSuite": "https://kfd.libkungfu.dev/schemas/kfd-agent-runtime/suite.schema.json",
-          "agentRuntimeReport": "https://kfd.libkungfu.dev/schemas/kfd-agent-runtime/report.schema.json"
+          "agentRuntimeReport": "https://kfd.libkungfu.dev/schemas/kfd-agent-runtime/report.schema.json",
+          "selfConformanceState": "https://kfd.libkungfu.dev/schemas/kfd-self-conformance/state.schema.json",
+          "selfConformanceBootstrapAnchor": "https://kfd.libkungfu.dev/schemas/kfd-self-conformance/bootstrap-anchor.schema.json",
+          "selfConformanceTransitionBundle": "https://kfd.libkungfu.dev/schemas/kfd-self-conformance/transition-bundle.schema.json",
+          "selfConformanceTransitionReport": "https://kfd.libkungfu.dev/schemas/kfd-self-conformance/transition-report.schema.json",
+          "selfConformancePackageManifest": "https://kfd.libkungfu.dev/schemas/kfd-self-conformance/package-manifest.schema.json",
+          "selfConformanceVectorRegistry": "https://kfd.libkungfu.dev/schemas/kfd-self-conformance/vector-registry.schema.json",
+          "selfConformanceLifecycleGateRequest": "https://kfd.libkungfu.dev/schemas/kfd-self-conformance/lifecycle-gate-request.schema.json",
+          "selfConformanceLifecycleGateReport": "https://kfd.libkungfu.dev/schemas/kfd-self-conformance/lifecycle-gate-report.schema.json",
+          "adopterConformanceManifest": "https://kfd.libkungfu.dev/schemas/kfd-adopter-conformance/manifest.schema.json"
         },
         "schemaPaths": {
           "metadata": "schemas/kfd-standards.schema.json",
@@ -100,7 +111,16 @@
           "agentRuntimeAdapterRequest": "schemas/kfd-agent-runtime/adapter-request.schema.json",
           "agentRuntimeAdapterResponse": "schemas/kfd-agent-runtime/adapter-response.schema.json",
           "agentRuntimeSuite": "schemas/kfd-agent-runtime/suite.schema.json",
-          "agentRuntimeReport": "schemas/kfd-agent-runtime/report.schema.json"
+          "agentRuntimeReport": "schemas/kfd-agent-runtime/report.schema.json",
+          "selfConformanceState": "schemas/kfd-self-conformance/state.schema.json",
+          "selfConformanceBootstrapAnchor": "schemas/kfd-self-conformance/bootstrap-anchor.schema.json",
+          "selfConformanceTransitionBundle": "schemas/kfd-self-conformance/transition-bundle.schema.json",
+          "selfConformanceTransitionReport": "schemas/kfd-self-conformance/transition-report.schema.json",
+          "selfConformancePackageManifest": "schemas/kfd-self-conformance/package-manifest.schema.json",
+          "selfConformanceVectorRegistry": "schemas/kfd-self-conformance/vector-registry.schema.json",
+          "selfConformanceLifecycleGateRequest": "schemas/kfd-self-conformance/lifecycle-gate-request.schema.json",
+          "selfConformanceLifecycleGateReport": "schemas/kfd-self-conformance/lifecycle-gate-report.schema.json",
+          "adopterConformanceManifest": "schemas/kfd-adopter-conformance/manifest.schema.json"
         },
         "compatibility": {
           "packageLine": "v1.0",
@@ -193,6 +213,14 @@
       {
         "when": "kfdSupport is present",
         "pointer": "evidence.kfdSupport"
+      },
+      {
+        "when": "kfdAdopter is present",
+        "pointer": "evidence.kfdAdopterManifest"
+      },
+      {
+        "when": "kfdAdopter is present",
+        "pointer": "evidence.kfdAdopterGate"
       }
     ],
     "rule": "The normative checker resolves every declared sibling relative to the passport and fails closed on missing required evidence, digest drift, or semantic mismatch."

package/dist/site/release-provenance.json

@@ -30,6 +30,8 @@
       "./issue-reporting": "./packages/core/issue-reporting.js",
       "./kfd": "./packages/core/kfd.js",
       "./kfd-product-gates": "./packages/core/kfd-product-gates.js",
+      "./kfd-adopter-manifest": "./packages/core/kfd-adopter-manifest.js",
+      "./kfd-adopter-release-binding": "./packages/core/artifact-verification-envelope.js",
       "./kfd-agent-hub": "./packages/core/kfd-agent-hub.js",
       "./buildchain-layout": "./packages/core/buildchain-layout.js",
       "./release-line-bootstrap": "./packages/core/release-line-bootstrap.js",
@@ -84,7 +86,6 @@
       "./site/schemas/release-passport-v1.schema.json": "./dist/site/schemas/release-passport-v1.schema.json",
       "./site/schemas/kfd-agent-hub-adoption.schema.json": "./dist/site/schemas/kfd-agent-hub-adoption.schema.json",
       "./site/schemas/kfd-product-gate-input-v1.schema.json": "./dist/site/schemas/kfd-product-gate-input-v1.schema.json",
-      "./site/schemas/kfd-support-projection-v1.schema.json": "./dist/site/schemas/kfd-support-projection-v1.schema.json",
       "./site/buildchain-contract.json": "./dist/site/buildchain-contract.json",
       "./site/product-mechanism.json": "./dist/site/product-mechanism.json",
       "./site/release-provenance.json": "./dist/site/release-provenance.json",

package/dist/site/schemas/release-passport-v1.schema.json

@@ -202,6 +202,9 @@
     "kfd-3": {
       "type": "object"
     },
+    "kfdAdopter": {
+      "type": "object"
+    },
     "kfdSupport": {
       "type": "object"
     }

package/dist/site/site-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-manifest",
-  "generatedAt": "2026-08-11T00:43:51.000Z",
-  "publishedAt": "2026-08-11T00:43:51.000Z",
+  "generatedAt": "2026-08-11T04:56:56.000Z",
+  "publishedAt": "2026-08-11T04:56:56.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "827fa0252c0546816c33ec89e66ca505ad6d5162",
+  "sourceRevision": "4e258111f28280445fa2a66fac48d24c7982a461",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "3.0.8",
+    "version": "3.0.9-alpha.1",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",
@@ -85,7 +85,7 @@
       "path": "docs/release-passport.md",
       "plane": "verify",
       "exists": true,
-      "digest": "sha256:e1ca1d470de4faeb9f7f0a57228aebbc166d0c96d03a5603fc576ad955c497a4"
+      "digest": "sha256:b95c4e0ae152113f2aedb5ec6c6edfc8a86162abd796d15578fd3aac41bc92c1"
     },
     {
       "id": "github-artifact-attestation",
@@ -133,7 +133,7 @@
       "path": "docs/release-train.md",
       "plane": "verify",
       "exists": true,
-      "digest": "sha256:550e50726ff479730bee1abe7839776308396bb01613e31a3ed6e898297619fa"
+      "digest": "sha256:5ec5534ee48790df09c71a2578e1ca364a14dadf6ba662685ee66f78ae2589e7"
     },
     {
       "id": "release-propagation",
@@ -229,7 +229,7 @@
       "path": "docs/cli.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:1707dd8989e1630b5ba9381c6f8aabbbc64288590628cbae9058ea6f56f9037c"
+      "digest": "sha256:142d4c11dde521dae8d829372ef28eb0b7b4d05ff29d0ce35d7fc33a7230dca5"
     },
     {
       "id": "cli-reference",
@@ -237,7 +237,7 @@
       "path": "docs/cli-reference.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:3b203848db87e68762417e768eb8a09a7e653eb30fb7cc21354e72678706b714"
+      "digest": "sha256:9b3b7425b5a487afa81520cfac215466c71265915c1465bf6f185cb42b1c340e"
     },
     {
       "id": "node-api-reference",
@@ -245,7 +245,7 @@
       "path": "docs/node-api-reference.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:34f39632494c0f4d4961fd79fc8ac94466da56c29f04f09e706f402d98ef125c"
+      "digest": "sha256:bbef23e4f489376f759e5678d61e2f07c69dfa5542f5538e14c68a0714233ea3"
     },
     {
       "id": "build-facts",
@@ -261,7 +261,7 @@
       "path": "docs/kfd-support.md",
       "plane": "verify",
       "exists": true,
-      "digest": "sha256:3a6143e450ab7976a50788fee48ec4d7313706774ff5cf8f71075a7b9e196e01"
+      "digest": "sha256:4efc8fb6f94293b75606aa0631dfa122edccc970c2cfc00c7e35f81817ea8335"
     },
     {
       "id": "kfd-agent-hub",
@@ -285,7 +285,7 @@
       "path": "docs/reusable-build-surface.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:7f69bf3faf8c86b4af268f8e79d511f73de745e146a23809394074f816a372d7"
+      "digest": "sha256:8868acbf7942b0d8e5101203a4ab98b984028b90e0584ea131e1d9b0253e4344"
     },
     {
       "id": "publish-transaction",
@@ -341,7 +341,7 @@
       "path": "docs/runtime-train-validation.md",
       "plane": "verify",
       "exists": true,
-      "digest": "sha256:1a4ce3fc2c150f88bc4d32123a108478ba5d73d0d69b8a95bf0d6670e32618a0"
+      "digest": "sha256:f0a1cdb7fe5f72fc2ed921f1aeadbd16184dda16be3727e4193fa2af250325db"
     },
     {
       "id": "versioning",
@@ -349,7 +349,7 @@
       "path": "docs/versioning.md",
       "plane": "why",
       "exists": true,
-      "digest": "sha256:6af44926f8138932aeb606bb264b19a40a273ce7bea7bad9b021bb9aa542d61b"
+      "digest": "sha256:68934ebe8330a13376d1b71d1a875d67d2970b1036e0f185a923175ca2a257fe"
     },
     {
       "id": "web-surface-deployments",

package/dist/site/workflow-registry.json

@@ -543,6 +543,7 @@
         "release-passport-kfd-3-artifact-verify-command",
         "release-passport-kfd-3-artifact-witness-jsons",
         "release-passport-kfd-3-prebuild-witness-jsons",
+        "release-passport-kfd-adopter-manifest-json",
         "release-passport-kfd-product-gate-jsons",
         "release-passport-kfd-support-matrix-json",
         "release-passport-output-dir",
@@ -566,7 +567,7 @@
         "target-sha",
         "trusted-publishing"
       ],
-      "inputCount": 110,
+      "inputCount": 111,
       "secrets": [
         "BUILDCHAIN_ISSUE_APP_ID",
         "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -1698,17 +1699,24 @@
       "secretCount": 1,
       "outputs": [
         "active-candidate-pr",
+        "candidate-generation",
+        "candidate-tree-sha",
         "controller-state",
+        "cut-root",
+        "drift-root",
         "eligible",
+        "hold-root",
         "next-candidate-sha",
         "prior-state-root",
         "promotion-pr",
         "result-path",
+        "runtime-sha",
         "selected-sha",
         "settlement-action",
-        "source-lock-ref"
+        "source-lock-ref",
+        "train-root"
       ],
-      "outputCount": 10,
+      "outputCount": 17,
       "surface": "repository-patrol",
       "capabilityGroup": "governance-versioning",
       "status": "active",
@@ -1953,7 +1961,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "3.0.8",
+      "introducedVersion": "3.0.9-alpha.1",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -1974,7 +1982,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "3.0.8",
+      "introducedVersion": "3.0.9-alpha.1",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -1995,7 +2003,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "3.0.8",
+      "introducedVersion": "3.0.9-alpha.1",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2045,7 +2053,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "3.0.8",
+      "introducedVersion": "3.0.9-alpha.1",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2560,6 +2568,7 @@
         "release-passport-kfd-3-artifact-verify-command",
         "release-passport-kfd-3-artifact-witness-jsons",
         "release-passport-kfd-3-prebuild-witness-jsons",
+        "release-passport-kfd-adopter-manifest-json",
         "release-passport-kfd-product-gate-jsons",
         "release-passport-kfd-support-matrix-json",
         "release-passport-output-dir",
@@ -2583,7 +2592,7 @@
         "target-sha",
         "trusted-publishing"
       ],
-      "inputCount": 101,
+      "inputCount": 102,
       "secrets": [
         "BUILDCHAIN_ISSUE_APP_ID",
         "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -3082,6 +3091,7 @@
         "release-passport-kfd-3-artifact-verify-command",
         "release-passport-kfd-3-artifact-witness-jsons",
         "release-passport-kfd-3-prebuild-witness-jsons",
+        "release-passport-kfd-adopter-manifest-json",
         "release-passport-kfd-product-gate-jsons",
         "release-passport-kfd-support-matrix-json",
         "release-passport-output-dir",
@@ -3101,7 +3111,7 @@
         "transaction-state-path",
         "verification-command"
       ],
-      "inputCount": 80,
+      "inputCount": 81,
       "capabilityGroup": "release-passport-trust",
       "status": "active",
       "owner": "buildchain-actions",

package/docs/aws-us-elastic-runner-burst-plane.md

@@ -380,7 +380,7 @@ host, including at least one full run, plus proof that:
 ### Phase 3 lifecycle controller
 
 `scripts/aws-macos-jit-controller.mjs` is the operator boundary for the paid
-campaign. It has three explicit mutation modes:
+campaign. It has four explicit mutation modes:
 
 - `launch-campaign` binds the exact repository source, AMI, availability zone,
   tagged Dedicated Host, and reusable instance. Before paid allocation it
@@ -395,6 +395,16 @@ campaign. It has three explicit mutation modes:
   mode-0600 temporary file into a distinct SSM SecureString, sends only the
   credential-free bootstrap through SSM, and removes the parameter plus runner
   registration if command delivery fails.
+- `rebind-campaign` repairs the source of an allocated but unused campaign
+  without buying another host. It requires the workflow to remain manually
+  disabled, the replacement source to be a strict descendant on the same
+  campaign ref, and every prior matching run to contain zero jobs and zero
+  artifacts. It also requires no registered JIT runner, SSM parameter, or
+  bootstrap evidence and verifies the one exact host, instance, and encrypted
+  volume. The operation updates only those resources' source tags and the
+  existing GitHub ref, emits a zero-allocation receipt, and compensates back to
+  the prior source if the ref update or readback fails. It never calls
+  `AllocateHosts`, `RunInstances`, or workflow dispatch.
 - `close-campaign` refuses execution before the provider's 24-hour minimum,
   verifies the encrypted delete-on-termination root volume, removes scoped JIT
   residue, terminates the exact instance, and requires a `ReleaseHosts` DryRun
@@ -405,8 +415,10 @@ campaign. It has three explicit mutation modes:
 Every execute mode requires the exact source SHA and campaign id to be repeated
 through `--confirm-source-sha` and `--confirm-campaign-id`. `run-job` also
 requires `--confirm-run-id`; `launch-campaign` additionally requires the
-expected workload account through `--account-id`. Omitting `--execute` emits a
-deterministic plan without changing AWS or GitHub state.
+expected workload account through `--account-id`. `rebind-campaign`
+additionally repeats the prior source, host, and instance identities and
+requires `--confirm-zero-allocation`. Omitting `--execute` emits a deterministic
+plan without changing AWS or GitHub state.
 
 ## Provider lifecycle
 

package/docs/cli-reference.md

@@ -203,11 +203,11 @@ buildchain collect
 
 - Help: `buildchain collect github-release --help`
 - Canonical id: `collect-github-release`
-- Options: `--anchor-manifest-json`, `--assets-dir`, `--assets-json`, `--base-passport-json`, `--build-facts-json`, `--build-summary-json`, `--dist-tag-evidence-json`, `--github-artifact-attestation-policy-json`, `--impact-json`, `--invariant-passport-cmd`, `--invariant-passport-json`, `--json`, `--kfd-1-witness-json`, `--kfd-2-claim-json`, `--kfd-3-artifact-verify-cmd`, `--kfd-3-artifact-witness-json`, `--kfd-3-prebuild-witness-json`, `--kfd-agent-hub-evidence-json`, `--kfd-product-gate-json`, `--kfd-support-matrix-json`, `--output-dir`, `--package-set-json`, `--platform-manifest-json`, `--product-name`, `--publish-evidence-json`, `--publish-json`, `--release-evidence-json`, `--release-extra-json`, `--release-json`, `--repository`, `--require-base-kfd`, `--tag`, `--transaction-json`, `--trusted-publishing-json`
+- Options: `--anchor-manifest-json`, `--assets-dir`, `--assets-json`, `--base-passport-json`, `--build-facts-json`, `--build-summary-json`, `--dist-tag-evidence-json`, `--github-artifact-attestation-policy-json`, `--impact-json`, `--invariant-passport-cmd`, `--invariant-passport-json`, `--json`, `--kfd-1-witness-json`, `--kfd-2-claim-json`, `--kfd-3-artifact-verify-cmd`, `--kfd-3-artifact-witness-json`, `--kfd-3-prebuild-witness-json`, `--kfd-adopter-manifest-json`, `--kfd-agent-hub-evidence-json`, `--kfd-product-gate-json`, `--kfd-support-matrix-json`, `--output-dir`, `--package-set-json`, `--platform-manifest-json`, `--product-name`, `--publish-evidence-json`, `--publish-json`, `--release-evidence-json`, `--release-extra-json`, `--release-json`, `--repository`, `--require-base-kfd`, `--tag`, `--transaction-json`, `--trusted-publishing-json`
 - Syntax:
 
 ```text
-buildchain collect github-release --tag <tag> [--repository <owner/repo>] [--assets-dir <dir>] [--assets-json <json-or-path>] [--release-json <json-or-path>] [--package-set-json <json-or-path>] [--product-name <name>] [--publish-evidence-json <json-or-path>] [--trusted-publishing-json <json-or-path>] [--transaction-json <json-or-path>] [--anchor-manifest-json <json-or-path>] [--impact-json <json-or-path>] [--build-summary-json <json-or-path>] [--build-facts-json <json-or-path>]... [--platform-manifest-json <json-or-path>]... [--dist-tag-evidence-json <json-or-path>] [--kfd-1-witness-json <json-or-path>]... [--kfd-2-claim-json <json-or-path>]... [--kfd-3-prebuild-witness-json <json-or-path>]... [--kfd-3-artifact-witness-json <json-or-path>]... [--kfd-3-artifact-verify-cmd <command>] [--kfd-support-matrix-json <json-or-path>] [--kfd-product-gate-json <json-or-path>]... [--invariant-passport-json <json-or-path>]... [--invariant-passport-cmd <command>] [--release-evidence-json <json-or-path>]... [--github-artifact-attestation-policy-json <json-or-path>]... [--kfd-agent-hub-evidence-json <json-or-path>] [--base-passport-json <json-or-path>] [--require-base-kfd] [--release-extra-json <json-or-path>] [--publish-json <json-or-path>] [--output-dir <dir>] [--json]
+buildchain collect github-release --tag <tag> [--repository <owner/repo>] [--assets-dir <dir>] [--assets-json <json-or-path>] [--release-json <json-or-path>] [--package-set-json <json-or-path>] [--product-name <name>] [--publish-evidence-json <json-or-path>] [--trusted-publishing-json <json-or-path>] [--transaction-json <json-or-path>] [--anchor-manifest-json <json-or-path>] [--impact-json <json-or-path>] [--build-summary-json <json-or-path>] [--build-facts-json <json-or-path>]... [--platform-manifest-json <json-or-path>]... [--dist-tag-evidence-json <json-or-path>] [--kfd-1-witness-json <json-or-path>]... [--kfd-2-claim-json <json-or-path>]... [--kfd-3-prebuild-witness-json <json-or-path>]... [--kfd-3-artifact-witness-json <json-or-path>]... [--kfd-3-artifact-verify-cmd <command>] [--kfd-adopter-manifest-json <json-or-path>] [--kfd-support-matrix-json <json-or-path>] [--kfd-product-gate-json <json-or-path>]... [--invariant-passport-json <json-or-path>]... [--invariant-passport-cmd <command>] [--release-evidence-json <json-or-path>]... [--github-artifact-attestation-policy-json <json-or-path>]... [--kfd-agent-hub-evidence-json <json-or-path>] [--base-passport-json <json-or-path>] [--require-base-kfd] [--release-extra-json <json-or-path>] [--publish-json <json-or-path>] [--output-dir <dir>] [--json]
 ```
 
 ## `create`
@@ -1230,22 +1230,22 @@ buildchain kfd status [--cwd <dir>] [--json]
 
 - Help: `buildchain kfd support project --help`
 - Canonical id: `kfd-support`
-- Options: `--checked-at`, `--expected-source-sha`, `--gate-json`, `--json`, `--matrix-json`, `--output`
+- Options: `--checked-at`, `--expected-source-sha`, `--json`, `--manifest-gate-json`, `--manifest-json`, `--output`
 - Syntax:
 
 ```text
-buildchain kfd support project --matrix-json <file-or-json> --gate-json <file-or-json>... [--expected-source-sha <sha>] [--checked-at <date-time>] [--output <file>] [--json]
+buildchain kfd support project --manifest-json <file-or-json> --manifest-gate-json <file-or-json> [--expected-source-sha <sha>] [--checked-at <date-time>] [--output <file>] [--json]
 ```
 
 ### `buildchain kfd support verify`
 
 - Help: `buildchain kfd support verify --help`
 - Canonical id: `kfd-support`
-- Options: `--checked-at`, `--expected-source-sha`, `--json`, `--projection-json`
+- Options: `--checked-at`, `--expected-source-sha`, `--json`, `--manifest-gate-json`, `--manifest-json`, `--projection-json`
 - Syntax:
 
 ```text
-buildchain kfd support verify --projection-json <file-or-json> [--expected-source-sha <sha>] [--checked-at <date-time>] [--json]
+buildchain kfd support verify --projection-json <file-or-json> --manifest-json <file-or-json> --manifest-gate-json <file-or-json> [--expected-source-sha <sha>] [--checked-at <date-time>] [--json]
 ```
 
 ### `buildchain kfd upstream check`

package/docs/cli.md

@@ -442,9 +442,8 @@ buildchain kfd migrate-layout --write
 buildchain kfd 4 gate --input-json kfd-4-gate-input.json --output kfd-4-gate.json
 buildchain kfd 5 gate --input-json kfd-5-gate-input.json --output kfd-5-gate.json
 buildchain kfd 7 gate --input-json kfd-7-gate-input.json --output kfd-7-gate.json
-buildchain kfd support project --matrix-json support-matrix.json \
-  --gate-json kfd-4-gate.json --gate-json kfd-5-gate.json \
-  --gate-json kfd-7-gate.json --output kfd-support.json
+buildchain kfd support project --manifest-json adopter-manifest.json \
+  --manifest-gate-json adopter-manifest-gate.json --output kfd-support.json
 ```
 
 KFD-1 commands generate and validate contract-world release evidence: