@kungfu-tech/buildchain 3.0.9-alpha.0 → 3.0.9-alpha.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (117) hide show
  1. package/bin/buildchain.mjs +9 -1
  2. package/contracts/dev-delivery-authority-v2.schema.json +253 -0
  3. package/contracts/fixtures/kfd-adopter-release-v1/kfd-4-perspective.json +16 -0
  4. package/contracts/fixtures/kfd-adopter-release-v1/kfd-4-replay.json +57 -0
  5. package/contracts/fixtures/next-development-transition-v1/anchored-manual-waiting.json +47 -0
  6. package/contracts/fixtures/next-development-transition-v1/semver-auto-planned.json +47 -0
  7. package/contracts/fixtures/next-development-transition-v1/version-model-cases.json +40 -0
  8. package/contracts/next-development-request-v1.schema.json +66 -0
  9. package/contracts/next-development-transition-v1.schema.json +292 -0
  10. package/contracts/release-cut-v1.schema.json +1 -0
  11. package/contracts/release-train-transition-v1.schema.json +1 -0
  12. package/dist/site/agent-index.json +1 -0
  13. package/dist/site/artifact-schemas.json +2 -0
  14. package/dist/site/buildchain-contract.json +91 -32
  15. package/dist/site/buildchain-site.json +353 -45
  16. package/dist/site/capability-registry.json +7 -6
  17. package/dist/site/cli-registry.json +41 -2
  18. package/dist/site/controller-registry.json +8 -4
  19. package/dist/site/kfd-claims.json +193 -9
  20. package/dist/site/kfd-upstream-aggregate.json +9 -9
  21. package/dist/site/manual-registry.json +26 -10
  22. package/dist/site/node-api-registry.json +8012 -4574
  23. package/dist/site/page-registry.json +331 -31
  24. package/dist/site/public-surface-audit.json +353 -8
  25. package/dist/site/publication-registry.json +4 -4
  26. package/dist/site/release-passport-check-manifest.json +1 -0
  27. package/dist/site/release-provenance.json +12 -0
  28. package/dist/site/schemas/dev-delivery-authority-v2.schema.json +442 -0
  29. package/dist/site/schemas/release-passport-v1.schema.json +3 -0
  30. package/dist/site/site-manifest.json +22 -14
  31. package/dist/site/workflow-registry.json +15 -7
  32. package/docs/MAP.md +5 -2
  33. package/docs/adopter-delivery-gate.md +106 -0
  34. package/docs/aws-us-elastic-runner-burst-plane.md +30 -3
  35. package/docs/cli-reference.md +200 -13
  36. package/docs/dev-alpha-candidate-patrol.md +8 -0
  37. package/docs/dev-delivery-qualification-landing-adr.md +137 -0
  38. package/docs/dev-delivery-warrant.md +164 -27
  39. package/docs/kfd-support.md +7 -2
  40. package/docs/next-development-transition.md +119 -0
  41. package/docs/node-api-reference.md +464 -277
  42. package/docs/release-governance.md +10 -7
  43. package/docs/release-passport.md +15 -2
  44. package/docs/release-train.md +46 -4
  45. package/docs/reusable-build-surface.md +26 -9
  46. package/docs/runtime-train-validation.md +6 -0
  47. package/docs/versioning.md +6 -2
  48. package/package.json +21 -6
  49. package/packages/core/README.md +25 -0
  50. package/packages/core/adopter-delivery-gate.js +576 -0
  51. package/packages/core/adopter-delivery-json.js +66 -0
  52. package/packages/core/adopter-delivery-passport.js +259 -0
  53. package/packages/core/adopter-delivery-vectors.js +158 -0
  54. package/packages/core/adopter-delivery-vectors.json +77 -0
  55. package/packages/core/artifact-verification-envelope.js +5 -5
  56. package/packages/core/buildchain-agent-manuals.js +1 -0
  57. package/packages/core/buildchain-channel-identity.js +118 -0
  58. package/packages/core/buildchain-compatibility-proof.js +54 -0
  59. package/packages/core/buildchain-contract.js +7 -0
  60. package/packages/core/buildchain-delivery-bootstrap.js +240 -0
  61. package/packages/core/buildchain-delivery-infrastructure.js +164 -0
  62. package/packages/core/channel-candidate.js +8 -0
  63. package/packages/core/channel-promotion-baseline.js +52 -0
  64. package/packages/core/controller-evidence.js +2 -1
  65. package/packages/core/dev-alpha-candidate-selection.js +10 -2
  66. package/packages/core/dev-delivery-authority.js +996 -0
  67. package/packages/core/dev-delivery-native-proof.js +418 -0
  68. package/packages/core/dev-delivery-warrant-settlement.js +67 -20
  69. package/packages/core/dev-delivery-warrant.js +141 -48
  70. package/packages/core/kfd-adopter-category-driver.js +167 -0
  71. package/packages/core/kfd-adopter-manifest.js +49 -50
  72. package/packages/core/legacy-kfd-adopter-driver.js +167 -0
  73. package/packages/core/next-development-candidate-reservation.js +186 -0
  74. package/packages/core/next-development-controller.js +726 -0
  75. package/packages/core/next-development-projection.js +288 -0
  76. package/packages/core/next-development-transition.js +738 -0
  77. package/packages/core/paper-agent-entry.js +7 -4
  78. package/packages/core/paper.js +14 -7
  79. package/packages/core/release-blocker-priority.js +192 -0
  80. package/packages/core/release-passport-contract.js +10 -6
  81. package/packages/core/release-passport.js +29 -12
  82. package/packages/core/release-train.js +220 -0
  83. package/scripts/aws-macos-jit-controller-core.mjs +239 -4
  84. package/scripts/aws-macos-jit-controller.mjs +198 -2
  85. package/scripts/aws-macos-jit-instance-rehydrate.mjs +260 -0
  86. package/scripts/aws-macos-jit-source-rebind.mjs +235 -14
  87. package/scripts/aws-macos-jit.mjs +12 -0
  88. package/scripts/buildchain-channel-router.mjs +18 -2
  89. package/scripts/buildchain-cli-help.mjs +9 -2
  90. package/scripts/buildchain-contract-lock.mjs +11 -1
  91. package/scripts/check-internal-architecture.mjs +1 -0
  92. package/scripts/check-inventory.mjs +14 -3
  93. package/scripts/dev-alpha-candidate-patrol.mjs +22 -1
  94. package/scripts/dev-delivery-authority.mjs +368 -0
  95. package/scripts/dev-delivery-native-run.mjs +235 -0
  96. package/scripts/dev-delivery-proof.mjs +64 -2
  97. package/scripts/dev-delivery-two-phase-resume.mjs +90 -0
  98. package/scripts/dev-delivery-two-phase.mjs +577 -0
  99. package/scripts/dev-delivery-warrant.mjs +47 -5
  100. package/scripts/dev-pr-delivery-warrant.mjs +19 -14
  101. package/scripts/generate-buildchain-kfd-witnesses.mjs +88 -94
  102. package/scripts/generate-channel-build-workflow.mjs +82 -31
  103. package/scripts/generate-next-development-guidance.mjs +49 -0
  104. package/scripts/generate-site-bundle.mjs +8 -3
  105. package/scripts/init-repo.mjs +135 -62
  106. package/scripts/next-development-self-dogfood-harness.mjs +409 -0
  107. package/scripts/next-development-self-dogfood.mjs +532 -0
  108. package/scripts/next-development-transition.mjs +47 -0
  109. package/scripts/promotion-channel-router.mjs +5 -3
  110. package/scripts/release-candidate-tail-reseal.mjs +426 -0
  111. package/scripts/release-train-self-dogfood.mjs +579 -0
  112. package/scripts/runtime-ref-core.mjs +4 -17
  113. package/scripts/seal-artifact-signing-requests.mjs +7 -4
  114. package/scripts/site-capability-metadata.mjs +23 -1
  115. package/scripts/stable-candidate-qualification.mjs +7 -7
  116. package/scripts/workflow-call-contract.mjs +1 -1
  117. package/templates/native-dev-delivery.yml +86 -0
@@ -0,0 +1,292 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://buildchain.libkungfu.dev/schemas/next-development-transition-v1.schema.json",
4
+ "title": "Buildchain Next-development Transition v1",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": [
8
+ "schemaVersion",
9
+ "contract",
10
+ "idempotencyKey",
11
+ "repository",
12
+ "completedAlpha",
13
+ "completedAlphaRoot",
14
+ "alphaOutcome",
15
+ "model",
16
+ "target",
17
+ "declaredPaths",
18
+ "adapter",
19
+ "effectBounds",
20
+ "state",
21
+ "materialization",
22
+ "transitions"
23
+ ],
24
+ "properties": {
25
+ "schemaVersion": { "const": 1 },
26
+ "contract": {
27
+ "const": "kungfu-buildchain-next-development-transition/v1"
28
+ },
29
+ "idempotencyKey": { "$ref": "#/$defs/root" },
30
+ "repository": {
31
+ "type": "string",
32
+ "pattern": "^[^/\\s]+/[^/\\s]+$"
33
+ },
34
+ "completedAlpha": { "$ref": "#/$defs/completedAlpha" },
35
+ "completedAlphaRoot": { "$ref": "#/$defs/root" },
36
+ "alphaOutcome": { "const": "preserved-success" },
37
+ "model": { "$ref": "#/$defs/model" },
38
+ "target": { "$ref": "#/$defs/target" },
39
+ "declaredPaths": {
40
+ "type": "array",
41
+ "minItems": 1,
42
+ "uniqueItems": true,
43
+ "items": { "$ref": "#/$defs/path" }
44
+ },
45
+ "adapter": { "$ref": "#/$defs/adapter" },
46
+ "effectBounds": {
47
+ "type": "object",
48
+ "additionalProperties": false,
49
+ "required": ["allowedPaths", "refUpdates", "forbiddenRefNamespaces"],
50
+ "properties": {
51
+ "allowedPaths": {
52
+ "type": "array",
53
+ "minItems": 1,
54
+ "uniqueItems": true,
55
+ "items": { "$ref": "#/$defs/path" }
56
+ },
57
+ "refUpdates": { "type": "array", "maxItems": 0 },
58
+ "forbiddenRefNamespaces": {
59
+ "const": ["refs/heads/alpha/", "refs/tags/"]
60
+ }
61
+ }
62
+ },
63
+ "state": {
64
+ "type": "object",
65
+ "additionalProperties": false,
66
+ "required": ["status", "generation", "stateRoot"],
67
+ "properties": {
68
+ "status": { "$ref": "#/$defs/state" },
69
+ "generation": { "type": "integer", "minimum": 1 },
70
+ "stateRoot": { "$ref": "#/$defs/root" }
71
+ }
72
+ },
73
+ "materialization": {
74
+ "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/materialization" }]
75
+ },
76
+ "transitions": {
77
+ "type": "array",
78
+ "items": { "$ref": "#/$defs/transition" }
79
+ }
80
+ },
81
+ "allOf": [
82
+ {
83
+ "if": {
84
+ "properties": {
85
+ "state": {
86
+ "properties": {
87
+ "status": {
88
+ "enum": ["materialized", "pr-pending", "merged", "verified"]
89
+ }
90
+ }
91
+ }
92
+ }
93
+ },
94
+ "then": {
95
+ "properties": {
96
+ "materialization": { "$ref": "#/$defs/materialization" }
97
+ }
98
+ }
99
+ }
100
+ ],
101
+ "$defs": {
102
+ "gitSha": { "type": "string", "pattern": "^[0-9a-f]{40}$" },
103
+ "root": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
104
+ "semver": {
105
+ "type": "string",
106
+ "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)(?:-[0-9A-Za-z.-]+)?(?:\\+[0-9A-Za-z.-]+)?$"
107
+ },
108
+ "path": {
109
+ "type": "string",
110
+ "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))[^\\s]+$"
111
+ },
112
+ "state": {
113
+ "enum": [
114
+ "planned",
115
+ "waiting-anchor",
116
+ "materialized",
117
+ "pr-pending",
118
+ "merged",
119
+ "verified"
120
+ ]
121
+ },
122
+ "completedAlpha": {
123
+ "type": "object",
124
+ "additionalProperties": false,
125
+ "required": [
126
+ "outcome",
127
+ "version",
128
+ "exactTag",
129
+ "releaseSha",
130
+ "treeSha",
131
+ "publicationRoot",
132
+ "completedAt"
133
+ ],
134
+ "properties": {
135
+ "outcome": { "const": "succeeded" },
136
+ "version": {
137
+ "type": "string",
138
+ "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)-alpha\\.(0|[1-9][0-9]*)$"
139
+ },
140
+ "exactTag": { "type": "string", "minLength": 1 },
141
+ "releaseSha": { "$ref": "#/$defs/gitSha" },
142
+ "treeSha": { "$ref": "#/$defs/gitSha" },
143
+ "publicationRoot": { "$ref": "#/$defs/root" },
144
+ "completedAt": { "type": "string", "format": "date-time" }
145
+ }
146
+ },
147
+ "model": {
148
+ "oneOf": [
149
+ {
150
+ "type": "object",
151
+ "additionalProperties": false,
152
+ "required": ["strategy", "next"],
153
+ "properties": {
154
+ "strategy": { "const": "semver" },
155
+ "next": { "const": "auto" }
156
+ }
157
+ },
158
+ {
159
+ "type": "object",
160
+ "additionalProperties": false,
161
+ "required": ["strategy", "next"],
162
+ "properties": {
163
+ "strategy": { "const": "anchored" },
164
+ "next": { "const": "manual" }
165
+ }
166
+ }
167
+ ]
168
+ },
169
+ "adapter": {
170
+ "type": "object",
171
+ "additionalProperties": false,
172
+ "required": [
173
+ "environmentVariable",
174
+ "sourcePaths",
175
+ "derivedPaths",
176
+ "allowedChangePaths",
177
+ "readOnlyPaths",
178
+ "derivationStage",
179
+ "verificationStage"
180
+ ],
181
+ "properties": {
182
+ "environmentVariable": { "const": "BUILDCHAIN_VERSION" },
183
+ "sourcePaths": {
184
+ "type": "array",
185
+ "minItems": 1,
186
+ "uniqueItems": true,
187
+ "items": { "$ref": "#/$defs/path" }
188
+ },
189
+ "derivedPaths": {
190
+ "type": "array",
191
+ "uniqueItems": true,
192
+ "items": { "$ref": "#/$defs/path" }
193
+ },
194
+ "allowedChangePaths": {
195
+ "type": "array",
196
+ "minItems": 1,
197
+ "uniqueItems": true,
198
+ "items": { "$ref": "#/$defs/path" }
199
+ },
200
+ "readOnlyPaths": {
201
+ "type": "array",
202
+ "uniqueItems": true,
203
+ "items": { "$ref": "#/$defs/path" }
204
+ },
205
+ "derivationStage": {
206
+ "oneOf": [{ "type": "null" }, { "const": "lifecycle.version-state" }]
207
+ },
208
+ "verificationStage": { "const": "lifecycle.verify" }
209
+ }
210
+ },
211
+ "target": {
212
+ "type": "object",
213
+ "additionalProperties": false,
214
+ "required": ["version", "anchor"],
215
+ "properties": {
216
+ "version": {
217
+ "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/semver" }]
218
+ },
219
+ "anchor": {
220
+ "oneOf": [
221
+ { "type": "null" },
222
+ {
223
+ "type": "object",
224
+ "additionalProperties": false,
225
+ "required": ["manifestPath", "manifestRoot"],
226
+ "properties": {
227
+ "manifestPath": { "$ref": "#/$defs/path" },
228
+ "manifestRoot": { "$ref": "#/$defs/root" }
229
+ }
230
+ }
231
+ ]
232
+ }
233
+ }
234
+ },
235
+ "materialization": {
236
+ "type": "object",
237
+ "additionalProperties": false,
238
+ "required": [
239
+ "targetVersion",
240
+ "anchorRoot",
241
+ "paths",
242
+ "materializationRoot"
243
+ ],
244
+ "properties": {
245
+ "targetVersion": { "$ref": "#/$defs/semver" },
246
+ "anchorRoot": {
247
+ "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/root" }]
248
+ },
249
+ "paths": {
250
+ "type": "array",
251
+ "minItems": 1,
252
+ "items": {
253
+ "type": "object",
254
+ "additionalProperties": false,
255
+ "required": ["path", "beforeRoot", "afterRoot", "changed"],
256
+ "properties": {
257
+ "path": { "$ref": "#/$defs/path" },
258
+ "beforeRoot": { "$ref": "#/$defs/root" },
259
+ "afterRoot": { "$ref": "#/$defs/root" },
260
+ "changed": { "type": "boolean" }
261
+ }
262
+ }
263
+ },
264
+ "materializationRoot": { "$ref": "#/$defs/root" }
265
+ }
266
+ },
267
+ "transition": {
268
+ "type": "object",
269
+ "additionalProperties": false,
270
+ "required": [
271
+ "expectedStateRoot",
272
+ "from",
273
+ "to",
274
+ "event",
275
+ "evidenceRoot",
276
+ "recordedAt",
277
+ "requestRoot",
278
+ "transitionRoot"
279
+ ],
280
+ "properties": {
281
+ "expectedStateRoot": { "$ref": "#/$defs/root" },
282
+ "from": { "$ref": "#/$defs/state" },
283
+ "to": { "$ref": "#/$defs/state" },
284
+ "event": { "type": "string", "minLength": 1 },
285
+ "evidenceRoot": { "$ref": "#/$defs/root" },
286
+ "recordedAt": { "type": "string", "format": "date-time" },
287
+ "requestRoot": { "$ref": "#/$defs/root" },
288
+ "transitionRoot": { "$ref": "#/$defs/root" }
289
+ }
290
+ }
291
+ }
292
+ }
@@ -49,6 +49,7 @@
49
49
  "properties": {
50
50
  "cause": {
51
51
  "enum": [
52
+ "release-blocker-repair",
52
53
  "incompatible-semantics",
53
54
  "alpha-base-incompatibility",
54
55
  "invalid-authority",
@@ -75,6 +75,7 @@
75
75
  },
76
76
  "supersessionCause": {
77
77
  "enum": [
78
+ "release-blocker-repair",
78
79
  "incompatible-semantics",
79
80
  "alpha-base-incompatibility",
80
81
  "invalid-authority",
@@ -22,6 +22,7 @@
22
22
  "schemas/release-tail-provider-bindings-v1.schema.json",
23
23
  "schemas/kfd-agent-hub-adoption.schema.json",
24
24
  "schemas/kfd-product-gate-input-v1.schema.json",
25
+ "schemas/dev-delivery-authority-v2.schema.json",
25
26
  "buildchain-contract.json",
26
27
  "kfd-upstream-aggregate.json",
27
28
  "kfd-claims.json",
@@ -10,6 +10,7 @@
10
10
  "schemas/release-tail-provider-bindings-v1.schema.json",
11
11
  "schemas/kfd-agent-hub-adoption.schema.json",
12
12
  "schemas/kfd-product-gate-input-v1.schema.json",
13
+ "schemas/dev-delivery-authority-v2.schema.json",
13
14
  "kfd-support.json",
14
15
  "artifact-evidence.json",
15
16
  "product-mechanism.json",
@@ -47,6 +48,7 @@
47
48
  "schemas/release-tail-provider-bindings-v1.schema.json",
48
49
  "schemas/kfd-agent-hub-adoption.schema.json",
49
50
  "schemas/kfd-product-gate-input-v1.schema.json",
51
+ "schemas/dev-delivery-authority-v2.schema.json",
50
52
  "buildchain-contract.json",
51
53
  "kfd-claims.json",
52
54
  "product-mechanism.json",
@@ -4,7 +4,7 @@
4
4
  "product": {
5
5
  "name": "Buildchain",
6
6
  "package": "@kungfu-tech/buildchain",
7
- "version": "3.0.9-alpha.0",
7
+ "version": "3.0.9-alpha.10",
8
8
  "repository": "https://github.com/kungfu-systems/buildchain"
9
9
  },
10
10
  "majorLine": "v3",
@@ -64,6 +64,60 @@
64
64
  "cutRoot": "sha256:4fd5ae0cdad01a09e91bbb3f183ac595510a8f25baf7ba865de7633a7eacb3eb",
65
65
  "proofRoot": "sha256:36c85ba487be1528e85776d2bc5f766a971d42ac238aec30071945f7d60d9fc5"
66
66
  },
67
+ {
68
+ "schema": "kungfu.buildchain.compatibility-proof/v1",
69
+ "proofId": "build-channel-router-d40dd0-to-30549a",
70
+ "predicate": "compatible-breaking-digest",
71
+ "direction": "source-to-target",
72
+ "operation": "accept-contract-lock",
73
+ "source": {
74
+ "contract": "kungfu-buildchain-runtime-contract-world",
75
+ "surfaceId": "controller:build-channel-router",
76
+ "surfaceKind": "controller",
77
+ "breakingDigest": "sha256:d40dd05d7e07473d4b2dc1b62fbb0ed6f06449b4d3a7c44a2e8014313e3c0273"
78
+ },
79
+ "target": {
80
+ "contract": "kungfu-buildchain-runtime-contract-world",
81
+ "surfaceId": "controller:build-channel-router",
82
+ "surfaceKind": "controller",
83
+ "breakingDigest": "sha256:30549aa26cd1e1dd81f10fe3529d3c6e3f8438a6efa0100c47ebae4d2f3d71df"
84
+ },
85
+ "scope": {
86
+ "contract": "kungfu-buildchain-runtime-contract-world",
87
+ "surfaceId": "controller:build-channel-router",
88
+ "surfaceKind": "controller",
89
+ "majorLines": [
90
+ "v2",
91
+ "v3"
92
+ ],
93
+ "operation": "accept-contract-lock"
94
+ },
95
+ "scopeRoot": "sha256:dc381e72e9cad86293254f8542394f1abc27b4b0f07c122cb4cad5f73b381ccb",
96
+ "evidence": {
97
+ "kind": "protected-pull-request-contract-acceptance",
98
+ "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2549",
99
+ "protectedBase": "dev/v3/v3.0",
100
+ "sourceCommit": "0d87b772265066f5e6157e1ba6a2ba1021fb5225",
101
+ "mergeCommit": "34fad9d3a94c450d75c0d06fd6ed00470c992ff7",
102
+ "contractDigest": "sha256:2584ba36ab54cd5e9bab9e34dfc08d87a55dc57de1be7641492bf7ceb1366350",
103
+ "compatibilityDigest": "sha256:80f65cc191b1f771475184edf8a1bf9c10dd69bb58060aa09313d0e1e57f508a"
104
+ },
105
+ "evidenceRoot": "sha256:e449bdc62832fd18b33d93833207d70e843f066a85aae8b0c717234194ecb497",
106
+ "authority": {
107
+ "kind": "protected-base-contract-authority",
108
+ "repository": "kungfu-systems/buildchain",
109
+ "protectedBase": "dev/v3/v3.0"
110
+ },
111
+ "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
112
+ "cut": {
113
+ "kind": "protected-git-cut",
114
+ "repository": "kungfu-systems/buildchain",
115
+ "protectedBase": "dev/v3/v3.0",
116
+ "commit": "34fad9d3a94c450d75c0d06fd6ed00470c992ff7"
117
+ },
118
+ "cutRoot": "sha256:3b83f02e22ca82fc4a099b5f8c4353fffb1423b0a5cba41860b1ba86f7c8cbb7",
119
+ "proofRoot": "sha256:36d2e188f43385d6191116393aa81ea025ccf61e21a1c5eae1d56be92a203b31"
120
+ },
67
121
  {
68
122
  "schema": "kungfu.buildchain.compatibility-proof/v1",
69
123
  "proofId": "build-lifecycle-307459-to-6b8d38",
@@ -324,7 +378,7 @@
324
378
  "retryable GitHub fallback fetches use a bounded attempt budget before exact source SHA and tree verification"
325
379
  ],
326
380
  "breakingDigest": "sha256:dfbedd543ae0c067982b5c8c02d98dd2f7f7df88752be97fb330da6b0ba30faa",
327
- "auditDigest": "sha256:8ea77f06f35c5ea0eae0a06625e397c49dcf9863d05d05dcf4d2d80369f58dff"
381
+ "auditDigest": "sha256:e1a045509343ab4e907cae61d40b931b8cd5e126a85296669ab2bd49f7bc8ad3"
328
382
  },
329
383
  {
330
384
  "contractVersion": 1,
@@ -363,7 +417,7 @@
363
417
  "alpha and stable channel selections use separate consumer contract locks by default"
364
418
  ],
365
419
  "breakingDigest": "sha256:c4597dfa89e1a58f1023905092b849644f5c080abf150aeba9c7e1cd5ed43962",
366
- "auditDigest": "sha256:af415d283c9f7706d93c2c3df0b330c59487097364aa2ebc6e139a7275bcb635"
420
+ "auditDigest": "sha256:789173c7e5508c7e7947a59fbcb3b5bebc3783ed47695d7f5abb468a9b5d4d7d"
367
421
  },
368
422
  {
369
423
  "contractVersion": 1,
@@ -521,7 +575,7 @@
521
575
  "resume-from-candidate-run is fail-closed and uses a fresh caller event instead of rerunning a frozen startup graph"
522
576
  ],
523
577
  "breakingDigest": "sha256:9db8dd07152855d03ff30f9c571438593c689d3e8139fa45431d000f548242f5",
524
- "auditDigest": "sha256:4ccecb9f859b986563354eab682d803b8da790d35a90d60d53b8c93927c60899",
578
+ "auditDigest": "sha256:27d35c025cbf7b5c87af599da3559657fc1aea88cf9d912a8035ccc1e7057c07",
525
579
  "compatibleBreakingDigests": [
526
580
  "sha256:aa30f22e3af0a89841310bdbdc900844dd95a66974db173fa140a71bbd7e82c0"
527
581
  ],
@@ -571,7 +625,7 @@
571
625
  "channel-aware artifact host facts are checked against the deploy plan before adapter side effects"
572
626
  ],
573
627
  "breakingDigest": "sha256:27f0cb9c7d97288850d215be8696b323471c41fd1cdf3a2ff3ebf21f62541960",
574
- "auditDigest": "sha256:b54c067c31c4c76da44d63fff8945229f7afab262f9fc9131915abeadca56e4f"
628
+ "auditDigest": "sha256:748e1d69ca28b631e86788de0ff359b11164b3ac1edda1b146ca49f3ac3856dc"
575
629
  },
576
630
  {
577
631
  "contractVersion": 1,
@@ -872,7 +926,7 @@
872
926
  "release-state SHA is recorded as a durable audit entrance"
873
927
  ],
874
928
  "breakingDigest": "sha256:b627e1b2ece9b6049517a942c5139e342e6077cdd3d8962d61cef8481b1f70ad",
875
- "auditDigest": "sha256:3118f2de735ad98e4d9d70d3b62f905709292c0c7989175f9332bef3ac58aacd"
929
+ "auditDigest": "sha256:9fdb16bac3b7d2b4a1cacd684e06b4f029d4d4ff41a0d80b54217fc59e010abd"
876
930
  },
877
931
  {
878
932
  "contractVersion": 1,
@@ -921,7 +975,7 @@
921
975
  "prose-only public claims downgrade the release trust passport audit"
922
976
  ],
923
977
  "breakingDigest": "sha256:f0b636eb925ddbf45ff1a8872454ab7b4dd98857cac12bb75217830130e62a16",
924
- "auditDigest": "sha256:3118f2de735ad98e4d9d70d3b62f905709292c0c7989175f9332bef3ac58aacd"
978
+ "auditDigest": "sha256:9fdb16bac3b7d2b4a1cacd684e06b4f029d4d4ff41a0d80b54217fc59e010abd"
925
979
  },
926
980
  {
927
981
  "contractVersion": 1,
@@ -981,7 +1035,7 @@
981
1035
  "README badge block checks and writes are generated from machine-readable repository facts"
982
1036
  ],
983
1037
  "breakingDigest": "sha256:90a73892b2d6c214048448d5f45df75639bdf7b7e8fefd9c596e04b087407bcc",
984
- "auditDigest": "sha256:af168b438d4c4f0638d4309e33c1e9be5b379deeae182f896da4b0f08e5efbad"
1038
+ "auditDigest": "sha256:856e79ff668877e0b366850bb0e37fa193206f8dc5a51091bc74dd1c2240f8e2"
985
1039
  },
986
1040
  {
987
1041
  "contractVersion": 1,
@@ -1071,7 +1125,7 @@
1071
1125
  "manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
1072
1126
  ],
1073
1127
  "breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
1074
- "auditDigest": "sha256:988b82406567bca506d6f35b8b205a6b2d937d304d7224caf3d4d7732e2ebcc1"
1128
+ "auditDigest": "sha256:4b31a0588bad10ebe4005984beb10d890ce631c150b59f3f11b12c95ea431be5"
1075
1129
  },
1076
1130
  {
1077
1131
  "contractVersion": 1,
@@ -1093,7 +1147,7 @@
1093
1147
  "agents can discover supported Node APIs without importing internal file paths"
1094
1148
  ],
1095
1149
  "breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
1096
- "auditDigest": "sha256:0c68f3317e71302c1ecdc80dd81260b18ccff63990e2270147747e9fb75ec735"
1150
+ "auditDigest": "sha256:5f6dc623f216d3d903417a9e551217498fd14b622524f991c425035430aac399"
1097
1151
  },
1098
1152
  {
1099
1153
  "contractVersion": 1,
@@ -1144,7 +1198,7 @@
1144
1198
  "controllerDescriptor": {
1145
1199
  "contract": "buildchain.controller-descriptor/v1",
1146
1200
  "digest": "sha256:373723a73d188194d389dee04c394d3b79cb0c016a370f2f5d0f60979a02ed48",
1147
- "registryDigest": "sha256:af18b46d8441d29c319a30ba30dfed9707bf2188c8eac868de34db366efef880",
1201
+ "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
1148
1202
  "inputClassifications": {
1149
1203
  "buildchain-ref": {
1150
1204
  "classification": "included",
@@ -1327,7 +1381,7 @@
1327
1381
  "controllerDescriptor": {
1328
1382
  "contract": "buildchain.controller-descriptor/v1",
1329
1383
  "digest": "sha256:f986e79241d831f027a0955a35c918f946989176c76555e20f156ed31fb10c94",
1330
- "registryDigest": "sha256:af18b46d8441d29c319a30ba30dfed9707bf2188c8eac868de34db366efef880",
1384
+ "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
1331
1385
  "inputClassifications": {
1332
1386
  "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
1333
1387
  "classification": "redacted",
@@ -1718,7 +1772,7 @@
1718
1772
  "missing receipts are non-qualifying and must not be represented as a successful controller run"
1719
1773
  ],
1720
1774
  "breakingDigest": "sha256:6b8d38e92b2c67b5bc83fae0a3fd95bfa47582fbc176e6cdeebe7630a57534cb",
1721
- "auditDigest": "sha256:8ea77f06f35c5ea0eae0a06625e397c49dcf9863d05d05dcf4d2d80369f58dff",
1775
+ "auditDigest": "sha256:e1a045509343ab4e907cae61d40b931b8cd5e126a85296669ab2bd49f7bc8ad3",
1722
1776
  "compatibleBreakingDigests": [
1723
1777
  "sha256:30745921541e9b0f70475bb2178c2559f6aef248f6680670ccd44d8c5a69a6b1",
1724
1778
  "sha256:e264a79f9f399038c2fcfd21e4168c68c2e1485ee5c651c02242a02b622ac2be"
@@ -1749,7 +1803,6 @@
1749
1803
  "workflowPath": ".github/workflows/build.yml",
1750
1804
  "requiredStages": [
1751
1805
  "resolve-channel",
1752
- "build",
1753
1806
  "aggregate"
1754
1807
  ],
1755
1808
  "capabilities": [
@@ -1865,8 +1918,8 @@
1865
1918
  ],
1866
1919
  "controllerDescriptor": {
1867
1920
  "contract": "buildchain.controller-descriptor/v1",
1868
- "digest": "sha256:48545554883888862984cdf1b6b4b56341531cdd6192600782a76b92ad22fd36",
1869
- "registryDigest": "sha256:af18b46d8441d29c319a30ba30dfed9707bf2188c8eac868de34db366efef880",
1921
+ "digest": "sha256:6dfa79003f0c92e336c56f07f45f57cc5572921bdb46e432fd809fb19ee823bb",
1922
+ "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
1870
1923
  "inputClassifications": {
1871
1924
  "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
1872
1925
  "classification": "redacted",
@@ -2268,8 +2321,14 @@
2268
2321
  "redacted input values are never serialized and digest-only input values are never emitted in plaintext",
2269
2322
  "missing receipts are non-qualifying and must not be represented as a successful controller run"
2270
2323
  ],
2271
- "breakingDigest": "sha256:d40dd05d7e07473d4b2dc1b62fbb0ed6f06449b4d3a7c44a2e8014313e3c0273",
2272
- "auditDigest": "sha256:af415d283c9f7706d93c2c3df0b330c59487097364aa2ebc6e139a7275bcb635"
2324
+ "breakingDigest": "sha256:30549aa26cd1e1dd81f10fe3529d3c6e3f8438a6efa0100c47ebae4d2f3d71df",
2325
+ "auditDigest": "sha256:789173c7e5508c7e7947a59fbcb3b5bebc3783ed47695d7f5abb468a9b5d4d7d",
2326
+ "compatibleBreakingDigests": [
2327
+ "sha256:d40dd05d7e07473d4b2dc1b62fbb0ed6f06449b4d3a7c44a2e8014313e3c0273"
2328
+ ],
2329
+ "compatibilityProofRoots": [
2330
+ "sha256:36d2e188f43385d6191116393aa81ea025ccf61e21a1c5eae1d56be92a203b31"
2331
+ ]
2273
2332
  },
2274
2333
  {
2275
2334
  "contractVersion": 1,
@@ -2339,7 +2398,7 @@
2339
2398
  "controllerDescriptor": {
2340
2399
  "contract": "buildchain.controller-descriptor/v1",
2341
2400
  "digest": "sha256:8e42956a2c10fa109500e72b97994f06b3d22a19cc63a46f66410b2e81706e9d",
2342
- "registryDigest": "sha256:af18b46d8441d29c319a30ba30dfed9707bf2188c8eac868de34db366efef880",
2401
+ "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
2343
2402
  "inputClassifications": {
2344
2403
  "artifact-name": {
2345
2404
  "classification": "included",
@@ -2556,7 +2615,7 @@
2556
2615
  "controllerDescriptor": {
2557
2616
  "contract": "buildchain.controller-descriptor/v1",
2558
2617
  "digest": "sha256:c5274b37f04d0054559fdc8698c51bd0f0d8ae470baf163e9caa7699aa970575",
2559
- "registryDigest": "sha256:af18b46d8441d29c319a30ba30dfed9707bf2188c8eac868de34db366efef880",
2618
+ "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
2560
2619
  "inputClassifications": {
2561
2620
  "artifact-path": {
2562
2621
  "classification": "digest-only",
@@ -2735,7 +2794,7 @@
2735
2794
  "missing receipts are non-qualifying and must not be represented as a successful controller run"
2736
2795
  ],
2737
2796
  "breakingDigest": "sha256:f14825324a16b51c2e9ed708ebe64e1932e05b6d5e0866f83aea8439decb4a27",
2738
- "auditDigest": "sha256:b54c067c31c4c76da44d63fff8945229f7afab262f9fc9131915abeadca56e4f"
2797
+ "auditDigest": "sha256:748e1d69ca28b631e86788de0ff359b11164b3ac1edda1b146ca49f3ac3856dc"
2739
2798
  },
2740
2799
  {
2741
2800
  "contractVersion": 1,
@@ -2800,7 +2859,7 @@
2800
2859
  "controllerDescriptor": {
2801
2860
  "contract": "buildchain.controller-descriptor/v1",
2802
2861
  "digest": "sha256:6b132790b9798e8a5dfbe095701d8e024c160a08bc7c4bd477ee79feef7a9cfd",
2803
- "registryDigest": "sha256:af18b46d8441d29c319a30ba30dfed9707bf2188c8eac868de34db366efef880",
2862
+ "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
2804
2863
  "inputClassifications": {
2805
2864
  "artifact-name": {
2806
2865
  "classification": "included",
@@ -2895,7 +2954,7 @@
2895
2954
  "missing receipts are non-qualifying and must not be represented as a successful controller run"
2896
2955
  ],
2897
2956
  "breakingDigest": "sha256:3f76502666069c2727d23efcfdb08fb80f89ced1955a69e29f11525ae88aca1d",
2898
- "auditDigest": "sha256:2cf66d8c40760900284c8417622b11120602a29016a55347a2ee709aafe4b3d5"
2957
+ "auditDigest": "sha256:6132e68620355e2a4d491172bc5eab58121369265baab0dee72a99218efa559a"
2899
2958
  },
2900
2959
  {
2901
2960
  "contractVersion": 1,
@@ -2982,7 +3041,7 @@
2982
3041
  "controllerDescriptor": {
2983
3042
  "contract": "buildchain.controller-descriptor/v1",
2984
3043
  "digest": "sha256:6d71409659fbf8543c7e520b0c493d8afe86bdf60286b860bb917f0041ebc173",
2985
- "registryDigest": "sha256:af18b46d8441d29c319a30ba30dfed9707bf2188c8eac868de34db366efef880",
3044
+ "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
2986
3045
  "inputClassifications": {
2987
3046
  "artifact-name": {
2988
3047
  "classification": "included",
@@ -3145,7 +3204,7 @@
3145
3204
  "missing receipts are non-qualifying and must not be represented as a successful controller run"
3146
3205
  ],
3147
3206
  "breakingDigest": "sha256:0eb318df455ef9cb737a7c2515a2411b685d34ed0bde7b5f5b173a7a42513114",
3148
- "auditDigest": "sha256:7467fb0651dae2f5463f8dd07e3c28690f7a2aa63b9560810f8e3e0f4a49a970"
3207
+ "auditDigest": "sha256:43eaedc62a6e9ab4658fee9a3fb0ad729af2ca60426143543b938e725bbbfa2e"
3149
3208
  },
3150
3209
  {
3151
3210
  "contractVersion": 1,
@@ -3315,7 +3374,7 @@
3315
3374
  "controllerDescriptor": {
3316
3375
  "contract": "buildchain.controller-descriptor/v1",
3317
3376
  "digest": "sha256:4d44d0f729fbc112aa309ed22e74b9f1401b0470b99c1e6061c278babe5e4b8b",
3318
- "registryDigest": "sha256:af18b46d8441d29c319a30ba30dfed9707bf2188c8eac868de34db366efef880",
3377
+ "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
3319
3378
  "inputClassifications": {
3320
3379
  "BUILDCHAIN_ISSUE_APP_ID": {
3321
3380
  "classification": "redacted",
@@ -3810,7 +3869,7 @@
3810
3869
  "missing receipts are non-qualifying and must not be represented as a successful controller run"
3811
3870
  ],
3812
3871
  "breakingDigest": "sha256:015d8de793adbd4c539416be7d7512e18cc92097e629b0203fa06d2c183e98bd",
3813
- "auditDigest": "sha256:4ccecb9f859b986563354eab682d803b8da790d35a90d60d53b8c93927c60899"
3872
+ "auditDigest": "sha256:27d35c025cbf7b5c87af599da3559657fc1aea88cf9d912a8035ccc1e7057c07"
3814
3873
  },
3815
3874
  {
3816
3875
  "contractVersion": 1,
@@ -3875,7 +3934,7 @@
3875
3934
  "controllerDescriptor": {
3876
3935
  "contract": "buildchain.controller-descriptor/v1",
3877
3936
  "digest": "sha256:660579b5561e8e33375a3f3b1fefbb8a5bd8241a55ba43374d786fb772c24a12",
3878
- "registryDigest": "sha256:af18b46d8441d29c319a30ba30dfed9707bf2188c8eac868de34db366efef880",
3937
+ "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
3879
3938
  "inputClassifications": {
3880
3939
  "agent-work-context-json": {
3881
3940
  "classification": "digest-only",
@@ -4010,7 +4069,7 @@
4010
4069
  "controllerDescriptor": {
4011
4070
  "contract": "buildchain.controller-descriptor/v1",
4012
4071
  "digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555",
4013
- "registryDigest": "sha256:af18b46d8441d29c319a30ba30dfed9707bf2188c8eac868de34db366efef880",
4072
+ "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
4014
4073
  "inputClassifications": {}
4015
4074
  },
4016
4075
  "guarantees": [
@@ -4023,7 +4082,7 @@
4023
4082
  "auditDigest": "sha256:d07482cd66413a2fb3781a3b76f960b8151b6231841799647fe237820de2fde6"
4024
4083
  }
4025
4084
  ],
4026
- "compatibilityProofRegistryRoot": "sha256:f11b62ce69cfb0ff25b66861474b99a75148192c0474c9d1cc2067e347b05abd",
4027
- "compatibilityDigest": "sha256:c74d76789e49291503292e0a5c38fffc5e3ef420ad85eeb8a2480d287fccfed7",
4028
- "contractDigest": "sha256:cedca51e1a954aed4914510a8e5bdc5446d85e1fa1325f7952c8cc3cdd3e3a1e"
4085
+ "compatibilityProofRegistryRoot": "sha256:aec674d174461493e3493b3fe3164d62745a9ce18cb6a560f94bd99f2759eb53",
4086
+ "compatibilityDigest": "sha256:eb2fafb181b33002f81102a966f0a801ab1798101446635703ab6acfea51d9aa",
4087
+ "contractDigest": "sha256:beb0c44c85d99dc85ab3468833d42fc7fb5cbf448407ce82e52ed553bcd77967"
4029
4088
  }