@kungfu-tech/buildchain 3.0.9-alpha.1 → 3.0.9-alpha.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (105) hide show
  1. package/actions/promote-buildchain-ref/README.md +4 -0
  2. package/bin/buildchain.mjs +9 -1
  3. package/bin/internal/trust-release-release-handlers.mjs +1 -0
  4. package/contracts/dev-delivery-authority-v2.schema.json +253 -0
  5. package/contracts/fixtures/next-development-transition-v1/anchored-manual-waiting.json +47 -0
  6. package/contracts/fixtures/next-development-transition-v1/semver-auto-planned.json +47 -0
  7. package/contracts/fixtures/next-development-transition-v1/version-model-cases.json +40 -0
  8. package/contracts/next-development-request-v1.schema.json +66 -0
  9. package/contracts/next-development-transition-v1.schema.json +292 -0
  10. package/dist/site/agent-index.json +1 -0
  11. package/dist/site/artifact-schemas.json +2 -0
  12. package/dist/site/buildchain-contract.json +92 -27
  13. package/dist/site/buildchain-site.json +351 -38
  14. package/dist/site/capability-registry.json +7 -6
  15. package/dist/site/cli-registry.json +43 -3
  16. package/dist/site/controller-registry.json +6 -2
  17. package/dist/site/kfd-claims.json +223 -12
  18. package/dist/site/kfd-upstream-aggregate.json +9 -9
  19. package/dist/site/manual-registry.json +23 -7
  20. package/dist/site/node-api-registry.json +7926 -4533
  21. package/dist/site/page-registry.json +332 -27
  22. package/dist/site/public-surface-audit.json +359 -11
  23. package/dist/site/publication-registry.json +4 -4
  24. package/dist/site/release-passport-check-manifest.json +1 -0
  25. package/dist/site/release-provenance.json +14 -0
  26. package/dist/site/schemas/dev-delivery-authority-v2.schema.json +442 -0
  27. package/dist/site/schemas/release-passport-v1.schema.json +3 -0
  28. package/dist/site/site-manifest.json +19 -11
  29. package/dist/site/workflow-registry.json +21 -10
  30. package/docs/MAP.md +5 -2
  31. package/docs/adopter-delivery-gate.md +106 -0
  32. package/docs/aws-us-elastic-runner-burst-plane.md +30 -3
  33. package/docs/cli-reference.md +202 -15
  34. package/docs/dev-alpha-candidate-patrol.md +8 -0
  35. package/docs/dev-delivery-qualification-landing-adr.md +137 -0
  36. package/docs/dev-delivery-warrant.md +149 -22
  37. package/docs/kfd-support.md +7 -2
  38. package/docs/next-development-transition.md +119 -0
  39. package/docs/node-api-reference.md +402 -204
  40. package/docs/release-governance.md +10 -7
  41. package/docs/release-passport.md +18 -2
  42. package/docs/versioning.md +4 -1
  43. package/package.json +23 -6
  44. package/packages/core/README.md +25 -0
  45. package/packages/core/adopter-delivery-gate.js +576 -0
  46. package/packages/core/adopter-delivery-json.js +66 -0
  47. package/packages/core/adopter-delivery-passport.js +259 -0
  48. package/packages/core/adopter-delivery-vectors.js +158 -0
  49. package/packages/core/adopter-delivery-vectors.json +77 -0
  50. package/packages/core/artifact-verification-envelope.js +5 -5
  51. package/packages/core/buildchain-agent-manuals.js +1 -0
  52. package/packages/core/buildchain-channel-identity.js +2 -3
  53. package/packages/core/buildchain-compatibility-proof.js +22 -0
  54. package/packages/core/buildchain-delivery-bootstrap.js +240 -0
  55. package/packages/core/buildchain-delivery-infrastructure.js +164 -0
  56. package/packages/core/buildchain-delivery-self-dogfood.js +395 -0
  57. package/packages/core/channel-candidate.js +8 -0
  58. package/packages/core/channel-promotion-baseline.js +52 -0
  59. package/packages/core/dev-alpha-candidate-selection.js +10 -2
  60. package/packages/core/dev-delivery-authority.js +996 -0
  61. package/packages/core/dev-delivery-native-proof.js +418 -0
  62. package/packages/core/dev-delivery-warrant-settlement.js +67 -20
  63. package/packages/core/dev-delivery-warrant.js +129 -46
  64. package/packages/core/kfd-adopter-category-driver.js +167 -0
  65. package/packages/core/kfd-adopter-manifest.js +49 -50
  66. package/packages/core/legacy-kfd-adopter-driver.js +167 -0
  67. package/packages/core/next-development-candidate-reservation.js +186 -0
  68. package/packages/core/next-development-controller.js +726 -0
  69. package/packages/core/next-development-projection.js +288 -0
  70. package/packages/core/next-development-transition.js +738 -0
  71. package/packages/core/paper-agent-entry.js +7 -4
  72. package/packages/core/paper.js +14 -7
  73. package/packages/core/published-delivery-authority.js +247 -0
  74. package/packages/core/release-passport-contract.js +10 -6
  75. package/packages/core/release-passport.js +37 -13
  76. package/scripts/aws-macos-jit-controller-core.mjs +239 -4
  77. package/scripts/aws-macos-jit-controller.mjs +198 -2
  78. package/scripts/aws-macos-jit-instance-rehydrate.mjs +260 -0
  79. package/scripts/aws-macos-jit-source-rebind.mjs +235 -14
  80. package/scripts/aws-macos-jit.mjs +12 -0
  81. package/scripts/buildchain-cli-help.mjs +10 -2
  82. package/scripts/check-internal-architecture.mjs +1 -0
  83. package/scripts/check-inventory.mjs +12 -1
  84. package/scripts/dev-alpha-candidate-patrol.mjs +22 -1
  85. package/scripts/dev-delivery-authority.mjs +368 -0
  86. package/scripts/dev-delivery-native-run.mjs +235 -0
  87. package/scripts/dev-delivery-proof.mjs +64 -2
  88. package/scripts/dev-delivery-two-phase-resume.mjs +90 -0
  89. package/scripts/dev-delivery-two-phase.mjs +577 -0
  90. package/scripts/dev-delivery-warrant.mjs +48 -6
  91. package/scripts/dev-pr-delivery-warrant.mjs +19 -14
  92. package/scripts/generate-buildchain-kfd-witnesses.mjs +2 -2
  93. package/scripts/generate-channel-build-workflow.mjs +4 -0
  94. package/scripts/generate-next-development-guidance.mjs +49 -0
  95. package/scripts/generate-site-bundle.mjs +8 -3
  96. package/scripts/init-repo.mjs +135 -62
  97. package/scripts/next-development-self-dogfood-harness.mjs +409 -0
  98. package/scripts/next-development-self-dogfood.mjs +532 -0
  99. package/scripts/next-development-transition.mjs +47 -0
  100. package/scripts/release-candidate-tail-reseal.mjs +426 -0
  101. package/scripts/seal-artifact-signing-requests.mjs +7 -4
  102. package/scripts/site-capability-metadata.mjs +25 -1
  103. package/scripts/stable-candidate-qualification.mjs +7 -7
  104. package/scripts/workflow-call-contract.mjs +1 -1
  105. package/templates/native-dev-delivery.yml +86 -0
@@ -0,0 +1,292 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://buildchain.libkungfu.dev/schemas/next-development-transition-v1.schema.json",
4
+ "title": "Buildchain Next-development Transition v1",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": [
8
+ "schemaVersion",
9
+ "contract",
10
+ "idempotencyKey",
11
+ "repository",
12
+ "completedAlpha",
13
+ "completedAlphaRoot",
14
+ "alphaOutcome",
15
+ "model",
16
+ "target",
17
+ "declaredPaths",
18
+ "adapter",
19
+ "effectBounds",
20
+ "state",
21
+ "materialization",
22
+ "transitions"
23
+ ],
24
+ "properties": {
25
+ "schemaVersion": { "const": 1 },
26
+ "contract": {
27
+ "const": "kungfu-buildchain-next-development-transition/v1"
28
+ },
29
+ "idempotencyKey": { "$ref": "#/$defs/root" },
30
+ "repository": {
31
+ "type": "string",
32
+ "pattern": "^[^/\\s]+/[^/\\s]+$"
33
+ },
34
+ "completedAlpha": { "$ref": "#/$defs/completedAlpha" },
35
+ "completedAlphaRoot": { "$ref": "#/$defs/root" },
36
+ "alphaOutcome": { "const": "preserved-success" },
37
+ "model": { "$ref": "#/$defs/model" },
38
+ "target": { "$ref": "#/$defs/target" },
39
+ "declaredPaths": {
40
+ "type": "array",
41
+ "minItems": 1,
42
+ "uniqueItems": true,
43
+ "items": { "$ref": "#/$defs/path" }
44
+ },
45
+ "adapter": { "$ref": "#/$defs/adapter" },
46
+ "effectBounds": {
47
+ "type": "object",
48
+ "additionalProperties": false,
49
+ "required": ["allowedPaths", "refUpdates", "forbiddenRefNamespaces"],
50
+ "properties": {
51
+ "allowedPaths": {
52
+ "type": "array",
53
+ "minItems": 1,
54
+ "uniqueItems": true,
55
+ "items": { "$ref": "#/$defs/path" }
56
+ },
57
+ "refUpdates": { "type": "array", "maxItems": 0 },
58
+ "forbiddenRefNamespaces": {
59
+ "const": ["refs/heads/alpha/", "refs/tags/"]
60
+ }
61
+ }
62
+ },
63
+ "state": {
64
+ "type": "object",
65
+ "additionalProperties": false,
66
+ "required": ["status", "generation", "stateRoot"],
67
+ "properties": {
68
+ "status": { "$ref": "#/$defs/state" },
69
+ "generation": { "type": "integer", "minimum": 1 },
70
+ "stateRoot": { "$ref": "#/$defs/root" }
71
+ }
72
+ },
73
+ "materialization": {
74
+ "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/materialization" }]
75
+ },
76
+ "transitions": {
77
+ "type": "array",
78
+ "items": { "$ref": "#/$defs/transition" }
79
+ }
80
+ },
81
+ "allOf": [
82
+ {
83
+ "if": {
84
+ "properties": {
85
+ "state": {
86
+ "properties": {
87
+ "status": {
88
+ "enum": ["materialized", "pr-pending", "merged", "verified"]
89
+ }
90
+ }
91
+ }
92
+ }
93
+ },
94
+ "then": {
95
+ "properties": {
96
+ "materialization": { "$ref": "#/$defs/materialization" }
97
+ }
98
+ }
99
+ }
100
+ ],
101
+ "$defs": {
102
+ "gitSha": { "type": "string", "pattern": "^[0-9a-f]{40}$" },
103
+ "root": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
104
+ "semver": {
105
+ "type": "string",
106
+ "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)(?:-[0-9A-Za-z.-]+)?(?:\\+[0-9A-Za-z.-]+)?$"
107
+ },
108
+ "path": {
109
+ "type": "string",
110
+ "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))[^\\s]+$"
111
+ },
112
+ "state": {
113
+ "enum": [
114
+ "planned",
115
+ "waiting-anchor",
116
+ "materialized",
117
+ "pr-pending",
118
+ "merged",
119
+ "verified"
120
+ ]
121
+ },
122
+ "completedAlpha": {
123
+ "type": "object",
124
+ "additionalProperties": false,
125
+ "required": [
126
+ "outcome",
127
+ "version",
128
+ "exactTag",
129
+ "releaseSha",
130
+ "treeSha",
131
+ "publicationRoot",
132
+ "completedAt"
133
+ ],
134
+ "properties": {
135
+ "outcome": { "const": "succeeded" },
136
+ "version": {
137
+ "type": "string",
138
+ "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)-alpha\\.(0|[1-9][0-9]*)$"
139
+ },
140
+ "exactTag": { "type": "string", "minLength": 1 },
141
+ "releaseSha": { "$ref": "#/$defs/gitSha" },
142
+ "treeSha": { "$ref": "#/$defs/gitSha" },
143
+ "publicationRoot": { "$ref": "#/$defs/root" },
144
+ "completedAt": { "type": "string", "format": "date-time" }
145
+ }
146
+ },
147
+ "model": {
148
+ "oneOf": [
149
+ {
150
+ "type": "object",
151
+ "additionalProperties": false,
152
+ "required": ["strategy", "next"],
153
+ "properties": {
154
+ "strategy": { "const": "semver" },
155
+ "next": { "const": "auto" }
156
+ }
157
+ },
158
+ {
159
+ "type": "object",
160
+ "additionalProperties": false,
161
+ "required": ["strategy", "next"],
162
+ "properties": {
163
+ "strategy": { "const": "anchored" },
164
+ "next": { "const": "manual" }
165
+ }
166
+ }
167
+ ]
168
+ },
169
+ "adapter": {
170
+ "type": "object",
171
+ "additionalProperties": false,
172
+ "required": [
173
+ "environmentVariable",
174
+ "sourcePaths",
175
+ "derivedPaths",
176
+ "allowedChangePaths",
177
+ "readOnlyPaths",
178
+ "derivationStage",
179
+ "verificationStage"
180
+ ],
181
+ "properties": {
182
+ "environmentVariable": { "const": "BUILDCHAIN_VERSION" },
183
+ "sourcePaths": {
184
+ "type": "array",
185
+ "minItems": 1,
186
+ "uniqueItems": true,
187
+ "items": { "$ref": "#/$defs/path" }
188
+ },
189
+ "derivedPaths": {
190
+ "type": "array",
191
+ "uniqueItems": true,
192
+ "items": { "$ref": "#/$defs/path" }
193
+ },
194
+ "allowedChangePaths": {
195
+ "type": "array",
196
+ "minItems": 1,
197
+ "uniqueItems": true,
198
+ "items": { "$ref": "#/$defs/path" }
199
+ },
200
+ "readOnlyPaths": {
201
+ "type": "array",
202
+ "uniqueItems": true,
203
+ "items": { "$ref": "#/$defs/path" }
204
+ },
205
+ "derivationStage": {
206
+ "oneOf": [{ "type": "null" }, { "const": "lifecycle.version-state" }]
207
+ },
208
+ "verificationStage": { "const": "lifecycle.verify" }
209
+ }
210
+ },
211
+ "target": {
212
+ "type": "object",
213
+ "additionalProperties": false,
214
+ "required": ["version", "anchor"],
215
+ "properties": {
216
+ "version": {
217
+ "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/semver" }]
218
+ },
219
+ "anchor": {
220
+ "oneOf": [
221
+ { "type": "null" },
222
+ {
223
+ "type": "object",
224
+ "additionalProperties": false,
225
+ "required": ["manifestPath", "manifestRoot"],
226
+ "properties": {
227
+ "manifestPath": { "$ref": "#/$defs/path" },
228
+ "manifestRoot": { "$ref": "#/$defs/root" }
229
+ }
230
+ }
231
+ ]
232
+ }
233
+ }
234
+ },
235
+ "materialization": {
236
+ "type": "object",
237
+ "additionalProperties": false,
238
+ "required": [
239
+ "targetVersion",
240
+ "anchorRoot",
241
+ "paths",
242
+ "materializationRoot"
243
+ ],
244
+ "properties": {
245
+ "targetVersion": { "$ref": "#/$defs/semver" },
246
+ "anchorRoot": {
247
+ "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/root" }]
248
+ },
249
+ "paths": {
250
+ "type": "array",
251
+ "minItems": 1,
252
+ "items": {
253
+ "type": "object",
254
+ "additionalProperties": false,
255
+ "required": ["path", "beforeRoot", "afterRoot", "changed"],
256
+ "properties": {
257
+ "path": { "$ref": "#/$defs/path" },
258
+ "beforeRoot": { "$ref": "#/$defs/root" },
259
+ "afterRoot": { "$ref": "#/$defs/root" },
260
+ "changed": { "type": "boolean" }
261
+ }
262
+ }
263
+ },
264
+ "materializationRoot": { "$ref": "#/$defs/root" }
265
+ }
266
+ },
267
+ "transition": {
268
+ "type": "object",
269
+ "additionalProperties": false,
270
+ "required": [
271
+ "expectedStateRoot",
272
+ "from",
273
+ "to",
274
+ "event",
275
+ "evidenceRoot",
276
+ "recordedAt",
277
+ "requestRoot",
278
+ "transitionRoot"
279
+ ],
280
+ "properties": {
281
+ "expectedStateRoot": { "$ref": "#/$defs/root" },
282
+ "from": { "$ref": "#/$defs/state" },
283
+ "to": { "$ref": "#/$defs/state" },
284
+ "event": { "type": "string", "minLength": 1 },
285
+ "evidenceRoot": { "$ref": "#/$defs/root" },
286
+ "recordedAt": { "type": "string", "format": "date-time" },
287
+ "requestRoot": { "$ref": "#/$defs/root" },
288
+ "transitionRoot": { "$ref": "#/$defs/root" }
289
+ }
290
+ }
291
+ }
292
+ }
@@ -22,6 +22,7 @@
22
22
  "schemas/release-tail-provider-bindings-v1.schema.json",
23
23
  "schemas/kfd-agent-hub-adoption.schema.json",
24
24
  "schemas/kfd-product-gate-input-v1.schema.json",
25
+ "schemas/dev-delivery-authority-v2.schema.json",
25
26
  "buildchain-contract.json",
26
27
  "kfd-upstream-aggregate.json",
27
28
  "kfd-claims.json",
@@ -10,6 +10,7 @@
10
10
  "schemas/release-tail-provider-bindings-v1.schema.json",
11
11
  "schemas/kfd-agent-hub-adoption.schema.json",
12
12
  "schemas/kfd-product-gate-input-v1.schema.json",
13
+ "schemas/dev-delivery-authority-v2.schema.json",
13
14
  "kfd-support.json",
14
15
  "artifact-evidence.json",
15
16
  "product-mechanism.json",
@@ -47,6 +48,7 @@
47
48
  "schemas/release-tail-provider-bindings-v1.schema.json",
48
49
  "schemas/kfd-agent-hub-adoption.schema.json",
49
50
  "schemas/kfd-product-gate-input-v1.schema.json",
51
+ "schemas/dev-delivery-authority-v2.schema.json",
50
52
  "buildchain-contract.json",
51
53
  "kfd-claims.json",
52
54
  "product-mechanism.json",
@@ -4,7 +4,7 @@
4
4
  "product": {
5
5
  "name": "Buildchain",
6
6
  "package": "@kungfu-tech/buildchain",
7
- "version": "3.0.9-alpha.1",
7
+ "version": "3.0.9-alpha.11",
8
8
  "repository": "https://github.com/kungfu-systems/buildchain"
9
9
  },
10
10
  "majorLine": "v3",
@@ -64,6 +64,60 @@
64
64
  "cutRoot": "sha256:4fd5ae0cdad01a09e91bbb3f183ac595510a8f25baf7ba865de7633a7eacb3eb",
65
65
  "proofRoot": "sha256:36c85ba487be1528e85776d2bc5f766a971d42ac238aec30071945f7d60d9fc5"
66
66
  },
67
+ {
68
+ "schema": "kungfu.buildchain.compatibility-proof/v1",
69
+ "proofId": "build-channel-router-d40dd0-to-30549a",
70
+ "predicate": "compatible-breaking-digest",
71
+ "direction": "source-to-target",
72
+ "operation": "accept-contract-lock",
73
+ "source": {
74
+ "contract": "kungfu-buildchain-runtime-contract-world",
75
+ "surfaceId": "controller:build-channel-router",
76
+ "surfaceKind": "controller",
77
+ "breakingDigest": "sha256:d40dd05d7e07473d4b2dc1b62fbb0ed6f06449b4d3a7c44a2e8014313e3c0273"
78
+ },
79
+ "target": {
80
+ "contract": "kungfu-buildchain-runtime-contract-world",
81
+ "surfaceId": "controller:build-channel-router",
82
+ "surfaceKind": "controller",
83
+ "breakingDigest": "sha256:30549aa26cd1e1dd81f10fe3529d3c6e3f8438a6efa0100c47ebae4d2f3d71df"
84
+ },
85
+ "scope": {
86
+ "contract": "kungfu-buildchain-runtime-contract-world",
87
+ "surfaceId": "controller:build-channel-router",
88
+ "surfaceKind": "controller",
89
+ "majorLines": [
90
+ "v2",
91
+ "v3"
92
+ ],
93
+ "operation": "accept-contract-lock"
94
+ },
95
+ "scopeRoot": "sha256:dc381e72e9cad86293254f8542394f1abc27b4b0f07c122cb4cad5f73b381ccb",
96
+ "evidence": {
97
+ "kind": "protected-pull-request-contract-acceptance",
98
+ "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2549",
99
+ "protectedBase": "dev/v3/v3.0",
100
+ "sourceCommit": "0d87b772265066f5e6157e1ba6a2ba1021fb5225",
101
+ "mergeCommit": "34fad9d3a94c450d75c0d06fd6ed00470c992ff7",
102
+ "contractDigest": "sha256:2584ba36ab54cd5e9bab9e34dfc08d87a55dc57de1be7641492bf7ceb1366350",
103
+ "compatibilityDigest": "sha256:80f65cc191b1f771475184edf8a1bf9c10dd69bb58060aa09313d0e1e57f508a"
104
+ },
105
+ "evidenceRoot": "sha256:e449bdc62832fd18b33d93833207d70e843f066a85aae8b0c717234194ecb497",
106
+ "authority": {
107
+ "kind": "protected-base-contract-authority",
108
+ "repository": "kungfu-systems/buildchain",
109
+ "protectedBase": "dev/v3/v3.0"
110
+ },
111
+ "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
112
+ "cut": {
113
+ "kind": "protected-git-cut",
114
+ "repository": "kungfu-systems/buildchain",
115
+ "protectedBase": "dev/v3/v3.0",
116
+ "commit": "34fad9d3a94c450d75c0d06fd6ed00470c992ff7"
117
+ },
118
+ "cutRoot": "sha256:3b83f02e22ca82fc4a099b5f8c4353fffb1423b0a5cba41860b1ba86f7c8cbb7",
119
+ "proofRoot": "sha256:36d2e188f43385d6191116393aa81ea025ccf61e21a1c5eae1d56be92a203b31"
120
+ },
67
121
  {
68
122
  "schema": "kungfu.buildchain.compatibility-proof/v1",
69
123
  "proofId": "build-lifecycle-307459-to-6b8d38",
@@ -324,7 +378,7 @@
324
378
  "retryable GitHub fallback fetches use a bounded attempt budget before exact source SHA and tree verification"
325
379
  ],
326
380
  "breakingDigest": "sha256:dfbedd543ae0c067982b5c8c02d98dd2f7f7df88752be97fb330da6b0ba30faa",
327
- "auditDigest": "sha256:67b2f3ff8f37e91f9b0534a557973b6a3f2c06234f9564c9e1effaee1eeaa70a"
381
+ "auditDigest": "sha256:e1a045509343ab4e907cae61d40b931b8cd5e126a85296669ab2bd49f7bc8ad3"
328
382
  },
329
383
  {
330
384
  "contractVersion": 1,
@@ -462,7 +516,7 @@
462
516
  "GitHub Release passport and evidence publication is delegated to promote-buildchain-ref after the semver release transaction completes"
463
517
  ],
464
518
  "breakingDigest": "sha256:e60642aa298933d2c103284794921a6c340a50aa91ee528b06e58892a2a006bf",
465
- "auditDigest": "sha256:e35e3aeac79be887ae67b630af274d08581920e686f5124c65fc7ac288519721",
519
+ "auditDigest": "sha256:9c9efb4fa3f6c75c25ebd6100ceaf4a4e3aea2e8f72d5eea118972a3d042731a",
466
520
  "compatibleBreakingDigests": [
467
521
  "sha256:acd401cfc46450115a3763fd4b679d85f185e8757ebd52510d6262e1533df4cf"
468
522
  ],
@@ -521,7 +575,7 @@
521
575
  "resume-from-candidate-run is fail-closed and uses a fresh caller event instead of rerunning a frozen startup graph"
522
576
  ],
523
577
  "breakingDigest": "sha256:9db8dd07152855d03ff30f9c571438593c689d3e8139fa45431d000f548242f5",
524
- "auditDigest": "sha256:d58c6ca74c7ac1defb9dcc35e26b6dde097b82f6aaea4e2c71e90ea15887158e",
578
+ "auditDigest": "sha256:55e0ed7099c1b7ff3f1abaeadc85168080975c633f2001d4148bf1045cf7ce36",
525
579
  "compatibleBreakingDigests": [
526
580
  "sha256:aa30f22e3af0a89841310bdbdc900844dd95a66974db173fa140a71bbd7e82c0"
527
581
  ],
@@ -751,7 +805,7 @@
751
805
  "semver GitHub Releases are created or updated only after transaction completion, with prerelease/latest metadata bound to the authoritative publication channel and tag syntax retained as the fallback for ordinary callers"
752
806
  ],
753
807
  "breakingDigest": "sha256:6147c0a8d5c36bfaa6021871574e1fc28192a3f1b8cfdae4d24ef3059ac1ebda",
754
- "auditDigest": "sha256:e7386c747ff6282ef128903bcac9f6dcd47581d19ac4f0bafc589c2037e0467c",
808
+ "auditDigest": "sha256:5a392996406f1327e7a5f40462663d40953a24e30c33377d7d2854a18ca4d1c1",
755
809
  "compatibleBreakingDigests": [
756
810
  "sha256:a59f0910e6df842e7699139472e5dd69ac2fdd7f7213bf2cb346d1d622556874"
757
811
  ],
@@ -872,7 +926,7 @@
872
926
  "release-state SHA is recorded as a durable audit entrance"
873
927
  ],
874
928
  "breakingDigest": "sha256:b627e1b2ece9b6049517a942c5139e342e6077cdd3d8962d61cef8481b1f70ad",
875
- "auditDigest": "sha256:3118f2de735ad98e4d9d70d3b62f905709292c0c7989175f9332bef3ac58aacd"
929
+ "auditDigest": "sha256:00d5f388d6abc7aaa730bbbda644cdba0e83cff783558102bf143d68bd7429df"
876
930
  },
877
931
  {
878
932
  "contractVersion": 1,
@@ -921,7 +975,7 @@
921
975
  "prose-only public claims downgrade the release trust passport audit"
922
976
  ],
923
977
  "breakingDigest": "sha256:f0b636eb925ddbf45ff1a8872454ab7b4dd98857cac12bb75217830130e62a16",
924
- "auditDigest": "sha256:3118f2de735ad98e4d9d70d3b62f905709292c0c7989175f9332bef3ac58aacd"
978
+ "auditDigest": "sha256:00d5f388d6abc7aaa730bbbda644cdba0e83cff783558102bf143d68bd7429df"
925
979
  },
926
980
  {
927
981
  "contractVersion": 1,
@@ -981,7 +1035,7 @@
981
1035
  "README badge block checks and writes are generated from machine-readable repository facts"
982
1036
  ],
983
1037
  "breakingDigest": "sha256:90a73892b2d6c214048448d5f45df75639bdf7b7e8fefd9c596e04b087407bcc",
984
- "auditDigest": "sha256:af168b438d4c4f0638d4309e33c1e9be5b379deeae182f896da4b0f08e5efbad"
1038
+ "auditDigest": "sha256:856e79ff668877e0b366850bb0e37fa193206f8dc5a51091bc74dd1c2240f8e2"
985
1039
  },
986
1040
  {
987
1041
  "contractVersion": 1,
@@ -1071,7 +1125,7 @@
1071
1125
  "manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
1072
1126
  ],
1073
1127
  "breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
1074
- "auditDigest": "sha256:9cc08ebef0a0ed159e8b14505e86d67e5ab441e5ca0f786b617d5b6bf2bba432"
1128
+ "auditDigest": "sha256:330c596b9c13183b221cb48300980abda288b53db5ddb60707b24e3dd6840f9e"
1075
1129
  },
1076
1130
  {
1077
1131
  "contractVersion": 1,
@@ -1093,7 +1147,7 @@
1093
1147
  "agents can discover supported Node APIs without importing internal file paths"
1094
1148
  ],
1095
1149
  "breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
1096
- "auditDigest": "sha256:d552e8c900dda0f25e5a43a0eafababe861512ee5ad9c7bb5e709c6e85b6dc51"
1150
+ "auditDigest": "sha256:99a04734bd8964dc6d82bb16b37a7d560ffe56188bf3fd53f2614df23fc175fe"
1097
1151
  },
1098
1152
  {
1099
1153
  "contractVersion": 1,
@@ -1144,7 +1198,7 @@
1144
1198
  "controllerDescriptor": {
1145
1199
  "contract": "buildchain.controller-descriptor/v1",
1146
1200
  "digest": "sha256:373723a73d188194d389dee04c394d3b79cb0c016a370f2f5d0f60979a02ed48",
1147
- "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
1201
+ "registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
1148
1202
  "inputClassifications": {
1149
1203
  "buildchain-ref": {
1150
1204
  "classification": "included",
@@ -1327,7 +1381,7 @@
1327
1381
  "controllerDescriptor": {
1328
1382
  "contract": "buildchain.controller-descriptor/v1",
1329
1383
  "digest": "sha256:f986e79241d831f027a0955a35c918f946989176c76555e20f156ed31fb10c94",
1330
- "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
1384
+ "registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
1331
1385
  "inputClassifications": {
1332
1386
  "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
1333
1387
  "classification": "redacted",
@@ -1718,7 +1772,7 @@
1718
1772
  "missing receipts are non-qualifying and must not be represented as a successful controller run"
1719
1773
  ],
1720
1774
  "breakingDigest": "sha256:6b8d38e92b2c67b5bc83fae0a3fd95bfa47582fbc176e6cdeebe7630a57534cb",
1721
- "auditDigest": "sha256:67b2f3ff8f37e91f9b0534a557973b6a3f2c06234f9564c9e1effaee1eeaa70a",
1775
+ "auditDigest": "sha256:e1a045509343ab4e907cae61d40b931b8cd5e126a85296669ab2bd49f7bc8ad3",
1722
1776
  "compatibleBreakingDigests": [
1723
1777
  "sha256:30745921541e9b0f70475bb2178c2559f6aef248f6680670ccd44d8c5a69a6b1",
1724
1778
  "sha256:e264a79f9f399038c2fcfd21e4168c68c2e1485ee5c651c02242a02b622ac2be"
@@ -1865,7 +1919,7 @@
1865
1919
  "controllerDescriptor": {
1866
1920
  "contract": "buildchain.controller-descriptor/v1",
1867
1921
  "digest": "sha256:6dfa79003f0c92e336c56f07f45f57cc5572921bdb46e432fd809fb19ee823bb",
1868
- "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
1922
+ "registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
1869
1923
  "inputClassifications": {
1870
1924
  "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
1871
1925
  "classification": "redacted",
@@ -2268,7 +2322,13 @@
2268
2322
  "missing receipts are non-qualifying and must not be represented as a successful controller run"
2269
2323
  ],
2270
2324
  "breakingDigest": "sha256:30549aa26cd1e1dd81f10fe3529d3c6e3f8438a6efa0100c47ebae4d2f3d71df",
2271
- "auditDigest": "sha256:789173c7e5508c7e7947a59fbcb3b5bebc3783ed47695d7f5abb468a9b5d4d7d"
2325
+ "auditDigest": "sha256:789173c7e5508c7e7947a59fbcb3b5bebc3783ed47695d7f5abb468a9b5d4d7d",
2326
+ "compatibleBreakingDigests": [
2327
+ "sha256:d40dd05d7e07473d4b2dc1b62fbb0ed6f06449b4d3a7c44a2e8014313e3c0273"
2328
+ ],
2329
+ "compatibilityProofRoots": [
2330
+ "sha256:36d2e188f43385d6191116393aa81ea025ccf61e21a1c5eae1d56be92a203b31"
2331
+ ]
2272
2332
  },
2273
2333
  {
2274
2334
  "contractVersion": 1,
@@ -2338,7 +2398,7 @@
2338
2398
  "controllerDescriptor": {
2339
2399
  "contract": "buildchain.controller-descriptor/v1",
2340
2400
  "digest": "sha256:8e42956a2c10fa109500e72b97994f06b3d22a19cc63a46f66410b2e81706e9d",
2341
- "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
2401
+ "registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
2342
2402
  "inputClassifications": {
2343
2403
  "artifact-name": {
2344
2404
  "classification": "included",
@@ -2555,7 +2615,7 @@
2555
2615
  "controllerDescriptor": {
2556
2616
  "contract": "buildchain.controller-descriptor/v1",
2557
2617
  "digest": "sha256:c5274b37f04d0054559fdc8698c51bd0f0d8ae470baf163e9caa7699aa970575",
2558
- "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
2618
+ "registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
2559
2619
  "inputClassifications": {
2560
2620
  "artifact-path": {
2561
2621
  "classification": "digest-only",
@@ -2799,7 +2859,7 @@
2799
2859
  "controllerDescriptor": {
2800
2860
  "contract": "buildchain.controller-descriptor/v1",
2801
2861
  "digest": "sha256:6b132790b9798e8a5dfbe095701d8e024c160a08bc7c4bd477ee79feef7a9cfd",
2802
- "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
2862
+ "registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
2803
2863
  "inputClassifications": {
2804
2864
  "artifact-name": {
2805
2865
  "classification": "included",
@@ -2981,7 +3041,7 @@
2981
3041
  "controllerDescriptor": {
2982
3042
  "contract": "buildchain.controller-descriptor/v1",
2983
3043
  "digest": "sha256:6d71409659fbf8543c7e520b0c493d8afe86bdf60286b860bb917f0041ebc173",
2984
- "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
3044
+ "registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
2985
3045
  "inputClassifications": {
2986
3046
  "artifact-name": {
2987
3047
  "classification": "included",
@@ -3274,6 +3334,7 @@
3274
3334
  "release-candidate-workflow-file",
3275
3335
  "release-candidate-workflow-name",
3276
3336
  "release-passport",
3337
+ "release-passport-adopter-delivery-json",
3277
3338
  "release-passport-attachment-command",
3278
3339
  "release-passport-buildchain-self-kfd",
3279
3340
  "release-passport-evidence-command",
@@ -3313,8 +3374,8 @@
3313
3374
  ],
3314
3375
  "controllerDescriptor": {
3315
3376
  "contract": "buildchain.controller-descriptor/v1",
3316
- "digest": "sha256:4d44d0f729fbc112aa309ed22e74b9f1401b0470b99c1e6061c278babe5e4b8b",
3317
- "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
3377
+ "digest": "sha256:127dc1d80dca63e2bb1fb268d2183d0a31ea2a67eb81bce48dae916f698c02be",
3378
+ "registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
3318
3379
  "inputClassifications": {
3319
3380
  "BUILDCHAIN_ISSUE_APP_ID": {
3320
3381
  "classification": "redacted",
@@ -3656,6 +3717,10 @@
3656
3717
  "classification": "included",
3657
3718
  "source": "workflow-call-input"
3658
3719
  },
3720
+ "release-passport-adopter-delivery-json": {
3721
+ "classification": "digest-only",
3722
+ "source": "workflow-call-input"
3723
+ },
3659
3724
  "release-passport-attachment-command": {
3660
3725
  "classification": "digest-only",
3661
3726
  "source": "workflow-call-input"
@@ -3809,7 +3874,7 @@
3809
3874
  "missing receipts are non-qualifying and must not be represented as a successful controller run"
3810
3875
  ],
3811
3876
  "breakingDigest": "sha256:015d8de793adbd4c539416be7d7512e18cc92097e629b0203fa06d2c183e98bd",
3812
- "auditDigest": "sha256:d58c6ca74c7ac1defb9dcc35e26b6dde097b82f6aaea4e2c71e90ea15887158e"
3877
+ "auditDigest": "sha256:55e0ed7099c1b7ff3f1abaeadc85168080975c633f2001d4148bf1045cf7ce36"
3813
3878
  },
3814
3879
  {
3815
3880
  "contractVersion": 1,
@@ -3874,7 +3939,7 @@
3874
3939
  "controllerDescriptor": {
3875
3940
  "contract": "buildchain.controller-descriptor/v1",
3876
3941
  "digest": "sha256:660579b5561e8e33375a3f3b1fefbb8a5bd8241a55ba43374d786fb772c24a12",
3877
- "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
3942
+ "registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
3878
3943
  "inputClassifications": {
3879
3944
  "agent-work-context-json": {
3880
3945
  "classification": "digest-only",
@@ -4009,7 +4074,7 @@
4009
4074
  "controllerDescriptor": {
4010
4075
  "contract": "buildchain.controller-descriptor/v1",
4011
4076
  "digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555",
4012
- "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
4077
+ "registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
4013
4078
  "inputClassifications": {}
4014
4079
  },
4015
4080
  "guarantees": [
@@ -4022,7 +4087,7 @@
4022
4087
  "auditDigest": "sha256:d07482cd66413a2fb3781a3b76f960b8151b6231841799647fe237820de2fde6"
4023
4088
  }
4024
4089
  ],
4025
- "compatibilityProofRegistryRoot": "sha256:f11b62ce69cfb0ff25b66861474b99a75148192c0474c9d1cc2067e347b05abd",
4026
- "compatibilityDigest": "sha256:80f65cc191b1f771475184edf8a1bf9c10dd69bb58060aa09313d0e1e57f508a",
4027
- "contractDigest": "sha256:7eb7ef3258675f34dfa2b2616d349f88e845d7da05e471217c3c7789bb2ed635"
4090
+ "compatibilityProofRegistryRoot": "sha256:aec674d174461493e3493b3fe3164d62745a9ce18cb6a560f94bd99f2759eb53",
4091
+ "compatibilityDigest": "sha256:eb2fafb181b33002f81102a966f0a801ab1798101446635703ab6acfea51d9aa",
4092
+ "contractDigest": "sha256:5f9568c1440778e7f72e4300aba40196001d85c3ba12748e4266b5a5577333db"
4028
4093
  }