@kungfu-tech/buildchain 3.0.9-alpha.1 → 3.0.9-alpha.11
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/actions/promote-buildchain-ref/README.md +4 -0
- package/bin/buildchain.mjs +9 -1
- package/bin/internal/trust-release-release-handlers.mjs +1 -0
- package/contracts/dev-delivery-authority-v2.schema.json +253 -0
- package/contracts/fixtures/next-development-transition-v1/anchored-manual-waiting.json +47 -0
- package/contracts/fixtures/next-development-transition-v1/semver-auto-planned.json +47 -0
- package/contracts/fixtures/next-development-transition-v1/version-model-cases.json +40 -0
- package/contracts/next-development-request-v1.schema.json +66 -0
- package/contracts/next-development-transition-v1.schema.json +292 -0
- package/dist/site/agent-index.json +1 -0
- package/dist/site/artifact-schemas.json +2 -0
- package/dist/site/buildchain-contract.json +92 -27
- package/dist/site/buildchain-site.json +351 -38
- package/dist/site/capability-registry.json +7 -6
- package/dist/site/cli-registry.json +43 -3
- package/dist/site/controller-registry.json +6 -2
- package/dist/site/kfd-claims.json +223 -12
- package/dist/site/kfd-upstream-aggregate.json +9 -9
- package/dist/site/manual-registry.json +23 -7
- package/dist/site/node-api-registry.json +7926 -4533
- package/dist/site/page-registry.json +332 -27
- package/dist/site/public-surface-audit.json +359 -11
- package/dist/site/publication-registry.json +4 -4
- package/dist/site/release-passport-check-manifest.json +1 -0
- package/dist/site/release-provenance.json +14 -0
- package/dist/site/schemas/dev-delivery-authority-v2.schema.json +442 -0
- package/dist/site/schemas/release-passport-v1.schema.json +3 -0
- package/dist/site/site-manifest.json +19 -11
- package/dist/site/workflow-registry.json +21 -10
- package/docs/MAP.md +5 -2
- package/docs/adopter-delivery-gate.md +106 -0
- package/docs/aws-us-elastic-runner-burst-plane.md +30 -3
- package/docs/cli-reference.md +202 -15
- package/docs/dev-alpha-candidate-patrol.md +8 -0
- package/docs/dev-delivery-qualification-landing-adr.md +137 -0
- package/docs/dev-delivery-warrant.md +149 -22
- package/docs/kfd-support.md +7 -2
- package/docs/next-development-transition.md +119 -0
- package/docs/node-api-reference.md +402 -204
- package/docs/release-governance.md +10 -7
- package/docs/release-passport.md +18 -2
- package/docs/versioning.md +4 -1
- package/package.json +23 -6
- package/packages/core/README.md +25 -0
- package/packages/core/adopter-delivery-gate.js +576 -0
- package/packages/core/adopter-delivery-json.js +66 -0
- package/packages/core/adopter-delivery-passport.js +259 -0
- package/packages/core/adopter-delivery-vectors.js +158 -0
- package/packages/core/adopter-delivery-vectors.json +77 -0
- package/packages/core/artifact-verification-envelope.js +5 -5
- package/packages/core/buildchain-agent-manuals.js +1 -0
- package/packages/core/buildchain-channel-identity.js +2 -3
- package/packages/core/buildchain-compatibility-proof.js +22 -0
- package/packages/core/buildchain-delivery-bootstrap.js +240 -0
- package/packages/core/buildchain-delivery-infrastructure.js +164 -0
- package/packages/core/buildchain-delivery-self-dogfood.js +395 -0
- package/packages/core/channel-candidate.js +8 -0
- package/packages/core/channel-promotion-baseline.js +52 -0
- package/packages/core/dev-alpha-candidate-selection.js +10 -2
- package/packages/core/dev-delivery-authority.js +996 -0
- package/packages/core/dev-delivery-native-proof.js +418 -0
- package/packages/core/dev-delivery-warrant-settlement.js +67 -20
- package/packages/core/dev-delivery-warrant.js +129 -46
- package/packages/core/kfd-adopter-category-driver.js +167 -0
- package/packages/core/kfd-adopter-manifest.js +49 -50
- package/packages/core/legacy-kfd-adopter-driver.js +167 -0
- package/packages/core/next-development-candidate-reservation.js +186 -0
- package/packages/core/next-development-controller.js +726 -0
- package/packages/core/next-development-projection.js +288 -0
- package/packages/core/next-development-transition.js +738 -0
- package/packages/core/paper-agent-entry.js +7 -4
- package/packages/core/paper.js +14 -7
- package/packages/core/published-delivery-authority.js +247 -0
- package/packages/core/release-passport-contract.js +10 -6
- package/packages/core/release-passport.js +37 -13
- package/scripts/aws-macos-jit-controller-core.mjs +239 -4
- package/scripts/aws-macos-jit-controller.mjs +198 -2
- package/scripts/aws-macos-jit-instance-rehydrate.mjs +260 -0
- package/scripts/aws-macos-jit-source-rebind.mjs +235 -14
- package/scripts/aws-macos-jit.mjs +12 -0
- package/scripts/buildchain-cli-help.mjs +10 -2
- package/scripts/check-internal-architecture.mjs +1 -0
- package/scripts/check-inventory.mjs +12 -1
- package/scripts/dev-alpha-candidate-patrol.mjs +22 -1
- package/scripts/dev-delivery-authority.mjs +368 -0
- package/scripts/dev-delivery-native-run.mjs +235 -0
- package/scripts/dev-delivery-proof.mjs +64 -2
- package/scripts/dev-delivery-two-phase-resume.mjs +90 -0
- package/scripts/dev-delivery-two-phase.mjs +577 -0
- package/scripts/dev-delivery-warrant.mjs +48 -6
- package/scripts/dev-pr-delivery-warrant.mjs +19 -14
- package/scripts/generate-buildchain-kfd-witnesses.mjs +2 -2
- package/scripts/generate-channel-build-workflow.mjs +4 -0
- package/scripts/generate-next-development-guidance.mjs +49 -0
- package/scripts/generate-site-bundle.mjs +8 -3
- package/scripts/init-repo.mjs +135 -62
- package/scripts/next-development-self-dogfood-harness.mjs +409 -0
- package/scripts/next-development-self-dogfood.mjs +532 -0
- package/scripts/next-development-transition.mjs +47 -0
- package/scripts/release-candidate-tail-reseal.mjs +426 -0
- package/scripts/seal-artifact-signing-requests.mjs +7 -4
- package/scripts/site-capability-metadata.mjs +25 -1
- package/scripts/stable-candidate-qualification.mjs +7 -7
- package/scripts/workflow-call-contract.mjs +1 -1
- package/templates/native-dev-delivery.yml +86 -0
|
@@ -0,0 +1,292 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://buildchain.libkungfu.dev/schemas/next-development-transition-v1.schema.json",
|
|
4
|
+
"title": "Buildchain Next-development Transition v1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"additionalProperties": false,
|
|
7
|
+
"required": [
|
|
8
|
+
"schemaVersion",
|
|
9
|
+
"contract",
|
|
10
|
+
"idempotencyKey",
|
|
11
|
+
"repository",
|
|
12
|
+
"completedAlpha",
|
|
13
|
+
"completedAlphaRoot",
|
|
14
|
+
"alphaOutcome",
|
|
15
|
+
"model",
|
|
16
|
+
"target",
|
|
17
|
+
"declaredPaths",
|
|
18
|
+
"adapter",
|
|
19
|
+
"effectBounds",
|
|
20
|
+
"state",
|
|
21
|
+
"materialization",
|
|
22
|
+
"transitions"
|
|
23
|
+
],
|
|
24
|
+
"properties": {
|
|
25
|
+
"schemaVersion": { "const": 1 },
|
|
26
|
+
"contract": {
|
|
27
|
+
"const": "kungfu-buildchain-next-development-transition/v1"
|
|
28
|
+
},
|
|
29
|
+
"idempotencyKey": { "$ref": "#/$defs/root" },
|
|
30
|
+
"repository": {
|
|
31
|
+
"type": "string",
|
|
32
|
+
"pattern": "^[^/\\s]+/[^/\\s]+$"
|
|
33
|
+
},
|
|
34
|
+
"completedAlpha": { "$ref": "#/$defs/completedAlpha" },
|
|
35
|
+
"completedAlphaRoot": { "$ref": "#/$defs/root" },
|
|
36
|
+
"alphaOutcome": { "const": "preserved-success" },
|
|
37
|
+
"model": { "$ref": "#/$defs/model" },
|
|
38
|
+
"target": { "$ref": "#/$defs/target" },
|
|
39
|
+
"declaredPaths": {
|
|
40
|
+
"type": "array",
|
|
41
|
+
"minItems": 1,
|
|
42
|
+
"uniqueItems": true,
|
|
43
|
+
"items": { "$ref": "#/$defs/path" }
|
|
44
|
+
},
|
|
45
|
+
"adapter": { "$ref": "#/$defs/adapter" },
|
|
46
|
+
"effectBounds": {
|
|
47
|
+
"type": "object",
|
|
48
|
+
"additionalProperties": false,
|
|
49
|
+
"required": ["allowedPaths", "refUpdates", "forbiddenRefNamespaces"],
|
|
50
|
+
"properties": {
|
|
51
|
+
"allowedPaths": {
|
|
52
|
+
"type": "array",
|
|
53
|
+
"minItems": 1,
|
|
54
|
+
"uniqueItems": true,
|
|
55
|
+
"items": { "$ref": "#/$defs/path" }
|
|
56
|
+
},
|
|
57
|
+
"refUpdates": { "type": "array", "maxItems": 0 },
|
|
58
|
+
"forbiddenRefNamespaces": {
|
|
59
|
+
"const": ["refs/heads/alpha/", "refs/tags/"]
|
|
60
|
+
}
|
|
61
|
+
}
|
|
62
|
+
},
|
|
63
|
+
"state": {
|
|
64
|
+
"type": "object",
|
|
65
|
+
"additionalProperties": false,
|
|
66
|
+
"required": ["status", "generation", "stateRoot"],
|
|
67
|
+
"properties": {
|
|
68
|
+
"status": { "$ref": "#/$defs/state" },
|
|
69
|
+
"generation": { "type": "integer", "minimum": 1 },
|
|
70
|
+
"stateRoot": { "$ref": "#/$defs/root" }
|
|
71
|
+
}
|
|
72
|
+
},
|
|
73
|
+
"materialization": {
|
|
74
|
+
"oneOf": [{ "type": "null" }, { "$ref": "#/$defs/materialization" }]
|
|
75
|
+
},
|
|
76
|
+
"transitions": {
|
|
77
|
+
"type": "array",
|
|
78
|
+
"items": { "$ref": "#/$defs/transition" }
|
|
79
|
+
}
|
|
80
|
+
},
|
|
81
|
+
"allOf": [
|
|
82
|
+
{
|
|
83
|
+
"if": {
|
|
84
|
+
"properties": {
|
|
85
|
+
"state": {
|
|
86
|
+
"properties": {
|
|
87
|
+
"status": {
|
|
88
|
+
"enum": ["materialized", "pr-pending", "merged", "verified"]
|
|
89
|
+
}
|
|
90
|
+
}
|
|
91
|
+
}
|
|
92
|
+
}
|
|
93
|
+
},
|
|
94
|
+
"then": {
|
|
95
|
+
"properties": {
|
|
96
|
+
"materialization": { "$ref": "#/$defs/materialization" }
|
|
97
|
+
}
|
|
98
|
+
}
|
|
99
|
+
}
|
|
100
|
+
],
|
|
101
|
+
"$defs": {
|
|
102
|
+
"gitSha": { "type": "string", "pattern": "^[0-9a-f]{40}$" },
|
|
103
|
+
"root": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
|
|
104
|
+
"semver": {
|
|
105
|
+
"type": "string",
|
|
106
|
+
"pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)(?:-[0-9A-Za-z.-]+)?(?:\\+[0-9A-Za-z.-]+)?$"
|
|
107
|
+
},
|
|
108
|
+
"path": {
|
|
109
|
+
"type": "string",
|
|
110
|
+
"pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))[^\\s]+$"
|
|
111
|
+
},
|
|
112
|
+
"state": {
|
|
113
|
+
"enum": [
|
|
114
|
+
"planned",
|
|
115
|
+
"waiting-anchor",
|
|
116
|
+
"materialized",
|
|
117
|
+
"pr-pending",
|
|
118
|
+
"merged",
|
|
119
|
+
"verified"
|
|
120
|
+
]
|
|
121
|
+
},
|
|
122
|
+
"completedAlpha": {
|
|
123
|
+
"type": "object",
|
|
124
|
+
"additionalProperties": false,
|
|
125
|
+
"required": [
|
|
126
|
+
"outcome",
|
|
127
|
+
"version",
|
|
128
|
+
"exactTag",
|
|
129
|
+
"releaseSha",
|
|
130
|
+
"treeSha",
|
|
131
|
+
"publicationRoot",
|
|
132
|
+
"completedAt"
|
|
133
|
+
],
|
|
134
|
+
"properties": {
|
|
135
|
+
"outcome": { "const": "succeeded" },
|
|
136
|
+
"version": {
|
|
137
|
+
"type": "string",
|
|
138
|
+
"pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)-alpha\\.(0|[1-9][0-9]*)$"
|
|
139
|
+
},
|
|
140
|
+
"exactTag": { "type": "string", "minLength": 1 },
|
|
141
|
+
"releaseSha": { "$ref": "#/$defs/gitSha" },
|
|
142
|
+
"treeSha": { "$ref": "#/$defs/gitSha" },
|
|
143
|
+
"publicationRoot": { "$ref": "#/$defs/root" },
|
|
144
|
+
"completedAt": { "type": "string", "format": "date-time" }
|
|
145
|
+
}
|
|
146
|
+
},
|
|
147
|
+
"model": {
|
|
148
|
+
"oneOf": [
|
|
149
|
+
{
|
|
150
|
+
"type": "object",
|
|
151
|
+
"additionalProperties": false,
|
|
152
|
+
"required": ["strategy", "next"],
|
|
153
|
+
"properties": {
|
|
154
|
+
"strategy": { "const": "semver" },
|
|
155
|
+
"next": { "const": "auto" }
|
|
156
|
+
}
|
|
157
|
+
},
|
|
158
|
+
{
|
|
159
|
+
"type": "object",
|
|
160
|
+
"additionalProperties": false,
|
|
161
|
+
"required": ["strategy", "next"],
|
|
162
|
+
"properties": {
|
|
163
|
+
"strategy": { "const": "anchored" },
|
|
164
|
+
"next": { "const": "manual" }
|
|
165
|
+
}
|
|
166
|
+
}
|
|
167
|
+
]
|
|
168
|
+
},
|
|
169
|
+
"adapter": {
|
|
170
|
+
"type": "object",
|
|
171
|
+
"additionalProperties": false,
|
|
172
|
+
"required": [
|
|
173
|
+
"environmentVariable",
|
|
174
|
+
"sourcePaths",
|
|
175
|
+
"derivedPaths",
|
|
176
|
+
"allowedChangePaths",
|
|
177
|
+
"readOnlyPaths",
|
|
178
|
+
"derivationStage",
|
|
179
|
+
"verificationStage"
|
|
180
|
+
],
|
|
181
|
+
"properties": {
|
|
182
|
+
"environmentVariable": { "const": "BUILDCHAIN_VERSION" },
|
|
183
|
+
"sourcePaths": {
|
|
184
|
+
"type": "array",
|
|
185
|
+
"minItems": 1,
|
|
186
|
+
"uniqueItems": true,
|
|
187
|
+
"items": { "$ref": "#/$defs/path" }
|
|
188
|
+
},
|
|
189
|
+
"derivedPaths": {
|
|
190
|
+
"type": "array",
|
|
191
|
+
"uniqueItems": true,
|
|
192
|
+
"items": { "$ref": "#/$defs/path" }
|
|
193
|
+
},
|
|
194
|
+
"allowedChangePaths": {
|
|
195
|
+
"type": "array",
|
|
196
|
+
"minItems": 1,
|
|
197
|
+
"uniqueItems": true,
|
|
198
|
+
"items": { "$ref": "#/$defs/path" }
|
|
199
|
+
},
|
|
200
|
+
"readOnlyPaths": {
|
|
201
|
+
"type": "array",
|
|
202
|
+
"uniqueItems": true,
|
|
203
|
+
"items": { "$ref": "#/$defs/path" }
|
|
204
|
+
},
|
|
205
|
+
"derivationStage": {
|
|
206
|
+
"oneOf": [{ "type": "null" }, { "const": "lifecycle.version-state" }]
|
|
207
|
+
},
|
|
208
|
+
"verificationStage": { "const": "lifecycle.verify" }
|
|
209
|
+
}
|
|
210
|
+
},
|
|
211
|
+
"target": {
|
|
212
|
+
"type": "object",
|
|
213
|
+
"additionalProperties": false,
|
|
214
|
+
"required": ["version", "anchor"],
|
|
215
|
+
"properties": {
|
|
216
|
+
"version": {
|
|
217
|
+
"oneOf": [{ "type": "null" }, { "$ref": "#/$defs/semver" }]
|
|
218
|
+
},
|
|
219
|
+
"anchor": {
|
|
220
|
+
"oneOf": [
|
|
221
|
+
{ "type": "null" },
|
|
222
|
+
{
|
|
223
|
+
"type": "object",
|
|
224
|
+
"additionalProperties": false,
|
|
225
|
+
"required": ["manifestPath", "manifestRoot"],
|
|
226
|
+
"properties": {
|
|
227
|
+
"manifestPath": { "$ref": "#/$defs/path" },
|
|
228
|
+
"manifestRoot": { "$ref": "#/$defs/root" }
|
|
229
|
+
}
|
|
230
|
+
}
|
|
231
|
+
]
|
|
232
|
+
}
|
|
233
|
+
}
|
|
234
|
+
},
|
|
235
|
+
"materialization": {
|
|
236
|
+
"type": "object",
|
|
237
|
+
"additionalProperties": false,
|
|
238
|
+
"required": [
|
|
239
|
+
"targetVersion",
|
|
240
|
+
"anchorRoot",
|
|
241
|
+
"paths",
|
|
242
|
+
"materializationRoot"
|
|
243
|
+
],
|
|
244
|
+
"properties": {
|
|
245
|
+
"targetVersion": { "$ref": "#/$defs/semver" },
|
|
246
|
+
"anchorRoot": {
|
|
247
|
+
"oneOf": [{ "type": "null" }, { "$ref": "#/$defs/root" }]
|
|
248
|
+
},
|
|
249
|
+
"paths": {
|
|
250
|
+
"type": "array",
|
|
251
|
+
"minItems": 1,
|
|
252
|
+
"items": {
|
|
253
|
+
"type": "object",
|
|
254
|
+
"additionalProperties": false,
|
|
255
|
+
"required": ["path", "beforeRoot", "afterRoot", "changed"],
|
|
256
|
+
"properties": {
|
|
257
|
+
"path": { "$ref": "#/$defs/path" },
|
|
258
|
+
"beforeRoot": { "$ref": "#/$defs/root" },
|
|
259
|
+
"afterRoot": { "$ref": "#/$defs/root" },
|
|
260
|
+
"changed": { "type": "boolean" }
|
|
261
|
+
}
|
|
262
|
+
}
|
|
263
|
+
},
|
|
264
|
+
"materializationRoot": { "$ref": "#/$defs/root" }
|
|
265
|
+
}
|
|
266
|
+
},
|
|
267
|
+
"transition": {
|
|
268
|
+
"type": "object",
|
|
269
|
+
"additionalProperties": false,
|
|
270
|
+
"required": [
|
|
271
|
+
"expectedStateRoot",
|
|
272
|
+
"from",
|
|
273
|
+
"to",
|
|
274
|
+
"event",
|
|
275
|
+
"evidenceRoot",
|
|
276
|
+
"recordedAt",
|
|
277
|
+
"requestRoot",
|
|
278
|
+
"transitionRoot"
|
|
279
|
+
],
|
|
280
|
+
"properties": {
|
|
281
|
+
"expectedStateRoot": { "$ref": "#/$defs/root" },
|
|
282
|
+
"from": { "$ref": "#/$defs/state" },
|
|
283
|
+
"to": { "$ref": "#/$defs/state" },
|
|
284
|
+
"event": { "type": "string", "minLength": 1 },
|
|
285
|
+
"evidenceRoot": { "$ref": "#/$defs/root" },
|
|
286
|
+
"recordedAt": { "type": "string", "format": "date-time" },
|
|
287
|
+
"requestRoot": { "$ref": "#/$defs/root" },
|
|
288
|
+
"transitionRoot": { "$ref": "#/$defs/root" }
|
|
289
|
+
}
|
|
290
|
+
}
|
|
291
|
+
}
|
|
292
|
+
}
|
|
@@ -22,6 +22,7 @@
|
|
|
22
22
|
"schemas/release-tail-provider-bindings-v1.schema.json",
|
|
23
23
|
"schemas/kfd-agent-hub-adoption.schema.json",
|
|
24
24
|
"schemas/kfd-product-gate-input-v1.schema.json",
|
|
25
|
+
"schemas/dev-delivery-authority-v2.schema.json",
|
|
25
26
|
"buildchain-contract.json",
|
|
26
27
|
"kfd-upstream-aggregate.json",
|
|
27
28
|
"kfd-claims.json",
|
|
@@ -10,6 +10,7 @@
|
|
|
10
10
|
"schemas/release-tail-provider-bindings-v1.schema.json",
|
|
11
11
|
"schemas/kfd-agent-hub-adoption.schema.json",
|
|
12
12
|
"schemas/kfd-product-gate-input-v1.schema.json",
|
|
13
|
+
"schemas/dev-delivery-authority-v2.schema.json",
|
|
13
14
|
"kfd-support.json",
|
|
14
15
|
"artifact-evidence.json",
|
|
15
16
|
"product-mechanism.json",
|
|
@@ -47,6 +48,7 @@
|
|
|
47
48
|
"schemas/release-tail-provider-bindings-v1.schema.json",
|
|
48
49
|
"schemas/kfd-agent-hub-adoption.schema.json",
|
|
49
50
|
"schemas/kfd-product-gate-input-v1.schema.json",
|
|
51
|
+
"schemas/dev-delivery-authority-v2.schema.json",
|
|
50
52
|
"buildchain-contract.json",
|
|
51
53
|
"kfd-claims.json",
|
|
52
54
|
"product-mechanism.json",
|
|
@@ -4,7 +4,7 @@
|
|
|
4
4
|
"product": {
|
|
5
5
|
"name": "Buildchain",
|
|
6
6
|
"package": "@kungfu-tech/buildchain",
|
|
7
|
-
"version": "3.0.9-alpha.
|
|
7
|
+
"version": "3.0.9-alpha.11",
|
|
8
8
|
"repository": "https://github.com/kungfu-systems/buildchain"
|
|
9
9
|
},
|
|
10
10
|
"majorLine": "v3",
|
|
@@ -64,6 +64,60 @@
|
|
|
64
64
|
"cutRoot": "sha256:4fd5ae0cdad01a09e91bbb3f183ac595510a8f25baf7ba865de7633a7eacb3eb",
|
|
65
65
|
"proofRoot": "sha256:36c85ba487be1528e85776d2bc5f766a971d42ac238aec30071945f7d60d9fc5"
|
|
66
66
|
},
|
|
67
|
+
{
|
|
68
|
+
"schema": "kungfu.buildchain.compatibility-proof/v1",
|
|
69
|
+
"proofId": "build-channel-router-d40dd0-to-30549a",
|
|
70
|
+
"predicate": "compatible-breaking-digest",
|
|
71
|
+
"direction": "source-to-target",
|
|
72
|
+
"operation": "accept-contract-lock",
|
|
73
|
+
"source": {
|
|
74
|
+
"contract": "kungfu-buildchain-runtime-contract-world",
|
|
75
|
+
"surfaceId": "controller:build-channel-router",
|
|
76
|
+
"surfaceKind": "controller",
|
|
77
|
+
"breakingDigest": "sha256:d40dd05d7e07473d4b2dc1b62fbb0ed6f06449b4d3a7c44a2e8014313e3c0273"
|
|
78
|
+
},
|
|
79
|
+
"target": {
|
|
80
|
+
"contract": "kungfu-buildchain-runtime-contract-world",
|
|
81
|
+
"surfaceId": "controller:build-channel-router",
|
|
82
|
+
"surfaceKind": "controller",
|
|
83
|
+
"breakingDigest": "sha256:30549aa26cd1e1dd81f10fe3529d3c6e3f8438a6efa0100c47ebae4d2f3d71df"
|
|
84
|
+
},
|
|
85
|
+
"scope": {
|
|
86
|
+
"contract": "kungfu-buildchain-runtime-contract-world",
|
|
87
|
+
"surfaceId": "controller:build-channel-router",
|
|
88
|
+
"surfaceKind": "controller",
|
|
89
|
+
"majorLines": [
|
|
90
|
+
"v2",
|
|
91
|
+
"v3"
|
|
92
|
+
],
|
|
93
|
+
"operation": "accept-contract-lock"
|
|
94
|
+
},
|
|
95
|
+
"scopeRoot": "sha256:dc381e72e9cad86293254f8542394f1abc27b4b0f07c122cb4cad5f73b381ccb",
|
|
96
|
+
"evidence": {
|
|
97
|
+
"kind": "protected-pull-request-contract-acceptance",
|
|
98
|
+
"pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2549",
|
|
99
|
+
"protectedBase": "dev/v3/v3.0",
|
|
100
|
+
"sourceCommit": "0d87b772265066f5e6157e1ba6a2ba1021fb5225",
|
|
101
|
+
"mergeCommit": "34fad9d3a94c450d75c0d06fd6ed00470c992ff7",
|
|
102
|
+
"contractDigest": "sha256:2584ba36ab54cd5e9bab9e34dfc08d87a55dc57de1be7641492bf7ceb1366350",
|
|
103
|
+
"compatibilityDigest": "sha256:80f65cc191b1f771475184edf8a1bf9c10dd69bb58060aa09313d0e1e57f508a"
|
|
104
|
+
},
|
|
105
|
+
"evidenceRoot": "sha256:e449bdc62832fd18b33d93833207d70e843f066a85aae8b0c717234194ecb497",
|
|
106
|
+
"authority": {
|
|
107
|
+
"kind": "protected-base-contract-authority",
|
|
108
|
+
"repository": "kungfu-systems/buildchain",
|
|
109
|
+
"protectedBase": "dev/v3/v3.0"
|
|
110
|
+
},
|
|
111
|
+
"authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
|
|
112
|
+
"cut": {
|
|
113
|
+
"kind": "protected-git-cut",
|
|
114
|
+
"repository": "kungfu-systems/buildchain",
|
|
115
|
+
"protectedBase": "dev/v3/v3.0",
|
|
116
|
+
"commit": "34fad9d3a94c450d75c0d06fd6ed00470c992ff7"
|
|
117
|
+
},
|
|
118
|
+
"cutRoot": "sha256:3b83f02e22ca82fc4a099b5f8c4353fffb1423b0a5cba41860b1ba86f7c8cbb7",
|
|
119
|
+
"proofRoot": "sha256:36d2e188f43385d6191116393aa81ea025ccf61e21a1c5eae1d56be92a203b31"
|
|
120
|
+
},
|
|
67
121
|
{
|
|
68
122
|
"schema": "kungfu.buildchain.compatibility-proof/v1",
|
|
69
123
|
"proofId": "build-lifecycle-307459-to-6b8d38",
|
|
@@ -324,7 +378,7 @@
|
|
|
324
378
|
"retryable GitHub fallback fetches use a bounded attempt budget before exact source SHA and tree verification"
|
|
325
379
|
],
|
|
326
380
|
"breakingDigest": "sha256:dfbedd543ae0c067982b5c8c02d98dd2f7f7df88752be97fb330da6b0ba30faa",
|
|
327
|
-
"auditDigest": "sha256:
|
|
381
|
+
"auditDigest": "sha256:e1a045509343ab4e907cae61d40b931b8cd5e126a85296669ab2bd49f7bc8ad3"
|
|
328
382
|
},
|
|
329
383
|
{
|
|
330
384
|
"contractVersion": 1,
|
|
@@ -462,7 +516,7 @@
|
|
|
462
516
|
"GitHub Release passport and evidence publication is delegated to promote-buildchain-ref after the semver release transaction completes"
|
|
463
517
|
],
|
|
464
518
|
"breakingDigest": "sha256:e60642aa298933d2c103284794921a6c340a50aa91ee528b06e58892a2a006bf",
|
|
465
|
-
"auditDigest": "sha256:
|
|
519
|
+
"auditDigest": "sha256:9c9efb4fa3f6c75c25ebd6100ceaf4a4e3aea2e8f72d5eea118972a3d042731a",
|
|
466
520
|
"compatibleBreakingDigests": [
|
|
467
521
|
"sha256:acd401cfc46450115a3763fd4b679d85f185e8757ebd52510d6262e1533df4cf"
|
|
468
522
|
],
|
|
@@ -521,7 +575,7 @@
|
|
|
521
575
|
"resume-from-candidate-run is fail-closed and uses a fresh caller event instead of rerunning a frozen startup graph"
|
|
522
576
|
],
|
|
523
577
|
"breakingDigest": "sha256:9db8dd07152855d03ff30f9c571438593c689d3e8139fa45431d000f548242f5",
|
|
524
|
-
"auditDigest": "sha256:
|
|
578
|
+
"auditDigest": "sha256:55e0ed7099c1b7ff3f1abaeadc85168080975c633f2001d4148bf1045cf7ce36",
|
|
525
579
|
"compatibleBreakingDigests": [
|
|
526
580
|
"sha256:aa30f22e3af0a89841310bdbdc900844dd95a66974db173fa140a71bbd7e82c0"
|
|
527
581
|
],
|
|
@@ -751,7 +805,7 @@
|
|
|
751
805
|
"semver GitHub Releases are created or updated only after transaction completion, with prerelease/latest metadata bound to the authoritative publication channel and tag syntax retained as the fallback for ordinary callers"
|
|
752
806
|
],
|
|
753
807
|
"breakingDigest": "sha256:6147c0a8d5c36bfaa6021871574e1fc28192a3f1b8cfdae4d24ef3059ac1ebda",
|
|
754
|
-
"auditDigest": "sha256:
|
|
808
|
+
"auditDigest": "sha256:5a392996406f1327e7a5f40462663d40953a24e30c33377d7d2854a18ca4d1c1",
|
|
755
809
|
"compatibleBreakingDigests": [
|
|
756
810
|
"sha256:a59f0910e6df842e7699139472e5dd69ac2fdd7f7213bf2cb346d1d622556874"
|
|
757
811
|
],
|
|
@@ -872,7 +926,7 @@
|
|
|
872
926
|
"release-state SHA is recorded as a durable audit entrance"
|
|
873
927
|
],
|
|
874
928
|
"breakingDigest": "sha256:b627e1b2ece9b6049517a942c5139e342e6077cdd3d8962d61cef8481b1f70ad",
|
|
875
|
-
"auditDigest": "sha256:
|
|
929
|
+
"auditDigest": "sha256:00d5f388d6abc7aaa730bbbda644cdba0e83cff783558102bf143d68bd7429df"
|
|
876
930
|
},
|
|
877
931
|
{
|
|
878
932
|
"contractVersion": 1,
|
|
@@ -921,7 +975,7 @@
|
|
|
921
975
|
"prose-only public claims downgrade the release trust passport audit"
|
|
922
976
|
],
|
|
923
977
|
"breakingDigest": "sha256:f0b636eb925ddbf45ff1a8872454ab7b4dd98857cac12bb75217830130e62a16",
|
|
924
|
-
"auditDigest": "sha256:
|
|
978
|
+
"auditDigest": "sha256:00d5f388d6abc7aaa730bbbda644cdba0e83cff783558102bf143d68bd7429df"
|
|
925
979
|
},
|
|
926
980
|
{
|
|
927
981
|
"contractVersion": 1,
|
|
@@ -981,7 +1035,7 @@
|
|
|
981
1035
|
"README badge block checks and writes are generated from machine-readable repository facts"
|
|
982
1036
|
],
|
|
983
1037
|
"breakingDigest": "sha256:90a73892b2d6c214048448d5f45df75639bdf7b7e8fefd9c596e04b087407bcc",
|
|
984
|
-
"auditDigest": "sha256:
|
|
1038
|
+
"auditDigest": "sha256:856e79ff668877e0b366850bb0e37fa193206f8dc5a51091bc74dd1c2240f8e2"
|
|
985
1039
|
},
|
|
986
1040
|
{
|
|
987
1041
|
"contractVersion": 1,
|
|
@@ -1071,7 +1125,7 @@
|
|
|
1071
1125
|
"manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
|
|
1072
1126
|
],
|
|
1073
1127
|
"breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
|
|
1074
|
-
"auditDigest": "sha256:
|
|
1128
|
+
"auditDigest": "sha256:330c596b9c13183b221cb48300980abda288b53db5ddb60707b24e3dd6840f9e"
|
|
1075
1129
|
},
|
|
1076
1130
|
{
|
|
1077
1131
|
"contractVersion": 1,
|
|
@@ -1093,7 +1147,7 @@
|
|
|
1093
1147
|
"agents can discover supported Node APIs without importing internal file paths"
|
|
1094
1148
|
],
|
|
1095
1149
|
"breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
|
|
1096
|
-
"auditDigest": "sha256:
|
|
1150
|
+
"auditDigest": "sha256:99a04734bd8964dc6d82bb16b37a7d560ffe56188bf3fd53f2614df23fc175fe"
|
|
1097
1151
|
},
|
|
1098
1152
|
{
|
|
1099
1153
|
"contractVersion": 1,
|
|
@@ -1144,7 +1198,7 @@
|
|
|
1144
1198
|
"controllerDescriptor": {
|
|
1145
1199
|
"contract": "buildchain.controller-descriptor/v1",
|
|
1146
1200
|
"digest": "sha256:373723a73d188194d389dee04c394d3b79cb0c016a370f2f5d0f60979a02ed48",
|
|
1147
|
-
"registryDigest": "sha256:
|
|
1201
|
+
"registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
|
|
1148
1202
|
"inputClassifications": {
|
|
1149
1203
|
"buildchain-ref": {
|
|
1150
1204
|
"classification": "included",
|
|
@@ -1327,7 +1381,7 @@
|
|
|
1327
1381
|
"controllerDescriptor": {
|
|
1328
1382
|
"contract": "buildchain.controller-descriptor/v1",
|
|
1329
1383
|
"digest": "sha256:f986e79241d831f027a0955a35c918f946989176c76555e20f156ed31fb10c94",
|
|
1330
|
-
"registryDigest": "sha256:
|
|
1384
|
+
"registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
|
|
1331
1385
|
"inputClassifications": {
|
|
1332
1386
|
"BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
|
|
1333
1387
|
"classification": "redacted",
|
|
@@ -1718,7 +1772,7 @@
|
|
|
1718
1772
|
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
1719
1773
|
],
|
|
1720
1774
|
"breakingDigest": "sha256:6b8d38e92b2c67b5bc83fae0a3fd95bfa47582fbc176e6cdeebe7630a57534cb",
|
|
1721
|
-
"auditDigest": "sha256:
|
|
1775
|
+
"auditDigest": "sha256:e1a045509343ab4e907cae61d40b931b8cd5e126a85296669ab2bd49f7bc8ad3",
|
|
1722
1776
|
"compatibleBreakingDigests": [
|
|
1723
1777
|
"sha256:30745921541e9b0f70475bb2178c2559f6aef248f6680670ccd44d8c5a69a6b1",
|
|
1724
1778
|
"sha256:e264a79f9f399038c2fcfd21e4168c68c2e1485ee5c651c02242a02b622ac2be"
|
|
@@ -1865,7 +1919,7 @@
|
|
|
1865
1919
|
"controllerDescriptor": {
|
|
1866
1920
|
"contract": "buildchain.controller-descriptor/v1",
|
|
1867
1921
|
"digest": "sha256:6dfa79003f0c92e336c56f07f45f57cc5572921bdb46e432fd809fb19ee823bb",
|
|
1868
|
-
"registryDigest": "sha256:
|
|
1922
|
+
"registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
|
|
1869
1923
|
"inputClassifications": {
|
|
1870
1924
|
"BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
|
|
1871
1925
|
"classification": "redacted",
|
|
@@ -2268,7 +2322,13 @@
|
|
|
2268
2322
|
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
2269
2323
|
],
|
|
2270
2324
|
"breakingDigest": "sha256:30549aa26cd1e1dd81f10fe3529d3c6e3f8438a6efa0100c47ebae4d2f3d71df",
|
|
2271
|
-
"auditDigest": "sha256:789173c7e5508c7e7947a59fbcb3b5bebc3783ed47695d7f5abb468a9b5d4d7d"
|
|
2325
|
+
"auditDigest": "sha256:789173c7e5508c7e7947a59fbcb3b5bebc3783ed47695d7f5abb468a9b5d4d7d",
|
|
2326
|
+
"compatibleBreakingDigests": [
|
|
2327
|
+
"sha256:d40dd05d7e07473d4b2dc1b62fbb0ed6f06449b4d3a7c44a2e8014313e3c0273"
|
|
2328
|
+
],
|
|
2329
|
+
"compatibilityProofRoots": [
|
|
2330
|
+
"sha256:36d2e188f43385d6191116393aa81ea025ccf61e21a1c5eae1d56be92a203b31"
|
|
2331
|
+
]
|
|
2272
2332
|
},
|
|
2273
2333
|
{
|
|
2274
2334
|
"contractVersion": 1,
|
|
@@ -2338,7 +2398,7 @@
|
|
|
2338
2398
|
"controllerDescriptor": {
|
|
2339
2399
|
"contract": "buildchain.controller-descriptor/v1",
|
|
2340
2400
|
"digest": "sha256:8e42956a2c10fa109500e72b97994f06b3d22a19cc63a46f66410b2e81706e9d",
|
|
2341
|
-
"registryDigest": "sha256:
|
|
2401
|
+
"registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
|
|
2342
2402
|
"inputClassifications": {
|
|
2343
2403
|
"artifact-name": {
|
|
2344
2404
|
"classification": "included",
|
|
@@ -2555,7 +2615,7 @@
|
|
|
2555
2615
|
"controllerDescriptor": {
|
|
2556
2616
|
"contract": "buildchain.controller-descriptor/v1",
|
|
2557
2617
|
"digest": "sha256:c5274b37f04d0054559fdc8698c51bd0f0d8ae470baf163e9caa7699aa970575",
|
|
2558
|
-
"registryDigest": "sha256:
|
|
2618
|
+
"registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
|
|
2559
2619
|
"inputClassifications": {
|
|
2560
2620
|
"artifact-path": {
|
|
2561
2621
|
"classification": "digest-only",
|
|
@@ -2799,7 +2859,7 @@
|
|
|
2799
2859
|
"controllerDescriptor": {
|
|
2800
2860
|
"contract": "buildchain.controller-descriptor/v1",
|
|
2801
2861
|
"digest": "sha256:6b132790b9798e8a5dfbe095701d8e024c160a08bc7c4bd477ee79feef7a9cfd",
|
|
2802
|
-
"registryDigest": "sha256:
|
|
2862
|
+
"registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
|
|
2803
2863
|
"inputClassifications": {
|
|
2804
2864
|
"artifact-name": {
|
|
2805
2865
|
"classification": "included",
|
|
@@ -2981,7 +3041,7 @@
|
|
|
2981
3041
|
"controllerDescriptor": {
|
|
2982
3042
|
"contract": "buildchain.controller-descriptor/v1",
|
|
2983
3043
|
"digest": "sha256:6d71409659fbf8543c7e520b0c493d8afe86bdf60286b860bb917f0041ebc173",
|
|
2984
|
-
"registryDigest": "sha256:
|
|
3044
|
+
"registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
|
|
2985
3045
|
"inputClassifications": {
|
|
2986
3046
|
"artifact-name": {
|
|
2987
3047
|
"classification": "included",
|
|
@@ -3274,6 +3334,7 @@
|
|
|
3274
3334
|
"release-candidate-workflow-file",
|
|
3275
3335
|
"release-candidate-workflow-name",
|
|
3276
3336
|
"release-passport",
|
|
3337
|
+
"release-passport-adopter-delivery-json",
|
|
3277
3338
|
"release-passport-attachment-command",
|
|
3278
3339
|
"release-passport-buildchain-self-kfd",
|
|
3279
3340
|
"release-passport-evidence-command",
|
|
@@ -3313,8 +3374,8 @@
|
|
|
3313
3374
|
],
|
|
3314
3375
|
"controllerDescriptor": {
|
|
3315
3376
|
"contract": "buildchain.controller-descriptor/v1",
|
|
3316
|
-
"digest": "sha256:
|
|
3317
|
-
"registryDigest": "sha256:
|
|
3377
|
+
"digest": "sha256:127dc1d80dca63e2bb1fb268d2183d0a31ea2a67eb81bce48dae916f698c02be",
|
|
3378
|
+
"registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
|
|
3318
3379
|
"inputClassifications": {
|
|
3319
3380
|
"BUILDCHAIN_ISSUE_APP_ID": {
|
|
3320
3381
|
"classification": "redacted",
|
|
@@ -3656,6 +3717,10 @@
|
|
|
3656
3717
|
"classification": "included",
|
|
3657
3718
|
"source": "workflow-call-input"
|
|
3658
3719
|
},
|
|
3720
|
+
"release-passport-adopter-delivery-json": {
|
|
3721
|
+
"classification": "digest-only",
|
|
3722
|
+
"source": "workflow-call-input"
|
|
3723
|
+
},
|
|
3659
3724
|
"release-passport-attachment-command": {
|
|
3660
3725
|
"classification": "digest-only",
|
|
3661
3726
|
"source": "workflow-call-input"
|
|
@@ -3809,7 +3874,7 @@
|
|
|
3809
3874
|
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
3810
3875
|
],
|
|
3811
3876
|
"breakingDigest": "sha256:015d8de793adbd4c539416be7d7512e18cc92097e629b0203fa06d2c183e98bd",
|
|
3812
|
-
"auditDigest": "sha256:
|
|
3877
|
+
"auditDigest": "sha256:55e0ed7099c1b7ff3f1abaeadc85168080975c633f2001d4148bf1045cf7ce36"
|
|
3813
3878
|
},
|
|
3814
3879
|
{
|
|
3815
3880
|
"contractVersion": 1,
|
|
@@ -3874,7 +3939,7 @@
|
|
|
3874
3939
|
"controllerDescriptor": {
|
|
3875
3940
|
"contract": "buildchain.controller-descriptor/v1",
|
|
3876
3941
|
"digest": "sha256:660579b5561e8e33375a3f3b1fefbb8a5bd8241a55ba43374d786fb772c24a12",
|
|
3877
|
-
"registryDigest": "sha256:
|
|
3942
|
+
"registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
|
|
3878
3943
|
"inputClassifications": {
|
|
3879
3944
|
"agent-work-context-json": {
|
|
3880
3945
|
"classification": "digest-only",
|
|
@@ -4009,7 +4074,7 @@
|
|
|
4009
4074
|
"controllerDescriptor": {
|
|
4010
4075
|
"contract": "buildchain.controller-descriptor/v1",
|
|
4011
4076
|
"digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555",
|
|
4012
|
-
"registryDigest": "sha256:
|
|
4077
|
+
"registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
|
|
4013
4078
|
"inputClassifications": {}
|
|
4014
4079
|
},
|
|
4015
4080
|
"guarantees": [
|
|
@@ -4022,7 +4087,7 @@
|
|
|
4022
4087
|
"auditDigest": "sha256:d07482cd66413a2fb3781a3b76f960b8151b6231841799647fe237820de2fde6"
|
|
4023
4088
|
}
|
|
4024
4089
|
],
|
|
4025
|
-
"compatibilityProofRegistryRoot": "sha256:
|
|
4026
|
-
"compatibilityDigest": "sha256:
|
|
4027
|
-
"contractDigest": "sha256:
|
|
4090
|
+
"compatibilityProofRegistryRoot": "sha256:aec674d174461493e3493b3fe3164d62745a9ce18cb6a560f94bd99f2759eb53",
|
|
4091
|
+
"compatibilityDigest": "sha256:eb2fafb181b33002f81102a966f0a801ab1798101446635703ab6acfea51d9aa",
|
|
4092
|
+
"contractDigest": "sha256:5f9568c1440778e7f72e4300aba40196001d85c3ba12748e4266b5a5577333db"
|
|
4028
4093
|
}
|