@kungfu-tech/buildchain 3.0.9-alpha.0 → 3.0.9-alpha.10
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/bin/buildchain.mjs +9 -1
- package/contracts/dev-delivery-authority-v2.schema.json +253 -0
- package/contracts/fixtures/kfd-adopter-release-v1/kfd-4-perspective.json +16 -0
- package/contracts/fixtures/kfd-adopter-release-v1/kfd-4-replay.json +57 -0
- package/contracts/fixtures/next-development-transition-v1/anchored-manual-waiting.json +47 -0
- package/contracts/fixtures/next-development-transition-v1/semver-auto-planned.json +47 -0
- package/contracts/fixtures/next-development-transition-v1/version-model-cases.json +40 -0
- package/contracts/next-development-request-v1.schema.json +66 -0
- package/contracts/next-development-transition-v1.schema.json +292 -0
- package/contracts/release-cut-v1.schema.json +1 -0
- package/contracts/release-train-transition-v1.schema.json +1 -0
- package/dist/site/agent-index.json +1 -0
- package/dist/site/artifact-schemas.json +2 -0
- package/dist/site/buildchain-contract.json +91 -32
- package/dist/site/buildchain-site.json +353 -45
- package/dist/site/capability-registry.json +7 -6
- package/dist/site/cli-registry.json +41 -2
- package/dist/site/controller-registry.json +8 -4
- package/dist/site/kfd-claims.json +193 -9
- package/dist/site/kfd-upstream-aggregate.json +9 -9
- package/dist/site/manual-registry.json +26 -10
- package/dist/site/node-api-registry.json +8012 -4574
- package/dist/site/page-registry.json +331 -31
- package/dist/site/public-surface-audit.json +353 -8
- package/dist/site/publication-registry.json +4 -4
- package/dist/site/release-passport-check-manifest.json +1 -0
- package/dist/site/release-provenance.json +12 -0
- package/dist/site/schemas/dev-delivery-authority-v2.schema.json +442 -0
- package/dist/site/schemas/release-passport-v1.schema.json +3 -0
- package/dist/site/site-manifest.json +22 -14
- package/dist/site/workflow-registry.json +15 -7
- package/docs/MAP.md +5 -2
- package/docs/adopter-delivery-gate.md +106 -0
- package/docs/aws-us-elastic-runner-burst-plane.md +30 -3
- package/docs/cli-reference.md +200 -13
- package/docs/dev-alpha-candidate-patrol.md +8 -0
- package/docs/dev-delivery-qualification-landing-adr.md +137 -0
- package/docs/dev-delivery-warrant.md +164 -27
- package/docs/kfd-support.md +7 -2
- package/docs/next-development-transition.md +119 -0
- package/docs/node-api-reference.md +464 -277
- package/docs/release-governance.md +10 -7
- package/docs/release-passport.md +15 -2
- package/docs/release-train.md +46 -4
- package/docs/reusable-build-surface.md +26 -9
- package/docs/runtime-train-validation.md +6 -0
- package/docs/versioning.md +6 -2
- package/package.json +21 -6
- package/packages/core/README.md +25 -0
- package/packages/core/adopter-delivery-gate.js +576 -0
- package/packages/core/adopter-delivery-json.js +66 -0
- package/packages/core/adopter-delivery-passport.js +259 -0
- package/packages/core/adopter-delivery-vectors.js +158 -0
- package/packages/core/adopter-delivery-vectors.json +77 -0
- package/packages/core/artifact-verification-envelope.js +5 -5
- package/packages/core/buildchain-agent-manuals.js +1 -0
- package/packages/core/buildchain-channel-identity.js +118 -0
- package/packages/core/buildchain-compatibility-proof.js +54 -0
- package/packages/core/buildchain-contract.js +7 -0
- package/packages/core/buildchain-delivery-bootstrap.js +240 -0
- package/packages/core/buildchain-delivery-infrastructure.js +164 -0
- package/packages/core/channel-candidate.js +8 -0
- package/packages/core/channel-promotion-baseline.js +52 -0
- package/packages/core/controller-evidence.js +2 -1
- package/packages/core/dev-alpha-candidate-selection.js +10 -2
- package/packages/core/dev-delivery-authority.js +996 -0
- package/packages/core/dev-delivery-native-proof.js +418 -0
- package/packages/core/dev-delivery-warrant-settlement.js +67 -20
- package/packages/core/dev-delivery-warrant.js +141 -48
- package/packages/core/kfd-adopter-category-driver.js +167 -0
- package/packages/core/kfd-adopter-manifest.js +49 -50
- package/packages/core/legacy-kfd-adopter-driver.js +167 -0
- package/packages/core/next-development-candidate-reservation.js +186 -0
- package/packages/core/next-development-controller.js +726 -0
- package/packages/core/next-development-projection.js +288 -0
- package/packages/core/next-development-transition.js +738 -0
- package/packages/core/paper-agent-entry.js +7 -4
- package/packages/core/paper.js +14 -7
- package/packages/core/release-blocker-priority.js +192 -0
- package/packages/core/release-passport-contract.js +10 -6
- package/packages/core/release-passport.js +29 -12
- package/packages/core/release-train.js +220 -0
- package/scripts/aws-macos-jit-controller-core.mjs +239 -4
- package/scripts/aws-macos-jit-controller.mjs +198 -2
- package/scripts/aws-macos-jit-instance-rehydrate.mjs +260 -0
- package/scripts/aws-macos-jit-source-rebind.mjs +235 -14
- package/scripts/aws-macos-jit.mjs +12 -0
- package/scripts/buildchain-channel-router.mjs +18 -2
- package/scripts/buildchain-cli-help.mjs +9 -2
- package/scripts/buildchain-contract-lock.mjs +11 -1
- package/scripts/check-internal-architecture.mjs +1 -0
- package/scripts/check-inventory.mjs +14 -3
- package/scripts/dev-alpha-candidate-patrol.mjs +22 -1
- package/scripts/dev-delivery-authority.mjs +368 -0
- package/scripts/dev-delivery-native-run.mjs +235 -0
- package/scripts/dev-delivery-proof.mjs +64 -2
- package/scripts/dev-delivery-two-phase-resume.mjs +90 -0
- package/scripts/dev-delivery-two-phase.mjs +577 -0
- package/scripts/dev-delivery-warrant.mjs +47 -5
- package/scripts/dev-pr-delivery-warrant.mjs +19 -14
- package/scripts/generate-buildchain-kfd-witnesses.mjs +88 -94
- package/scripts/generate-channel-build-workflow.mjs +82 -31
- package/scripts/generate-next-development-guidance.mjs +49 -0
- package/scripts/generate-site-bundle.mjs +8 -3
- package/scripts/init-repo.mjs +135 -62
- package/scripts/next-development-self-dogfood-harness.mjs +409 -0
- package/scripts/next-development-self-dogfood.mjs +532 -0
- package/scripts/next-development-transition.mjs +47 -0
- package/scripts/promotion-channel-router.mjs +5 -3
- package/scripts/release-candidate-tail-reseal.mjs +426 -0
- package/scripts/release-train-self-dogfood.mjs +579 -0
- package/scripts/runtime-ref-core.mjs +4 -17
- package/scripts/seal-artifact-signing-requests.mjs +7 -4
- package/scripts/site-capability-metadata.mjs +23 -1
- package/scripts/stable-candidate-qualification.mjs +7 -7
- package/scripts/workflow-call-contract.mjs +1 -1
- package/templates/native-dev-delivery.yml +86 -0
|
@@ -0,0 +1,292 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://buildchain.libkungfu.dev/schemas/next-development-transition-v1.schema.json",
|
|
4
|
+
"title": "Buildchain Next-development Transition v1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"additionalProperties": false,
|
|
7
|
+
"required": [
|
|
8
|
+
"schemaVersion",
|
|
9
|
+
"contract",
|
|
10
|
+
"idempotencyKey",
|
|
11
|
+
"repository",
|
|
12
|
+
"completedAlpha",
|
|
13
|
+
"completedAlphaRoot",
|
|
14
|
+
"alphaOutcome",
|
|
15
|
+
"model",
|
|
16
|
+
"target",
|
|
17
|
+
"declaredPaths",
|
|
18
|
+
"adapter",
|
|
19
|
+
"effectBounds",
|
|
20
|
+
"state",
|
|
21
|
+
"materialization",
|
|
22
|
+
"transitions"
|
|
23
|
+
],
|
|
24
|
+
"properties": {
|
|
25
|
+
"schemaVersion": { "const": 1 },
|
|
26
|
+
"contract": {
|
|
27
|
+
"const": "kungfu-buildchain-next-development-transition/v1"
|
|
28
|
+
},
|
|
29
|
+
"idempotencyKey": { "$ref": "#/$defs/root" },
|
|
30
|
+
"repository": {
|
|
31
|
+
"type": "string",
|
|
32
|
+
"pattern": "^[^/\\s]+/[^/\\s]+$"
|
|
33
|
+
},
|
|
34
|
+
"completedAlpha": { "$ref": "#/$defs/completedAlpha" },
|
|
35
|
+
"completedAlphaRoot": { "$ref": "#/$defs/root" },
|
|
36
|
+
"alphaOutcome": { "const": "preserved-success" },
|
|
37
|
+
"model": { "$ref": "#/$defs/model" },
|
|
38
|
+
"target": { "$ref": "#/$defs/target" },
|
|
39
|
+
"declaredPaths": {
|
|
40
|
+
"type": "array",
|
|
41
|
+
"minItems": 1,
|
|
42
|
+
"uniqueItems": true,
|
|
43
|
+
"items": { "$ref": "#/$defs/path" }
|
|
44
|
+
},
|
|
45
|
+
"adapter": { "$ref": "#/$defs/adapter" },
|
|
46
|
+
"effectBounds": {
|
|
47
|
+
"type": "object",
|
|
48
|
+
"additionalProperties": false,
|
|
49
|
+
"required": ["allowedPaths", "refUpdates", "forbiddenRefNamespaces"],
|
|
50
|
+
"properties": {
|
|
51
|
+
"allowedPaths": {
|
|
52
|
+
"type": "array",
|
|
53
|
+
"minItems": 1,
|
|
54
|
+
"uniqueItems": true,
|
|
55
|
+
"items": { "$ref": "#/$defs/path" }
|
|
56
|
+
},
|
|
57
|
+
"refUpdates": { "type": "array", "maxItems": 0 },
|
|
58
|
+
"forbiddenRefNamespaces": {
|
|
59
|
+
"const": ["refs/heads/alpha/", "refs/tags/"]
|
|
60
|
+
}
|
|
61
|
+
}
|
|
62
|
+
},
|
|
63
|
+
"state": {
|
|
64
|
+
"type": "object",
|
|
65
|
+
"additionalProperties": false,
|
|
66
|
+
"required": ["status", "generation", "stateRoot"],
|
|
67
|
+
"properties": {
|
|
68
|
+
"status": { "$ref": "#/$defs/state" },
|
|
69
|
+
"generation": { "type": "integer", "minimum": 1 },
|
|
70
|
+
"stateRoot": { "$ref": "#/$defs/root" }
|
|
71
|
+
}
|
|
72
|
+
},
|
|
73
|
+
"materialization": {
|
|
74
|
+
"oneOf": [{ "type": "null" }, { "$ref": "#/$defs/materialization" }]
|
|
75
|
+
},
|
|
76
|
+
"transitions": {
|
|
77
|
+
"type": "array",
|
|
78
|
+
"items": { "$ref": "#/$defs/transition" }
|
|
79
|
+
}
|
|
80
|
+
},
|
|
81
|
+
"allOf": [
|
|
82
|
+
{
|
|
83
|
+
"if": {
|
|
84
|
+
"properties": {
|
|
85
|
+
"state": {
|
|
86
|
+
"properties": {
|
|
87
|
+
"status": {
|
|
88
|
+
"enum": ["materialized", "pr-pending", "merged", "verified"]
|
|
89
|
+
}
|
|
90
|
+
}
|
|
91
|
+
}
|
|
92
|
+
}
|
|
93
|
+
},
|
|
94
|
+
"then": {
|
|
95
|
+
"properties": {
|
|
96
|
+
"materialization": { "$ref": "#/$defs/materialization" }
|
|
97
|
+
}
|
|
98
|
+
}
|
|
99
|
+
}
|
|
100
|
+
],
|
|
101
|
+
"$defs": {
|
|
102
|
+
"gitSha": { "type": "string", "pattern": "^[0-9a-f]{40}$" },
|
|
103
|
+
"root": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
|
|
104
|
+
"semver": {
|
|
105
|
+
"type": "string",
|
|
106
|
+
"pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)(?:-[0-9A-Za-z.-]+)?(?:\\+[0-9A-Za-z.-]+)?$"
|
|
107
|
+
},
|
|
108
|
+
"path": {
|
|
109
|
+
"type": "string",
|
|
110
|
+
"pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))[^\\s]+$"
|
|
111
|
+
},
|
|
112
|
+
"state": {
|
|
113
|
+
"enum": [
|
|
114
|
+
"planned",
|
|
115
|
+
"waiting-anchor",
|
|
116
|
+
"materialized",
|
|
117
|
+
"pr-pending",
|
|
118
|
+
"merged",
|
|
119
|
+
"verified"
|
|
120
|
+
]
|
|
121
|
+
},
|
|
122
|
+
"completedAlpha": {
|
|
123
|
+
"type": "object",
|
|
124
|
+
"additionalProperties": false,
|
|
125
|
+
"required": [
|
|
126
|
+
"outcome",
|
|
127
|
+
"version",
|
|
128
|
+
"exactTag",
|
|
129
|
+
"releaseSha",
|
|
130
|
+
"treeSha",
|
|
131
|
+
"publicationRoot",
|
|
132
|
+
"completedAt"
|
|
133
|
+
],
|
|
134
|
+
"properties": {
|
|
135
|
+
"outcome": { "const": "succeeded" },
|
|
136
|
+
"version": {
|
|
137
|
+
"type": "string",
|
|
138
|
+
"pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)-alpha\\.(0|[1-9][0-9]*)$"
|
|
139
|
+
},
|
|
140
|
+
"exactTag": { "type": "string", "minLength": 1 },
|
|
141
|
+
"releaseSha": { "$ref": "#/$defs/gitSha" },
|
|
142
|
+
"treeSha": { "$ref": "#/$defs/gitSha" },
|
|
143
|
+
"publicationRoot": { "$ref": "#/$defs/root" },
|
|
144
|
+
"completedAt": { "type": "string", "format": "date-time" }
|
|
145
|
+
}
|
|
146
|
+
},
|
|
147
|
+
"model": {
|
|
148
|
+
"oneOf": [
|
|
149
|
+
{
|
|
150
|
+
"type": "object",
|
|
151
|
+
"additionalProperties": false,
|
|
152
|
+
"required": ["strategy", "next"],
|
|
153
|
+
"properties": {
|
|
154
|
+
"strategy": { "const": "semver" },
|
|
155
|
+
"next": { "const": "auto" }
|
|
156
|
+
}
|
|
157
|
+
},
|
|
158
|
+
{
|
|
159
|
+
"type": "object",
|
|
160
|
+
"additionalProperties": false,
|
|
161
|
+
"required": ["strategy", "next"],
|
|
162
|
+
"properties": {
|
|
163
|
+
"strategy": { "const": "anchored" },
|
|
164
|
+
"next": { "const": "manual" }
|
|
165
|
+
}
|
|
166
|
+
}
|
|
167
|
+
]
|
|
168
|
+
},
|
|
169
|
+
"adapter": {
|
|
170
|
+
"type": "object",
|
|
171
|
+
"additionalProperties": false,
|
|
172
|
+
"required": [
|
|
173
|
+
"environmentVariable",
|
|
174
|
+
"sourcePaths",
|
|
175
|
+
"derivedPaths",
|
|
176
|
+
"allowedChangePaths",
|
|
177
|
+
"readOnlyPaths",
|
|
178
|
+
"derivationStage",
|
|
179
|
+
"verificationStage"
|
|
180
|
+
],
|
|
181
|
+
"properties": {
|
|
182
|
+
"environmentVariable": { "const": "BUILDCHAIN_VERSION" },
|
|
183
|
+
"sourcePaths": {
|
|
184
|
+
"type": "array",
|
|
185
|
+
"minItems": 1,
|
|
186
|
+
"uniqueItems": true,
|
|
187
|
+
"items": { "$ref": "#/$defs/path" }
|
|
188
|
+
},
|
|
189
|
+
"derivedPaths": {
|
|
190
|
+
"type": "array",
|
|
191
|
+
"uniqueItems": true,
|
|
192
|
+
"items": { "$ref": "#/$defs/path" }
|
|
193
|
+
},
|
|
194
|
+
"allowedChangePaths": {
|
|
195
|
+
"type": "array",
|
|
196
|
+
"minItems": 1,
|
|
197
|
+
"uniqueItems": true,
|
|
198
|
+
"items": { "$ref": "#/$defs/path" }
|
|
199
|
+
},
|
|
200
|
+
"readOnlyPaths": {
|
|
201
|
+
"type": "array",
|
|
202
|
+
"uniqueItems": true,
|
|
203
|
+
"items": { "$ref": "#/$defs/path" }
|
|
204
|
+
},
|
|
205
|
+
"derivationStage": {
|
|
206
|
+
"oneOf": [{ "type": "null" }, { "const": "lifecycle.version-state" }]
|
|
207
|
+
},
|
|
208
|
+
"verificationStage": { "const": "lifecycle.verify" }
|
|
209
|
+
}
|
|
210
|
+
},
|
|
211
|
+
"target": {
|
|
212
|
+
"type": "object",
|
|
213
|
+
"additionalProperties": false,
|
|
214
|
+
"required": ["version", "anchor"],
|
|
215
|
+
"properties": {
|
|
216
|
+
"version": {
|
|
217
|
+
"oneOf": [{ "type": "null" }, { "$ref": "#/$defs/semver" }]
|
|
218
|
+
},
|
|
219
|
+
"anchor": {
|
|
220
|
+
"oneOf": [
|
|
221
|
+
{ "type": "null" },
|
|
222
|
+
{
|
|
223
|
+
"type": "object",
|
|
224
|
+
"additionalProperties": false,
|
|
225
|
+
"required": ["manifestPath", "manifestRoot"],
|
|
226
|
+
"properties": {
|
|
227
|
+
"manifestPath": { "$ref": "#/$defs/path" },
|
|
228
|
+
"manifestRoot": { "$ref": "#/$defs/root" }
|
|
229
|
+
}
|
|
230
|
+
}
|
|
231
|
+
]
|
|
232
|
+
}
|
|
233
|
+
}
|
|
234
|
+
},
|
|
235
|
+
"materialization": {
|
|
236
|
+
"type": "object",
|
|
237
|
+
"additionalProperties": false,
|
|
238
|
+
"required": [
|
|
239
|
+
"targetVersion",
|
|
240
|
+
"anchorRoot",
|
|
241
|
+
"paths",
|
|
242
|
+
"materializationRoot"
|
|
243
|
+
],
|
|
244
|
+
"properties": {
|
|
245
|
+
"targetVersion": { "$ref": "#/$defs/semver" },
|
|
246
|
+
"anchorRoot": {
|
|
247
|
+
"oneOf": [{ "type": "null" }, { "$ref": "#/$defs/root" }]
|
|
248
|
+
},
|
|
249
|
+
"paths": {
|
|
250
|
+
"type": "array",
|
|
251
|
+
"minItems": 1,
|
|
252
|
+
"items": {
|
|
253
|
+
"type": "object",
|
|
254
|
+
"additionalProperties": false,
|
|
255
|
+
"required": ["path", "beforeRoot", "afterRoot", "changed"],
|
|
256
|
+
"properties": {
|
|
257
|
+
"path": { "$ref": "#/$defs/path" },
|
|
258
|
+
"beforeRoot": { "$ref": "#/$defs/root" },
|
|
259
|
+
"afterRoot": { "$ref": "#/$defs/root" },
|
|
260
|
+
"changed": { "type": "boolean" }
|
|
261
|
+
}
|
|
262
|
+
}
|
|
263
|
+
},
|
|
264
|
+
"materializationRoot": { "$ref": "#/$defs/root" }
|
|
265
|
+
}
|
|
266
|
+
},
|
|
267
|
+
"transition": {
|
|
268
|
+
"type": "object",
|
|
269
|
+
"additionalProperties": false,
|
|
270
|
+
"required": [
|
|
271
|
+
"expectedStateRoot",
|
|
272
|
+
"from",
|
|
273
|
+
"to",
|
|
274
|
+
"event",
|
|
275
|
+
"evidenceRoot",
|
|
276
|
+
"recordedAt",
|
|
277
|
+
"requestRoot",
|
|
278
|
+
"transitionRoot"
|
|
279
|
+
],
|
|
280
|
+
"properties": {
|
|
281
|
+
"expectedStateRoot": { "$ref": "#/$defs/root" },
|
|
282
|
+
"from": { "$ref": "#/$defs/state" },
|
|
283
|
+
"to": { "$ref": "#/$defs/state" },
|
|
284
|
+
"event": { "type": "string", "minLength": 1 },
|
|
285
|
+
"evidenceRoot": { "$ref": "#/$defs/root" },
|
|
286
|
+
"recordedAt": { "type": "string", "format": "date-time" },
|
|
287
|
+
"requestRoot": { "$ref": "#/$defs/root" },
|
|
288
|
+
"transitionRoot": { "$ref": "#/$defs/root" }
|
|
289
|
+
}
|
|
290
|
+
}
|
|
291
|
+
}
|
|
292
|
+
}
|
|
@@ -22,6 +22,7 @@
|
|
|
22
22
|
"schemas/release-tail-provider-bindings-v1.schema.json",
|
|
23
23
|
"schemas/kfd-agent-hub-adoption.schema.json",
|
|
24
24
|
"schemas/kfd-product-gate-input-v1.schema.json",
|
|
25
|
+
"schemas/dev-delivery-authority-v2.schema.json",
|
|
25
26
|
"buildchain-contract.json",
|
|
26
27
|
"kfd-upstream-aggregate.json",
|
|
27
28
|
"kfd-claims.json",
|
|
@@ -10,6 +10,7 @@
|
|
|
10
10
|
"schemas/release-tail-provider-bindings-v1.schema.json",
|
|
11
11
|
"schemas/kfd-agent-hub-adoption.schema.json",
|
|
12
12
|
"schemas/kfd-product-gate-input-v1.schema.json",
|
|
13
|
+
"schemas/dev-delivery-authority-v2.schema.json",
|
|
13
14
|
"kfd-support.json",
|
|
14
15
|
"artifact-evidence.json",
|
|
15
16
|
"product-mechanism.json",
|
|
@@ -47,6 +48,7 @@
|
|
|
47
48
|
"schemas/release-tail-provider-bindings-v1.schema.json",
|
|
48
49
|
"schemas/kfd-agent-hub-adoption.schema.json",
|
|
49
50
|
"schemas/kfd-product-gate-input-v1.schema.json",
|
|
51
|
+
"schemas/dev-delivery-authority-v2.schema.json",
|
|
50
52
|
"buildchain-contract.json",
|
|
51
53
|
"kfd-claims.json",
|
|
52
54
|
"product-mechanism.json",
|
|
@@ -4,7 +4,7 @@
|
|
|
4
4
|
"product": {
|
|
5
5
|
"name": "Buildchain",
|
|
6
6
|
"package": "@kungfu-tech/buildchain",
|
|
7
|
-
"version": "3.0.9-alpha.
|
|
7
|
+
"version": "3.0.9-alpha.10",
|
|
8
8
|
"repository": "https://github.com/kungfu-systems/buildchain"
|
|
9
9
|
},
|
|
10
10
|
"majorLine": "v3",
|
|
@@ -64,6 +64,60 @@
|
|
|
64
64
|
"cutRoot": "sha256:4fd5ae0cdad01a09e91bbb3f183ac595510a8f25baf7ba865de7633a7eacb3eb",
|
|
65
65
|
"proofRoot": "sha256:36c85ba487be1528e85776d2bc5f766a971d42ac238aec30071945f7d60d9fc5"
|
|
66
66
|
},
|
|
67
|
+
{
|
|
68
|
+
"schema": "kungfu.buildchain.compatibility-proof/v1",
|
|
69
|
+
"proofId": "build-channel-router-d40dd0-to-30549a",
|
|
70
|
+
"predicate": "compatible-breaking-digest",
|
|
71
|
+
"direction": "source-to-target",
|
|
72
|
+
"operation": "accept-contract-lock",
|
|
73
|
+
"source": {
|
|
74
|
+
"contract": "kungfu-buildchain-runtime-contract-world",
|
|
75
|
+
"surfaceId": "controller:build-channel-router",
|
|
76
|
+
"surfaceKind": "controller",
|
|
77
|
+
"breakingDigest": "sha256:d40dd05d7e07473d4b2dc1b62fbb0ed6f06449b4d3a7c44a2e8014313e3c0273"
|
|
78
|
+
},
|
|
79
|
+
"target": {
|
|
80
|
+
"contract": "kungfu-buildchain-runtime-contract-world",
|
|
81
|
+
"surfaceId": "controller:build-channel-router",
|
|
82
|
+
"surfaceKind": "controller",
|
|
83
|
+
"breakingDigest": "sha256:30549aa26cd1e1dd81f10fe3529d3c6e3f8438a6efa0100c47ebae4d2f3d71df"
|
|
84
|
+
},
|
|
85
|
+
"scope": {
|
|
86
|
+
"contract": "kungfu-buildchain-runtime-contract-world",
|
|
87
|
+
"surfaceId": "controller:build-channel-router",
|
|
88
|
+
"surfaceKind": "controller",
|
|
89
|
+
"majorLines": [
|
|
90
|
+
"v2",
|
|
91
|
+
"v3"
|
|
92
|
+
],
|
|
93
|
+
"operation": "accept-contract-lock"
|
|
94
|
+
},
|
|
95
|
+
"scopeRoot": "sha256:dc381e72e9cad86293254f8542394f1abc27b4b0f07c122cb4cad5f73b381ccb",
|
|
96
|
+
"evidence": {
|
|
97
|
+
"kind": "protected-pull-request-contract-acceptance",
|
|
98
|
+
"pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2549",
|
|
99
|
+
"protectedBase": "dev/v3/v3.0",
|
|
100
|
+
"sourceCommit": "0d87b772265066f5e6157e1ba6a2ba1021fb5225",
|
|
101
|
+
"mergeCommit": "34fad9d3a94c450d75c0d06fd6ed00470c992ff7",
|
|
102
|
+
"contractDigest": "sha256:2584ba36ab54cd5e9bab9e34dfc08d87a55dc57de1be7641492bf7ceb1366350",
|
|
103
|
+
"compatibilityDigest": "sha256:80f65cc191b1f771475184edf8a1bf9c10dd69bb58060aa09313d0e1e57f508a"
|
|
104
|
+
},
|
|
105
|
+
"evidenceRoot": "sha256:e449bdc62832fd18b33d93833207d70e843f066a85aae8b0c717234194ecb497",
|
|
106
|
+
"authority": {
|
|
107
|
+
"kind": "protected-base-contract-authority",
|
|
108
|
+
"repository": "kungfu-systems/buildchain",
|
|
109
|
+
"protectedBase": "dev/v3/v3.0"
|
|
110
|
+
},
|
|
111
|
+
"authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
|
|
112
|
+
"cut": {
|
|
113
|
+
"kind": "protected-git-cut",
|
|
114
|
+
"repository": "kungfu-systems/buildchain",
|
|
115
|
+
"protectedBase": "dev/v3/v3.0",
|
|
116
|
+
"commit": "34fad9d3a94c450d75c0d06fd6ed00470c992ff7"
|
|
117
|
+
},
|
|
118
|
+
"cutRoot": "sha256:3b83f02e22ca82fc4a099b5f8c4353fffb1423b0a5cba41860b1ba86f7c8cbb7",
|
|
119
|
+
"proofRoot": "sha256:36d2e188f43385d6191116393aa81ea025ccf61e21a1c5eae1d56be92a203b31"
|
|
120
|
+
},
|
|
67
121
|
{
|
|
68
122
|
"schema": "kungfu.buildchain.compatibility-proof/v1",
|
|
69
123
|
"proofId": "build-lifecycle-307459-to-6b8d38",
|
|
@@ -324,7 +378,7 @@
|
|
|
324
378
|
"retryable GitHub fallback fetches use a bounded attempt budget before exact source SHA and tree verification"
|
|
325
379
|
],
|
|
326
380
|
"breakingDigest": "sha256:dfbedd543ae0c067982b5c8c02d98dd2f7f7df88752be97fb330da6b0ba30faa",
|
|
327
|
-
"auditDigest": "sha256:
|
|
381
|
+
"auditDigest": "sha256:e1a045509343ab4e907cae61d40b931b8cd5e126a85296669ab2bd49f7bc8ad3"
|
|
328
382
|
},
|
|
329
383
|
{
|
|
330
384
|
"contractVersion": 1,
|
|
@@ -363,7 +417,7 @@
|
|
|
363
417
|
"alpha and stable channel selections use separate consumer contract locks by default"
|
|
364
418
|
],
|
|
365
419
|
"breakingDigest": "sha256:c4597dfa89e1a58f1023905092b849644f5c080abf150aeba9c7e1cd5ed43962",
|
|
366
|
-
"auditDigest": "sha256:
|
|
420
|
+
"auditDigest": "sha256:789173c7e5508c7e7947a59fbcb3b5bebc3783ed47695d7f5abb468a9b5d4d7d"
|
|
367
421
|
},
|
|
368
422
|
{
|
|
369
423
|
"contractVersion": 1,
|
|
@@ -521,7 +575,7 @@
|
|
|
521
575
|
"resume-from-candidate-run is fail-closed and uses a fresh caller event instead of rerunning a frozen startup graph"
|
|
522
576
|
],
|
|
523
577
|
"breakingDigest": "sha256:9db8dd07152855d03ff30f9c571438593c689d3e8139fa45431d000f548242f5",
|
|
524
|
-
"auditDigest": "sha256:
|
|
578
|
+
"auditDigest": "sha256:27d35c025cbf7b5c87af599da3559657fc1aea88cf9d912a8035ccc1e7057c07",
|
|
525
579
|
"compatibleBreakingDigests": [
|
|
526
580
|
"sha256:aa30f22e3af0a89841310bdbdc900844dd95a66974db173fa140a71bbd7e82c0"
|
|
527
581
|
],
|
|
@@ -571,7 +625,7 @@
|
|
|
571
625
|
"channel-aware artifact host facts are checked against the deploy plan before adapter side effects"
|
|
572
626
|
],
|
|
573
627
|
"breakingDigest": "sha256:27f0cb9c7d97288850d215be8696b323471c41fd1cdf3a2ff3ebf21f62541960",
|
|
574
|
-
"auditDigest": "sha256:
|
|
628
|
+
"auditDigest": "sha256:748e1d69ca28b631e86788de0ff359b11164b3ac1edda1b146ca49f3ac3856dc"
|
|
575
629
|
},
|
|
576
630
|
{
|
|
577
631
|
"contractVersion": 1,
|
|
@@ -872,7 +926,7 @@
|
|
|
872
926
|
"release-state SHA is recorded as a durable audit entrance"
|
|
873
927
|
],
|
|
874
928
|
"breakingDigest": "sha256:b627e1b2ece9b6049517a942c5139e342e6077cdd3d8962d61cef8481b1f70ad",
|
|
875
|
-
"auditDigest": "sha256:
|
|
929
|
+
"auditDigest": "sha256:9fdb16bac3b7d2b4a1cacd684e06b4f029d4d4ff41a0d80b54217fc59e010abd"
|
|
876
930
|
},
|
|
877
931
|
{
|
|
878
932
|
"contractVersion": 1,
|
|
@@ -921,7 +975,7 @@
|
|
|
921
975
|
"prose-only public claims downgrade the release trust passport audit"
|
|
922
976
|
],
|
|
923
977
|
"breakingDigest": "sha256:f0b636eb925ddbf45ff1a8872454ab7b4dd98857cac12bb75217830130e62a16",
|
|
924
|
-
"auditDigest": "sha256:
|
|
978
|
+
"auditDigest": "sha256:9fdb16bac3b7d2b4a1cacd684e06b4f029d4d4ff41a0d80b54217fc59e010abd"
|
|
925
979
|
},
|
|
926
980
|
{
|
|
927
981
|
"contractVersion": 1,
|
|
@@ -981,7 +1035,7 @@
|
|
|
981
1035
|
"README badge block checks and writes are generated from machine-readable repository facts"
|
|
982
1036
|
],
|
|
983
1037
|
"breakingDigest": "sha256:90a73892b2d6c214048448d5f45df75639bdf7b7e8fefd9c596e04b087407bcc",
|
|
984
|
-
"auditDigest": "sha256:
|
|
1038
|
+
"auditDigest": "sha256:856e79ff668877e0b366850bb0e37fa193206f8dc5a51091bc74dd1c2240f8e2"
|
|
985
1039
|
},
|
|
986
1040
|
{
|
|
987
1041
|
"contractVersion": 1,
|
|
@@ -1071,7 +1125,7 @@
|
|
|
1071
1125
|
"manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
|
|
1072
1126
|
],
|
|
1073
1127
|
"breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
|
|
1074
|
-
"auditDigest": "sha256:
|
|
1128
|
+
"auditDigest": "sha256:4b31a0588bad10ebe4005984beb10d890ce631c150b59f3f11b12c95ea431be5"
|
|
1075
1129
|
},
|
|
1076
1130
|
{
|
|
1077
1131
|
"contractVersion": 1,
|
|
@@ -1093,7 +1147,7 @@
|
|
|
1093
1147
|
"agents can discover supported Node APIs without importing internal file paths"
|
|
1094
1148
|
],
|
|
1095
1149
|
"breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
|
|
1096
|
-
"auditDigest": "sha256:
|
|
1150
|
+
"auditDigest": "sha256:5f6dc623f216d3d903417a9e551217498fd14b622524f991c425035430aac399"
|
|
1097
1151
|
},
|
|
1098
1152
|
{
|
|
1099
1153
|
"contractVersion": 1,
|
|
@@ -1144,7 +1198,7 @@
|
|
|
1144
1198
|
"controllerDescriptor": {
|
|
1145
1199
|
"contract": "buildchain.controller-descriptor/v1",
|
|
1146
1200
|
"digest": "sha256:373723a73d188194d389dee04c394d3b79cb0c016a370f2f5d0f60979a02ed48",
|
|
1147
|
-
"registryDigest": "sha256:
|
|
1201
|
+
"registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
|
|
1148
1202
|
"inputClassifications": {
|
|
1149
1203
|
"buildchain-ref": {
|
|
1150
1204
|
"classification": "included",
|
|
@@ -1327,7 +1381,7 @@
|
|
|
1327
1381
|
"controllerDescriptor": {
|
|
1328
1382
|
"contract": "buildchain.controller-descriptor/v1",
|
|
1329
1383
|
"digest": "sha256:f986e79241d831f027a0955a35c918f946989176c76555e20f156ed31fb10c94",
|
|
1330
|
-
"registryDigest": "sha256:
|
|
1384
|
+
"registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
|
|
1331
1385
|
"inputClassifications": {
|
|
1332
1386
|
"BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
|
|
1333
1387
|
"classification": "redacted",
|
|
@@ -1718,7 +1772,7 @@
|
|
|
1718
1772
|
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
1719
1773
|
],
|
|
1720
1774
|
"breakingDigest": "sha256:6b8d38e92b2c67b5bc83fae0a3fd95bfa47582fbc176e6cdeebe7630a57534cb",
|
|
1721
|
-
"auditDigest": "sha256:
|
|
1775
|
+
"auditDigest": "sha256:e1a045509343ab4e907cae61d40b931b8cd5e126a85296669ab2bd49f7bc8ad3",
|
|
1722
1776
|
"compatibleBreakingDigests": [
|
|
1723
1777
|
"sha256:30745921541e9b0f70475bb2178c2559f6aef248f6680670ccd44d8c5a69a6b1",
|
|
1724
1778
|
"sha256:e264a79f9f399038c2fcfd21e4168c68c2e1485ee5c651c02242a02b622ac2be"
|
|
@@ -1749,7 +1803,6 @@
|
|
|
1749
1803
|
"workflowPath": ".github/workflows/build.yml",
|
|
1750
1804
|
"requiredStages": [
|
|
1751
1805
|
"resolve-channel",
|
|
1752
|
-
"build",
|
|
1753
1806
|
"aggregate"
|
|
1754
1807
|
],
|
|
1755
1808
|
"capabilities": [
|
|
@@ -1865,8 +1918,8 @@
|
|
|
1865
1918
|
],
|
|
1866
1919
|
"controllerDescriptor": {
|
|
1867
1920
|
"contract": "buildchain.controller-descriptor/v1",
|
|
1868
|
-
"digest": "sha256:
|
|
1869
|
-
"registryDigest": "sha256:
|
|
1921
|
+
"digest": "sha256:6dfa79003f0c92e336c56f07f45f57cc5572921bdb46e432fd809fb19ee823bb",
|
|
1922
|
+
"registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
|
|
1870
1923
|
"inputClassifications": {
|
|
1871
1924
|
"BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
|
|
1872
1925
|
"classification": "redacted",
|
|
@@ -2268,8 +2321,14 @@
|
|
|
2268
2321
|
"redacted input values are never serialized and digest-only input values are never emitted in plaintext",
|
|
2269
2322
|
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
2270
2323
|
],
|
|
2271
|
-
"breakingDigest": "sha256:
|
|
2272
|
-
"auditDigest": "sha256:
|
|
2324
|
+
"breakingDigest": "sha256:30549aa26cd1e1dd81f10fe3529d3c6e3f8438a6efa0100c47ebae4d2f3d71df",
|
|
2325
|
+
"auditDigest": "sha256:789173c7e5508c7e7947a59fbcb3b5bebc3783ed47695d7f5abb468a9b5d4d7d",
|
|
2326
|
+
"compatibleBreakingDigests": [
|
|
2327
|
+
"sha256:d40dd05d7e07473d4b2dc1b62fbb0ed6f06449b4d3a7c44a2e8014313e3c0273"
|
|
2328
|
+
],
|
|
2329
|
+
"compatibilityProofRoots": [
|
|
2330
|
+
"sha256:36d2e188f43385d6191116393aa81ea025ccf61e21a1c5eae1d56be92a203b31"
|
|
2331
|
+
]
|
|
2273
2332
|
},
|
|
2274
2333
|
{
|
|
2275
2334
|
"contractVersion": 1,
|
|
@@ -2339,7 +2398,7 @@
|
|
|
2339
2398
|
"controllerDescriptor": {
|
|
2340
2399
|
"contract": "buildchain.controller-descriptor/v1",
|
|
2341
2400
|
"digest": "sha256:8e42956a2c10fa109500e72b97994f06b3d22a19cc63a46f66410b2e81706e9d",
|
|
2342
|
-
"registryDigest": "sha256:
|
|
2401
|
+
"registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
|
|
2343
2402
|
"inputClassifications": {
|
|
2344
2403
|
"artifact-name": {
|
|
2345
2404
|
"classification": "included",
|
|
@@ -2556,7 +2615,7 @@
|
|
|
2556
2615
|
"controllerDescriptor": {
|
|
2557
2616
|
"contract": "buildchain.controller-descriptor/v1",
|
|
2558
2617
|
"digest": "sha256:c5274b37f04d0054559fdc8698c51bd0f0d8ae470baf163e9caa7699aa970575",
|
|
2559
|
-
"registryDigest": "sha256:
|
|
2618
|
+
"registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
|
|
2560
2619
|
"inputClassifications": {
|
|
2561
2620
|
"artifact-path": {
|
|
2562
2621
|
"classification": "digest-only",
|
|
@@ -2735,7 +2794,7 @@
|
|
|
2735
2794
|
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
2736
2795
|
],
|
|
2737
2796
|
"breakingDigest": "sha256:f14825324a16b51c2e9ed708ebe64e1932e05b6d5e0866f83aea8439decb4a27",
|
|
2738
|
-
"auditDigest": "sha256:
|
|
2797
|
+
"auditDigest": "sha256:748e1d69ca28b631e86788de0ff359b11164b3ac1edda1b146ca49f3ac3856dc"
|
|
2739
2798
|
},
|
|
2740
2799
|
{
|
|
2741
2800
|
"contractVersion": 1,
|
|
@@ -2800,7 +2859,7 @@
|
|
|
2800
2859
|
"controllerDescriptor": {
|
|
2801
2860
|
"contract": "buildchain.controller-descriptor/v1",
|
|
2802
2861
|
"digest": "sha256:6b132790b9798e8a5dfbe095701d8e024c160a08bc7c4bd477ee79feef7a9cfd",
|
|
2803
|
-
"registryDigest": "sha256:
|
|
2862
|
+
"registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
|
|
2804
2863
|
"inputClassifications": {
|
|
2805
2864
|
"artifact-name": {
|
|
2806
2865
|
"classification": "included",
|
|
@@ -2895,7 +2954,7 @@
|
|
|
2895
2954
|
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
2896
2955
|
],
|
|
2897
2956
|
"breakingDigest": "sha256:3f76502666069c2727d23efcfdb08fb80f89ced1955a69e29f11525ae88aca1d",
|
|
2898
|
-
"auditDigest": "sha256:
|
|
2957
|
+
"auditDigest": "sha256:6132e68620355e2a4d491172bc5eab58121369265baab0dee72a99218efa559a"
|
|
2899
2958
|
},
|
|
2900
2959
|
{
|
|
2901
2960
|
"contractVersion": 1,
|
|
@@ -2982,7 +3041,7 @@
|
|
|
2982
3041
|
"controllerDescriptor": {
|
|
2983
3042
|
"contract": "buildchain.controller-descriptor/v1",
|
|
2984
3043
|
"digest": "sha256:6d71409659fbf8543c7e520b0c493d8afe86bdf60286b860bb917f0041ebc173",
|
|
2985
|
-
"registryDigest": "sha256:
|
|
3044
|
+
"registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
|
|
2986
3045
|
"inputClassifications": {
|
|
2987
3046
|
"artifact-name": {
|
|
2988
3047
|
"classification": "included",
|
|
@@ -3145,7 +3204,7 @@
|
|
|
3145
3204
|
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
3146
3205
|
],
|
|
3147
3206
|
"breakingDigest": "sha256:0eb318df455ef9cb737a7c2515a2411b685d34ed0bde7b5f5b173a7a42513114",
|
|
3148
|
-
"auditDigest": "sha256:
|
|
3207
|
+
"auditDigest": "sha256:43eaedc62a6e9ab4658fee9a3fb0ad729af2ca60426143543b938e725bbbfa2e"
|
|
3149
3208
|
},
|
|
3150
3209
|
{
|
|
3151
3210
|
"contractVersion": 1,
|
|
@@ -3315,7 +3374,7 @@
|
|
|
3315
3374
|
"controllerDescriptor": {
|
|
3316
3375
|
"contract": "buildchain.controller-descriptor/v1",
|
|
3317
3376
|
"digest": "sha256:4d44d0f729fbc112aa309ed22e74b9f1401b0470b99c1e6061c278babe5e4b8b",
|
|
3318
|
-
"registryDigest": "sha256:
|
|
3377
|
+
"registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
|
|
3319
3378
|
"inputClassifications": {
|
|
3320
3379
|
"BUILDCHAIN_ISSUE_APP_ID": {
|
|
3321
3380
|
"classification": "redacted",
|
|
@@ -3810,7 +3869,7 @@
|
|
|
3810
3869
|
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
3811
3870
|
],
|
|
3812
3871
|
"breakingDigest": "sha256:015d8de793adbd4c539416be7d7512e18cc92097e629b0203fa06d2c183e98bd",
|
|
3813
|
-
"auditDigest": "sha256:
|
|
3872
|
+
"auditDigest": "sha256:27d35c025cbf7b5c87af599da3559657fc1aea88cf9d912a8035ccc1e7057c07"
|
|
3814
3873
|
},
|
|
3815
3874
|
{
|
|
3816
3875
|
"contractVersion": 1,
|
|
@@ -3875,7 +3934,7 @@
|
|
|
3875
3934
|
"controllerDescriptor": {
|
|
3876
3935
|
"contract": "buildchain.controller-descriptor/v1",
|
|
3877
3936
|
"digest": "sha256:660579b5561e8e33375a3f3b1fefbb8a5bd8241a55ba43374d786fb772c24a12",
|
|
3878
|
-
"registryDigest": "sha256:
|
|
3937
|
+
"registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
|
|
3879
3938
|
"inputClassifications": {
|
|
3880
3939
|
"agent-work-context-json": {
|
|
3881
3940
|
"classification": "digest-only",
|
|
@@ -4010,7 +4069,7 @@
|
|
|
4010
4069
|
"controllerDescriptor": {
|
|
4011
4070
|
"contract": "buildchain.controller-descriptor/v1",
|
|
4012
4071
|
"digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555",
|
|
4013
|
-
"registryDigest": "sha256:
|
|
4072
|
+
"registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
|
|
4014
4073
|
"inputClassifications": {}
|
|
4015
4074
|
},
|
|
4016
4075
|
"guarantees": [
|
|
@@ -4023,7 +4082,7 @@
|
|
|
4023
4082
|
"auditDigest": "sha256:d07482cd66413a2fb3781a3b76f960b8151b6231841799647fe237820de2fde6"
|
|
4024
4083
|
}
|
|
4025
4084
|
],
|
|
4026
|
-
"compatibilityProofRegistryRoot": "sha256:
|
|
4027
|
-
"compatibilityDigest": "sha256:
|
|
4028
|
-
"contractDigest": "sha256:
|
|
4085
|
+
"compatibilityProofRegistryRoot": "sha256:aec674d174461493e3493b3fe3164d62745a9ce18cb6a560f94bd99f2759eb53",
|
|
4086
|
+
"compatibilityDigest": "sha256:eb2fafb181b33002f81102a966f0a801ab1798101446635703ab6acfea51d9aa",
|
|
4087
|
+
"contractDigest": "sha256:beb0c44c85d99dc85ab3468833d42fc7fb5cbf448407ce82e52ed553bcd77967"
|
|
4029
4088
|
}
|