@kungfu-tech/buildchain 3.0.9-alpha.10 → 3.0.9-alpha.11

package/docs/node-api-reference.md

@@ -138,7 +138,7 @@ Target: `./packages/core/index.js`. Public symbols: 608.
 | `collectCompilerCacheDiagnostics` | function: function collectCompilerCacheDiagnostics({ cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {}) | { cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCompilerCacheDiagnostics } from "@kungfu-tech/buildchain";` | `packages/core/diagnostics.js:578` |
 | `collectGitDiagnostics` | function: function collectGitDiagnostics({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitDiagnostics } from "@kungfu-tech/buildchain";` | `packages/core/diagnostics.js:949` |
 | `collectGitHubHousekeeperInventory` | function: async function collectGitHubHousekeeperInventory({ client, repository, targetBranch, observedAt, staleDays = DEFAULT_STALE_DAYS, policy = {}, }) | { client, repository, targetBranch, observedAt, staleDays = DEFAULT_STALE_DAYS, policy = {}, } | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { collectGitHubHousekeeperInventory } from "@kungfu-tech/buildchain";` | `packages/core/engineering-housekeeper-github.js:246` |
-| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", kfdArtifactSearchRoots = [], releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {}) | { cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", kfdArtifactSearchRoots = [], releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitHubReleasePassport } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:1507` |
+| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", kfdArtifactSearchRoots = [], releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", adopterDeliveryJson = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {}) | { cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", kfdArtifactSearchRoots = [], releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", adopterDeliveryJson = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitHubReleasePassport } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:1507` |
 | `collectGitSourceFacts` | function: function collectGitSourceFacts({ cwd = process.cwd(), root = "." } = {}) | { cwd = process.cwd(), root = "." } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitSourceFacts } from "@kungfu-tech/buildchain";` | `packages/core/build-facts.js:146` |
 | `collectHomebrewTapFacts` | function: async function collectHomebrewTapFacts({ cwd = process.cwd(), packageName = "buildchain", releasePassport = "", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = "", } = {}) | { cwd = process.cwd(), packageName = "buildchain", releasePassport = "", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = "", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectHomebrewTapFacts } from "@kungfu-tech/buildchain";` | `packages/core/homebrew.js:223` |
 | `collectKfdStatus` | function: function collectKfdStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdStatus } from "@kungfu-tech/buildchain";` | `packages/core/kfd.js:902` |
@@ -234,7 +234,7 @@ Target: `./packages/core/index.js`. Public symbols: 608.
 | `createReleaseActivationReceiptSet` | function: function createReleaseActivationReceiptSet({ transaction, receipts = [], } = {}) | { transaction, receipts = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationReceiptSet } from "@kungfu-tech/buildchain";` | `packages/core/release-activation-transaction.js:311` |
 | `createReleaseActivationTransaction` | function: function createReleaseActivationTransaction({ transactionId, mode = "shadow", bindings, owners, } = {}) | { transactionId, mode = "shadow", bindings, owners, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationTransaction } from "@kungfu-tech/buildchain";` | `packages/core/release-activation-transaction.js:103` |
 | `createReleaseCandidatePassport` | function: function createReleaseCandidatePassport({ repository = "", pullRequest = {}, targetChannel = "", version = "", sourceHeadSha = "", baseSha = "", mergeRefSha = "", sourceTreeHash = "", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {}) | { repository = "", pullRequest = {}, targetChannel = "", version = "", sourceHeadSha = "", baseSha = "", mergeRefSha = "", sourceTreeHash = "", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCandidatePassport } from "@kungfu-tech/buildchain";` | `packages/core/release-candidate.js:310` |
-| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2682` |
+| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2689` |
 | `createReleasePassport` | function: function createReleasePassport({ cwd = process.cwd(), repository = "", tag = "", sourceSha = "", line = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", productMechanismPath = "product-mechanism.json", artifactEvidencePath = "artifact-evidence.json", impactPath = "impact.json", agentIndexPath = "agent-index.json", checkReportPath = "check-report.json", publishEvidencePath = "", transactionStatePath = "", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, adopterDelivery = undefined, kfdAdopter = undefined, kfdAdopterManifestEvidencePath = "", kfdAdopterGateEvidencePath = "", kfdSupport = undefined, kfdSupportEvidencePath = "", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = "", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = "", } = {}) | { cwd = process.cwd(), repository = "", tag = "", sourceSha = "", line = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", productMechanismPath = "product-mechanism.json", artifactEvidencePath = "artifact-evidence.json", impactPath = "impact.json", agentIndexPath = "agent-index.json", checkReportPath = "check-report.json", publishEvidencePath = "", transactionStatePath = "", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, adopterDelivery = undefined, kfdAdopter = undefined, kfdAdopterManifestEvidencePath = "", kfdAdopterGateEvidencePath = "", kfdSupport = undefined, kfdSupportEvidencePath = "", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = "", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { createReleasePassport } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:1204` |
 | `createReleasePassportCheckManifest` | function: function createReleasePassportCheckManifest({ standards = kfdStandards } = {}) | { standards = kfdStandards } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePassportCheckManifest } from "@kungfu-tech/buildchain";` | `packages/core/release-passport-contract.js:162` |
 | `createReleasePropagationLock` | function: function createReleasePropagationLock({ graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {}) | { graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationLock } from "@kungfu-tech/buildchain";` | `packages/core/release-propagation.js:199` |
@@ -293,7 +293,7 @@ Target: `./packages/core/index.js`. Public symbols: 608.
 | `explainArtifactPassport` | function: async function explainArtifactPassport(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainArtifactPassport } from "@kungfu-tech/buildchain";` | `packages/core/artifact-passport.js:827` |
 | `explainKfdAgentHub` | function: function explainKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = "" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = "" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainKfdAgentHub } from "@kungfu-tech/buildchain";` | `packages/core/kfd-agent-hub.js:470` |
 | `explainReleaseLineDryRun` | function: function explainReleaseLineDryRun({ cwd = process.cwd(), targetRef, sha = "", sourceRef = "", tags, publishTransaction = false, publishCommand = "", } = {}) | { cwd = process.cwd(), targetRef, sha = "", sourceRef = "", tags, publishTransaction = false, publishCommand = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { explainReleaseLineDryRun } from "@kungfu-tech/buildchain";` | `packages/core/release-line-dry-run.js:127` |
-| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = "human" } = {}) | { passportLocation, forAudience = "human" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2836` |
+| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = "human" } = {}) | { passportLocation, forAudience = "human" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2843` |
 | `FAMILY_RELEASE_EVIDENCE_CONTRACT` | constant: const FAMILY_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { FAMILY_RELEASE_EVIDENCE_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-candidate.js:5` |
 | `finalizeBuildchainContractWorld` | function: function finalizeBuildchainContractWorld(contractWorld) | contractWorld | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { finalizeBuildchainContractWorld } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-contract.js:801` |
 | `formatCandidateTimelineReport` | function: function formatCandidateTimelineReport(timeline) | timeline | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatCandidateTimelineReport } from "@kungfu-tech/buildchain";` | `packages/core/candidate-timeline.js:438` |
@@ -377,7 +377,7 @@ Target: `./packages/core/index.js`. Public symbols: 608.
 | `listKfdSchemas` | function: function listKfdSchemas({ standard = "" } = {}) | { standard = "" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdSchemas } from "@kungfu-tech/buildchain";` | `packages/core/kfd.js:492` |
 | `loadBuildchainConfig` | function: function loadBuildchainConfig(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadBuildchainConfig } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-config.js:183` |
 | `loadConfiguredAnchorManifest` | function: function loadConfiguredAnchorManifest(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadConfiguredAnchorManifest } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-config.js:1569` |
-| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2865` |
+| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2872` |
 | `MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT` | constant: const MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-propagation-pickup.js:16` |
 | `MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT` | constant: const MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-propagation-pickup.js:18` |
 | `markStableCandidatePromoted` | function: function markStableCandidatePromoted(ledgerInput, versionInput, { stableTag = "", stableSha = "", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { stableTag = "", stableSha = "", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { markStableCandidatePromoted } from "@kungfu-tech/buildchain";` | `packages/core/stable-candidate-ledger.js:229` |
@@ -458,7 +458,7 @@ Target: `./packages/core/index.js`. Public symbols: 608.
 | `readBuildchainContractWorld` | function: function readBuildchainContractWorld(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractWorld } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-contract.js:879` |
 | `readBuildchainLogEvents` | function: function readBuildchainLogEvents(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readBuildchainLogEvents } from "@kungfu-tech/buildchain";` | `packages/core/logging.js:75` |
 | `readDiagnosticsArtifact` | function: function readDiagnosticsArtifact(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readDiagnosticsArtifact } from "@kungfu-tech/buildchain";` | `packages/core/diagnostics.js:1473` |
-| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2752` |
+| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2759` |
 | `readKfd2ProductClaimsRegistry` | function: function readKfd2ProductClaimsRegistry({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfd2ProductClaimsRegistry } from "@kungfu-tech/buildchain";` | `packages/core/kfd2-product-claims.js:137` |
 | `readKfd3SurfaceRegistry` | function: function readKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = "" } = {}) | { cwd = process.cwd(), registryPath = "" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readKfd3SurfaceRegistry } from "@kungfu-tech/buildchain";` | `packages/core/kfd3-surface-register.js:455` |
 | `readKfdSchema` | function: function readKfdSchema({ standard, schema = "" } = {}) | { standard, schema = "" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfdSchema } from "@kungfu-tech/buildchain";` | `packages/core/kfd.js:520` |
@@ -591,7 +591,7 @@ Target: `./packages/core/index.js`. Public symbols: 608.
 | `validateKfd3CollaborationInterfaceReleaseGateEvidence` | function: function validateKfd3CollaborationInterfaceReleaseGateEvidence(section, { metadata = resolveKfd3Metadata() } = {}) | section, { metadata = resolveKfd3Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd3CollaborationInterfaceReleaseGateEvidence } from "@kungfu-tech/buildchain";` | `packages/core/kfd-gate.js:1500` |
 | `validateKfdAdopterReleaseBinding` | function: function validateKfdAdopterReleaseBinding(binding, { manifest, manifestGate, legacyProjection, expectedAdopterId = "kungfu-systems/buildchain", expectedSourceRepository = "", expectedSourceSha = "", } = {}) | binding, { manifest, manifestGate, legacyProjection, expectedAdopterId = "kungfu-systems/buildchain", expectedSourceRepository = "", expectedSourceSha = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdAdopterReleaseBinding } from "@kungfu-tech/buildchain";` | `packages/core/artifact-verification-envelope.js:467` |
 | `validateKfdProductGateResult` | function: function validateKfdProductGateResult(result, { expectedSourceSha = "", checkedAt = new Date().toISOString(), } = {}) | result, { expectedSourceSha = "", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdProductGateResult } from "@kungfu-tech/buildchain";` | `packages/core/kfd-product-gates.js:519` |
-| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2877` |
+| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2884` |
 | `validatePackageManagerContract` | function: function validatePackageManagerContract({ cwd = process.cwd(), expectedManager = "" } = {}) | { cwd = process.cwd(), expectedManager = "" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validatePackageManagerContract } from "@kungfu-tech/buildchain";` | `packages/core/package-manager.js:18` |
 | `validatePublishEvidence` | function: function validatePublishEvidence({ evidence, version, channel, sourceSha, releaseSha, targetRef = "", releaseMaterialSha = releaseSha, publishToolingSha = "", requiredArtifacts = [], } = {}) | { evidence, version, channel, sourceSha, releaseSha, targetRef = "", releaseMaterialSha = releaseSha, publishToolingSha = "", requiredArtifacts = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validatePublishEvidence } from "@kungfu-tech/buildchain";` | `packages/core/publish-transaction.js:674` |
 | `validateReleaseActivationReceiptSet` | function: function validateReleaseActivationReceiptSet(receiptSet, { allowShadow = true } = {}) | receiptSet, { allowShadow = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationReceiptSet } from "@kungfu-tech/buildchain";` | `packages/core/release-activation-transaction.js:376` |
@@ -617,7 +617,7 @@ Target: `./packages/core/index.js`. Public symbols: 608.
 | `verifyPublicationReproducibility` | function: function verifyPublicationReproducibility({ cwd = process.cwd(), sourceSha = "", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = "", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {}) | { cwd = process.cwd(), sourceSha = "", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = "", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { verifyPublicationReproducibility } from "@kungfu-tech/buildchain";` | `packages/core/publication-reproducibility.js:869` |
 | `verifyPublicationSealedBundle` | function: function verifyPublicationSealedBundle({ bundleRoot, manifest } = {}) | { bundleRoot, manifest } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationSealedBundle } from "@kungfu-tech/buildchain";` | `packages/core/publication-sealed-bundle.js:133` |
 | `verifyReleaseCandidateRecovery` | function: function verifyReleaseCandidateRecovery({ candidateRepository, targetRepository, expectedRunId, expectedWorkflowFile, expectedWorkflowName, channel, targetRef, targetSha, targetRefSha = targetSha, targetTree, expectedSourceTree = "", expectedCandidateRoot = "", expectedRuntimeSha, expectedTransactionId = "", existingTransaction = undefined, run, workflow, pullRequest, ancestry, passport, buildSummary, controllerReceipts = [], platformManifests = [], platformManifestEvidence = [], productPayloadManifests = [], artifacts = [], publicationVersion = "", currentToolingSha, recoveryRunId = "", createdAt = new Date().toISOString(), } = {}) | { candidateRepository, targetRepository, expectedRunId, expectedWorkflowFile, expectedWorkflowName, channel, targetRef, targetSha, targetRefSha = targetSha, targetTree, expectedSourceTree = "", expectedCandidateRoot = "", expectedRuntimeSha, expectedTransactionId = "", existingTransaction = undefined, run, workflow, pullRequest, ancestry, passport, buildSummary, controllerReceipts = [], platformManifests = [], platformManifestEvidence = [], productPayloadManifests = [], artifacts = [], publicationVersion = "", currentToolingSha, recoveryRunId = "", createdAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleaseCandidateRecovery } from "@kungfu-tech/buildchain";` | `packages/core/release-candidate-recovery.js:398` |
-| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2801` |
+| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2808` |
 | `verifyReleasePropagationWork` | function: function verifyReleasePropagationWork(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyReleasePropagationWork } from "@kungfu-tech/buildchain";` | `packages/core/release-propagation-work.js:486` |
 | `WEB_SURFACE_PRODUCTION_DECISION_CONTRACT` | constant: const WEB_SURFACE_PRODUCTION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PRODUCTION_DECISION_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/web-surface-publication-candidate.js:7` |
 | `WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT` | constant: const WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/web-surface-publication-candidate.js:5` |
@@ -799,7 +799,7 @@ Target: `./packages/core/index.js`. Public symbols: 608.
 | `collectCompilerCacheDiagnostics` | function: function collectCompilerCacheDiagnostics({ cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {}) | { cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCompilerCacheDiagnostics } from "@kungfu-tech/buildchain/core";` | `packages/core/diagnostics.js:578` |
 | `collectGitDiagnostics` | function: function collectGitDiagnostics({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitDiagnostics } from "@kungfu-tech/buildchain/core";` | `packages/core/diagnostics.js:949` |
 | `collectGitHubHousekeeperInventory` | function: async function collectGitHubHousekeeperInventory({ client, repository, targetBranch, observedAt, staleDays = DEFAULT_STALE_DAYS, policy = {}, }) | { client, repository, targetBranch, observedAt, staleDays = DEFAULT_STALE_DAYS, policy = {}, } | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { collectGitHubHousekeeperInventory } from "@kungfu-tech/buildchain/core";` | `packages/core/engineering-housekeeper-github.js:246` |
-| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", kfdArtifactSearchRoots = [], releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {}) | { cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", kfdArtifactSearchRoots = [], releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitHubReleasePassport } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:1507` |
+| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", kfdArtifactSearchRoots = [], releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", adopterDeliveryJson = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {}) | { cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", kfdArtifactSearchRoots = [], releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", adopterDeliveryJson = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitHubReleasePassport } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:1507` |
 | `collectGitSourceFacts` | function: function collectGitSourceFacts({ cwd = process.cwd(), root = "." } = {}) | { cwd = process.cwd(), root = "." } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitSourceFacts } from "@kungfu-tech/buildchain/core";` | `packages/core/build-facts.js:146` |
 | `collectHomebrewTapFacts` | function: async function collectHomebrewTapFacts({ cwd = process.cwd(), packageName = "buildchain", releasePassport = "", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = "", } = {}) | { cwd = process.cwd(), packageName = "buildchain", releasePassport = "", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = "", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectHomebrewTapFacts } from "@kungfu-tech/buildchain/core";` | `packages/core/homebrew.js:223` |
 | `collectKfdStatus` | function: function collectKfdStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdStatus } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd.js:902` |
@@ -895,7 +895,7 @@ Target: `./packages/core/index.js`. Public symbols: 608.
 | `createReleaseActivationReceiptSet` | function: function createReleaseActivationReceiptSet({ transaction, receipts = [], } = {}) | { transaction, receipts = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationReceiptSet } from "@kungfu-tech/buildchain/core";` | `packages/core/release-activation-transaction.js:311` |
 | `createReleaseActivationTransaction` | function: function createReleaseActivationTransaction({ transactionId, mode = "shadow", bindings, owners, } = {}) | { transactionId, mode = "shadow", bindings, owners, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationTransaction } from "@kungfu-tech/buildchain/core";` | `packages/core/release-activation-transaction.js:103` |
 | `createReleaseCandidatePassport` | function: function createReleaseCandidatePassport({ repository = "", pullRequest = {}, targetChannel = "", version = "", sourceHeadSha = "", baseSha = "", mergeRefSha = "", sourceTreeHash = "", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {}) | { repository = "", pullRequest = {}, targetChannel = "", version = "", sourceHeadSha = "", baseSha = "", mergeRefSha = "", sourceTreeHash = "", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCandidatePassport } from "@kungfu-tech/buildchain/core";` | `packages/core/release-candidate.js:310` |
-| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2682` |
+| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2689` |
 | `createReleasePassport` | function: function createReleasePassport({ cwd = process.cwd(), repository = "", tag = "", sourceSha = "", line = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", productMechanismPath = "product-mechanism.json", artifactEvidencePath = "artifact-evidence.json", impactPath = "impact.json", agentIndexPath = "agent-index.json", checkReportPath = "check-report.json", publishEvidencePath = "", transactionStatePath = "", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, adopterDelivery = undefined, kfdAdopter = undefined, kfdAdopterManifestEvidencePath = "", kfdAdopterGateEvidencePath = "", kfdSupport = undefined, kfdSupportEvidencePath = "", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = "", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = "", } = {}) | { cwd = process.cwd(), repository = "", tag = "", sourceSha = "", line = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", productMechanismPath = "product-mechanism.json", artifactEvidencePath = "artifact-evidence.json", impactPath = "impact.json", agentIndexPath = "agent-index.json", checkReportPath = "check-report.json", publishEvidencePath = "", transactionStatePath = "", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, adopterDelivery = undefined, kfdAdopter = undefined, kfdAdopterManifestEvidencePath = "", kfdAdopterGateEvidencePath = "", kfdSupport = undefined, kfdSupportEvidencePath = "", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = "", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { createReleasePassport } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:1204` |
 | `createReleasePassportCheckManifest` | function: function createReleasePassportCheckManifest({ standards = kfdStandards } = {}) | { standards = kfdStandards } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePassportCheckManifest } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport-contract.js:162` |
 | `createReleasePropagationLock` | function: function createReleasePropagationLock({ graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {}) | { graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationLock } from "@kungfu-tech/buildchain/core";` | `packages/core/release-propagation.js:199` |
@@ -954,7 +954,7 @@ Target: `./packages/core/index.js`. Public symbols: 608.
 | `explainArtifactPassport` | function: async function explainArtifactPassport(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainArtifactPassport } from "@kungfu-tech/buildchain/core";` | `packages/core/artifact-passport.js:827` |
 | `explainKfdAgentHub` | function: function explainKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = "" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = "" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainKfdAgentHub } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd-agent-hub.js:470` |
 | `explainReleaseLineDryRun` | function: function explainReleaseLineDryRun({ cwd = process.cwd(), targetRef, sha = "", sourceRef = "", tags, publishTransaction = false, publishCommand = "", } = {}) | { cwd = process.cwd(), targetRef, sha = "", sourceRef = "", tags, publishTransaction = false, publishCommand = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { explainReleaseLineDryRun } from "@kungfu-tech/buildchain/core";` | `packages/core/release-line-dry-run.js:127` |
-| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = "human" } = {}) | { passportLocation, forAudience = "human" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2836` |
+| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = "human" } = {}) | { passportLocation, forAudience = "human" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2843` |
 | `FAMILY_RELEASE_EVIDENCE_CONTRACT` | constant: const FAMILY_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { FAMILY_RELEASE_EVIDENCE_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-candidate.js:5` |
 | `finalizeBuildchainContractWorld` | function: function finalizeBuildchainContractWorld(contractWorld) | contractWorld | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { finalizeBuildchainContractWorld } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-contract.js:801` |
 | `formatCandidateTimelineReport` | function: function formatCandidateTimelineReport(timeline) | timeline | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatCandidateTimelineReport } from "@kungfu-tech/buildchain/core";` | `packages/core/candidate-timeline.js:438` |
@@ -1038,7 +1038,7 @@ Target: `./packages/core/index.js`. Public symbols: 608.
 | `listKfdSchemas` | function: function listKfdSchemas({ standard = "" } = {}) | { standard = "" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdSchemas } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd.js:492` |
 | `loadBuildchainConfig` | function: function loadBuildchainConfig(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadBuildchainConfig } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-config.js:183` |
 | `loadConfiguredAnchorManifest` | function: function loadConfiguredAnchorManifest(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadConfiguredAnchorManifest } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-config.js:1569` |
-| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2865` |
+| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2872` |
 | `MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT` | constant: const MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-propagation-pickup.js:16` |
 | `MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT` | constant: const MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-propagation-pickup.js:18` |
 | `markStableCandidatePromoted` | function: function markStableCandidatePromoted(ledgerInput, versionInput, { stableTag = "", stableSha = "", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { stableTag = "", stableSha = "", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { markStableCandidatePromoted } from "@kungfu-tech/buildchain/core";` | `packages/core/stable-candidate-ledger.js:229` |
@@ -1119,7 +1119,7 @@ Target: `./packages/core/index.js`. Public symbols: 608.
 | `readBuildchainContractWorld` | function: function readBuildchainContractWorld(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractWorld } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-contract.js:879` |
 | `readBuildchainLogEvents` | function: function readBuildchainLogEvents(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readBuildchainLogEvents } from "@kungfu-tech/buildchain/core";` | `packages/core/logging.js:75` |
 | `readDiagnosticsArtifact` | function: function readDiagnosticsArtifact(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readDiagnosticsArtifact } from "@kungfu-tech/buildchain/core";` | `packages/core/diagnostics.js:1473` |
-| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2752` |
+| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2759` |
 | `readKfd2ProductClaimsRegistry` | function: function readKfd2ProductClaimsRegistry({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfd2ProductClaimsRegistry } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd2-product-claims.js:137` |
 | `readKfd3SurfaceRegistry` | function: function readKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = "" } = {}) | { cwd = process.cwd(), registryPath = "" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readKfd3SurfaceRegistry } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd3-surface-register.js:455` |
 | `readKfdSchema` | function: function readKfdSchema({ standard, schema = "" } = {}) | { standard, schema = "" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfdSchema } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd.js:520` |
@@ -1252,7 +1252,7 @@ Target: `./packages/core/index.js`. Public symbols: 608.
 | `validateKfd3CollaborationInterfaceReleaseGateEvidence` | function: function validateKfd3CollaborationInterfaceReleaseGateEvidence(section, { metadata = resolveKfd3Metadata() } = {}) | section, { metadata = resolveKfd3Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd3CollaborationInterfaceReleaseGateEvidence } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd-gate.js:1500` |
 | `validateKfdAdopterReleaseBinding` | function: function validateKfdAdopterReleaseBinding(binding, { manifest, manifestGate, legacyProjection, expectedAdopterId = "kungfu-systems/buildchain", expectedSourceRepository = "", expectedSourceSha = "", } = {}) | binding, { manifest, manifestGate, legacyProjection, expectedAdopterId = "kungfu-systems/buildchain", expectedSourceRepository = "", expectedSourceSha = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdAdopterReleaseBinding } from "@kungfu-tech/buildchain/core";` | `packages/core/artifact-verification-envelope.js:467` |
 | `validateKfdProductGateResult` | function: function validateKfdProductGateResult(result, { expectedSourceSha = "", checkedAt = new Date().toISOString(), } = {}) | result, { expectedSourceSha = "", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdProductGateResult } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd-product-gates.js:519` |
-| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2877` |
+| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2884` |
 | `validatePackageManagerContract` | function: function validatePackageManagerContract({ cwd = process.cwd(), expectedManager = "" } = {}) | { cwd = process.cwd(), expectedManager = "" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validatePackageManagerContract } from "@kungfu-tech/buildchain/core";` | `packages/core/package-manager.js:18` |
 | `validatePublishEvidence` | function: function validatePublishEvidence({ evidence, version, channel, sourceSha, releaseSha, targetRef = "", releaseMaterialSha = releaseSha, publishToolingSha = "", requiredArtifacts = [], } = {}) | { evidence, version, channel, sourceSha, releaseSha, targetRef = "", releaseMaterialSha = releaseSha, publishToolingSha = "", requiredArtifacts = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validatePublishEvidence } from "@kungfu-tech/buildchain/core";` | `packages/core/publish-transaction.js:674` |
 | `validateReleaseActivationReceiptSet` | function: function validateReleaseActivationReceiptSet(receiptSet, { allowShadow = true } = {}) | receiptSet, { allowShadow = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationReceiptSet } from "@kungfu-tech/buildchain/core";` | `packages/core/release-activation-transaction.js:376` |
@@ -1278,7 +1278,7 @@ Target: `./packages/core/index.js`. Public symbols: 608.
 | `verifyPublicationReproducibility` | function: function verifyPublicationReproducibility({ cwd = process.cwd(), sourceSha = "", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = "", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {}) | { cwd = process.cwd(), sourceSha = "", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = "", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { verifyPublicationReproducibility } from "@kungfu-tech/buildchain/core";` | `packages/core/publication-reproducibility.js:869` |
 | `verifyPublicationSealedBundle` | function: function verifyPublicationSealedBundle({ bundleRoot, manifest } = {}) | { bundleRoot, manifest } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationSealedBundle } from "@kungfu-tech/buildchain/core";` | `packages/core/publication-sealed-bundle.js:133` |
 | `verifyReleaseCandidateRecovery` | function: function verifyReleaseCandidateRecovery({ candidateRepository, targetRepository, expectedRunId, expectedWorkflowFile, expectedWorkflowName, channel, targetRef, targetSha, targetRefSha = targetSha, targetTree, expectedSourceTree = "", expectedCandidateRoot = "", expectedRuntimeSha, expectedTransactionId = "", existingTransaction = undefined, run, workflow, pullRequest, ancestry, passport, buildSummary, controllerReceipts = [], platformManifests = [], platformManifestEvidence = [], productPayloadManifests = [], artifacts = [], publicationVersion = "", currentToolingSha, recoveryRunId = "", createdAt = new Date().toISOString(), } = {}) | { candidateRepository, targetRepository, expectedRunId, expectedWorkflowFile, expectedWorkflowName, channel, targetRef, targetSha, targetRefSha = targetSha, targetTree, expectedSourceTree = "", expectedCandidateRoot = "", expectedRuntimeSha, expectedTransactionId = "", existingTransaction = undefined, run, workflow, pullRequest, ancestry, passport, buildSummary, controllerReceipts = [], platformManifests = [], platformManifestEvidence = [], productPayloadManifests = [], artifacts = [], publicationVersion = "", currentToolingSha, recoveryRunId = "", createdAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleaseCandidateRecovery } from "@kungfu-tech/buildchain/core";` | `packages/core/release-candidate-recovery.js:398` |
-| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2801` |
+| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2808` |
 | `verifyReleasePropagationWork` | function: function verifyReleasePropagationWork(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyReleasePropagationWork } from "@kungfu-tech/buildchain/core";` | `packages/core/release-propagation-work.js:486` |
 | `WEB_SURFACE_PRODUCTION_DECISION_CONTRACT` | constant: const WEB_SURFACE_PRODUCTION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PRODUCTION_DECISION_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/web-surface-publication-candidate.js:7` |
 | `WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT` | constant: const WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/web-surface-publication-candidate.js:5` |
@@ -1568,7 +1568,7 @@ Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 44.
 
 | Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |
 | --- | --- | --- | --- | --- | --- | --- | --- |
-| `cancelQueuedDevDeliveryCandidate` | function: function cancelQueuedDevDeliveryCandidate(queueInput, input, options) | queueInput, input, options | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cancelQueuedDevDeliveryCandidate } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:641` |
+| `cancelQueuedDevDeliveryCandidate` | function: function cancelQueuedDevDeliveryCandidate(queueInput, input, options) | queueInput, input, options | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cancelQueuedDevDeliveryCandidate } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:642` |
 | `classifyDevDeliveryDelta` | function: function classifyDevDeliveryDelta({ proof, current = {} } = {}) | { proof, current = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyDevDeliveryDelta } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:75` |
 | `closeDevDeliveryWarrant` | function: function closeDevDeliveryWarrant(queueInput, warrant, { outcome, evidenceRoot, reason = "", now = new Date().toISOString() } = {}) | queueInput, warrant, { outcome, evidenceRoot, reason = "", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { closeDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:586` |
 | `createDevDeliveryQueue` | function: function createDevDeliveryQueue({ repository: repositoryInput, protectedBase: protectedBaseInput, policy = {}, now = new Date().toISOString() } = {}) | { repository: repositoryInput, protectedBase: protectedBaseInput, policy = {}, now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:120` |
@@ -1597,14 +1597,14 @@ Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 44.
 | `NATIVE_PROOF_REUSE_DECISION_SCHEMA` | constant: const NATIVE_PROOF_REUSE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { NATIVE_PROOF_REUSE_DECISION_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:16` |
 | `NATIVE_QUALIFICATION_PROOF_SCHEMA` | constant: const NATIVE_QUALIFICATION_PROOF_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { NATIVE_QUALIFICATION_PROOF_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:12` |
 | `normalizeDevDeliveryQueue` | function: function normalizeDevDeliveryQueue(input, expected = {}) | input, expected = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:135` |
-| `observeDevDeliveryQueue` | function: function observeDevDeliveryQueue(queueInput, { now = new Date().toISOString() } = {}) | queueInput, { now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { observeDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:651` |
+| `observeDevDeliveryQueue` | function: function observeDevDeliveryQueue(queueInput, { now = new Date().toISOString() } = {}) | queueInput, { now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { observeDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:652` |
 | `PROJECT_CUT_REPLAY_PROOF_SCHEMA` | constant: const PROJECT_CUT_REPLAY_PROOF_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { PROJECT_CUT_REPLAY_PROOF_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:4` |
 | `qualifyDevDeliveryWarrant` | function: function qualifyDevDeliveryWarrant(queueInput, warrant, options) | queueInput, warrant, options | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { qualifyDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:545` |
 | `rankDevDeliveryCandidates` | function: function rankDevDeliveryCandidates(queueInput, { now = new Date().toISOString() } = {}) | queueInput, { now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { rankDevDeliveryCandidates } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:339` |
 | `recoverExpiredDevDeliveryWarrant` | function: function recoverExpiredDevDeliveryWarrant(queueInput, { now = new Date().toISOString() } = {}) | queueInput, { now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { recoverExpiredDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:548` |
 | `RELEASE_BLOCKER_PRIORITY_CLAIM_SCHEMA` | constant: const RELEASE_BLOCKER_PRIORITY_CLAIM_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_BLOCKER_PRIORITY_CLAIM_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/release-blocker-priority.js:15` |
 | `selectDevDeliveryWarrant` | function: function selectDevDeliveryWarrant(queueInput, { now = new Date().toISOString(), leaseSeconds } = {}) | queueInput, { now = new Date().toISOString(), leaseSeconds } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { selectDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:363` |
-| `settleDevDeliveryTerminalEvent` | constant: const settleDevDeliveryTerminalEvent | none | value | Import does not declare a throw contract. | none-on-import | `import { settleDevDeliveryTerminalEvent } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:644` |
+| `settleDevDeliveryTerminalEvent` | constant: const settleDevDeliveryTerminalEvent | none | value | Import does not declare a throw contract. | none-on-import | `import { settleDevDeliveryTerminalEvent } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:645` |
 | `SOURCE_QUALIFICATION_PROOF_SCHEMA` | constant: const SOURCE_QUALIFICATION_PROOF_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { SOURCE_QUALIFICATION_PROOF_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:3` |
 | `submitDevDeliveryCandidate` | function: function submitDevDeliveryCandidate(queueInput, input, { now = new Date().toISOString() } = {}) | queueInput, input, { now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { submitDevDeliveryCandidate } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:245` |
 | `verifyIntegrationDeliveryProof` | function: function verifyIntegrationDeliveryProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyIntegrationDeliveryProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:228` |
@@ -1754,6 +1754,27 @@ Target: `./packages/core/buildchain-delivery-bootstrap.js`. Public symbols: 2.
 | `BUILDCHAIN_DELIVERY_BOOTSTRAP_CONTRACT` | constant: const BUILDCHAIN_DELIVERY_BOOTSTRAP_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DELIVERY_BOOTSTRAP_CONTRACT } from "@kungfu-tech/buildchain/buildchain-delivery-bootstrap";` | `packages/core/buildchain-delivery-bootstrap.js:4` |
 | `qualifyBuildchainDeliveryInfrastructureBootstrap` | function: function qualifyBuildchainDeliveryInfrastructureBootstrap({ authority, candidate, gateResult, warrant, transitionEvidence, } = {}) | { authority, candidate, gateResult, warrant, transitionEvidence, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { qualifyBuildchainDeliveryInfrastructureBootstrap } from "@kungfu-tech/buildchain/buildchain-delivery-bootstrap";` | `packages/core/buildchain-delivery-bootstrap.js:122` |
 
+## `@kungfu-tech/buildchain/buildchain-delivery-self-dogfood`
+
+Target: `./packages/core/buildchain-delivery-self-dogfood.js`. Public symbols: 4.
+
+| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |
+| --- | --- | --- | --- | --- | --- | --- | --- |
+| `BUILDCHAIN_DELIVERY_SELF_DOGFOOD_CONTRACT` | constant: const BUILDCHAIN_DELIVERY_SELF_DOGFOOD_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DELIVERY_SELF_DOGFOOD_CONTRACT } from "@kungfu-tech/buildchain/buildchain-delivery-self-dogfood";` | `packages/core/buildchain-delivery-self-dogfood.js:6` |
+| `createBuildchainDeliveryInfrastructureSelfDogfood` | function: function createBuildchainDeliveryInfrastructureSelfDogfood({ authorityPackage, kfdPackage, authority, candidate, instanceId, adopterManifest, source, artifact, release, evidence = [], warrant, transitionEvidence, verifiedAt, maxAgeSeconds, } = {}, authorityRuntime) | { authorityPackage, kfdPackage, authority, candidate, instanceId, adopterManifest, source, artifact, release, evidence = [], warrant, transitionEvidence, verifiedAt, maxAgeSeconds, } = {}, authorityRuntime | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainDeliveryInfrastructureSelfDogfood } from "@kungfu-tech/buildchain/buildchain-delivery-self-dogfood";` | `packages/core/buildchain-delivery-self-dogfood.js:151` |
+| `createPublishedBuildchainDeliveryInfrastructureCandidateSelfDogfood` | function: async function createPublishedBuildchainDeliveryInfrastructureCandidateSelfDogfood({ authorityPackages, authoritySourceCommit, candidatePackage, warrantCandidate, source, release, verifiedAt, maxAgeSeconds = 86400, } = {}) | { authorityPackages, authoritySourceCommit, candidatePackage, warrantCandidate, source, release, verifiedAt, maxAgeSeconds = 86400, } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublishedBuildchainDeliveryInfrastructureCandidateSelfDogfood } from "@kungfu-tech/buildchain/buildchain-delivery-self-dogfood";` | `packages/core/buildchain-delivery-self-dogfood.js:306` |
+| `createPublishedBuildchainDeliveryInfrastructureSelfDogfood` | function: async function createPublishedBuildchainDeliveryInfrastructureSelfDogfood({ authorityPackages, selfDogfood, } = {}) | { authorityPackages, selfDogfood, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublishedBuildchainDeliveryInfrastructureSelfDogfood } from "@kungfu-tech/buildchain/buildchain-delivery-self-dogfood";` | `packages/core/buildchain-delivery-self-dogfood.js:283` |
+
+## `@kungfu-tech/buildchain/published-delivery-authority`
+
+Target: `./packages/core/published-delivery-authority.js`. Public symbols: 3.
+
+| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |
+| --- | --- | --- | --- | --- | --- | --- | --- |
+| `loadPublishedBuildchainDeliveryAuthority` | function: async function loadPublishedBuildchainDeliveryAuthority({ buildchain, kfd, } = {}) | { buildchain, kfd, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { loadPublishedBuildchainDeliveryAuthority } from "@kungfu-tech/buildchain/published-delivery-authority";` | `packages/core/published-delivery-authority.js:178` |
+| `PUBLISHED_DELIVERY_AUTHORITY_CONTRACT` | constant: const PUBLISHED_DELIVERY_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLISHED_DELIVERY_AUTHORITY_CONTRACT } from "@kungfu-tech/buildchain/published-delivery-authority";` | `packages/core/published-delivery-authority.js:12` |
+| `withPublishedBuildchainDeliveryAuthority` | function: async function withPublishedBuildchainDeliveryAuthority(declarations, operation) | declarations, operation | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { withPublishedBuildchainDeliveryAuthority } from "@kungfu-tech/buildchain/published-delivery-authority";` | `packages/core/published-delivery-authority.js:233` |
+
 ## `@kungfu-tech/buildchain/legacy-kfd-adopter-driver`
 
 Target: `./packages/core/legacy-kfd-adopter-driver.js`. Public symbols: 4.
@@ -2316,27 +2337,27 @@ Target: `./packages/core/release-passport.js`. Public symbols: 23.
 | --- | --- | --- | --- | --- | --- | --- | --- |
 | `AGENT_INDEX_CONTRACT` | constant: const AGENT_INDEX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { AGENT_INDEX_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:44` |
 | `ARTIFACT_EVIDENCE_CONTRACT` | constant: const ARTIFACT_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_EVIDENCE_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:42` |
-| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", kfdArtifactSearchRoots = [], releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {}) | { cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", kfdArtifactSearchRoots = [], releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitHubReleasePassport } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:1507` |
+| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", kfdArtifactSearchRoots = [], releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", adopterDeliveryJson = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {}) | { cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", kfdArtifactSearchRoots = [], releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", adopterDeliveryJson = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitHubReleasePassport } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:1507` |
 | `createArtifactEvidence` | function: function createArtifactEvidence({ assets = [], repository = "", tag = "", sourceSha = "", workflow = {}, adopterDelivery = undefined, kfdAdopter = undefined } = {}) | { assets = [], repository = "", tag = "", sourceSha = "", workflow = {}, adopterDelivery = undefined, kfdAdopter = undefined } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createArtifactEvidence } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:1167` |
 | `createInvariantPassportGate` | function: function createInvariantPassportGate(passportMetas = []) | passportMetas = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createInvariantPassportGate } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:240` |
-| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2682` |
+| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2689` |
 | `createReleasePassport` | function: function createReleasePassport({ cwd = process.cwd(), repository = "", tag = "", sourceSha = "", line = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", productMechanismPath = "product-mechanism.json", artifactEvidencePath = "artifact-evidence.json", impactPath = "impact.json", agentIndexPath = "agent-index.json", checkReportPath = "check-report.json", publishEvidencePath = "", transactionStatePath = "", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, adopterDelivery = undefined, kfdAdopter = undefined, kfdAdopterManifestEvidencePath = "", kfdAdopterGateEvidencePath = "", kfdSupport = undefined, kfdSupportEvidencePath = "", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = "", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = "", } = {}) | { cwd = process.cwd(), repository = "", tag = "", sourceSha = "", line = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", productMechanismPath = "product-mechanism.json", artifactEvidencePath = "artifact-evidence.json", impactPath = "impact.json", agentIndexPath = "agent-index.json", checkReportPath = "check-report.json", publishEvidencePath = "", transactionStatePath = "", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, adopterDelivery = undefined, kfdAdopter = undefined, kfdAdopterManifestEvidencePath = "", kfdAdopterGateEvidencePath = "", kfdSupport = undefined, kfdSupportEvidencePath = "", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = "", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { createReleasePassport } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:1204` |
-| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = "human" } = {}) | { passportLocation, forAudience = "human" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2836` |
+| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = "human" } = {}) | { passportLocation, forAudience = "human" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2843` |
 | `IMPACT_LEDGER_CONTRACT` | constant: const IMPACT_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { IMPACT_LEDGER_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:43` |
 | `INVARIANT_PASSPORT_GATE_CONTRACT` | constant: const INVARIANT_PASSPORT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { INVARIANT_PASSPORT_GATE_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:49` |
 | `KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT` | constant: const KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:50` |
 | `KFD2_RELEASE_TRUST_PASSPORT_CONTRACT` | constant: const KFD2_RELEASE_TRUST_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_RELEASE_TRUST_PASSPORT_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:47` |
 | `KFD2_TRUST_PROOF_CONTRACT` | constant: const KFD2_TRUST_PROOF_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_TRUST_PROOF_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:48` |
-| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2865` |
+| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2872` |
 | `PRODUCT_MECHANISM_CONTRACT` | constant: const PRODUCT_MECHANISM_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PRODUCT_MECHANISM_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:45` |
-| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2752` |
+| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2759` |
 | `RELEASE_CHECK_REPORT_CONTRACT` | value: RELEASE_CHECK_REPORT_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_CHECK_REPORT_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:1` |
 | `RELEASE_EVIDENCE_ATTACHMENT_CONTRACT` | constant: const RELEASE_EVIDENCE_ATTACHMENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:46` |
 | `RELEASE_PASSPORT_CONTRACT` | value: RELEASE_PASSPORT_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_PASSPORT_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:1` |
 | `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write, subprocess | `import { sha256File } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:255` |
 | `sha256Text` | function: function sha256Text(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Text } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:150` |
-| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2877` |
-| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2801` |
+| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2884` |
+| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2808` |
 
 ## `@kungfu-tech/buildchain/release-passport-contract`
 

package/docs/release-passport.md

@@ -404,6 +404,16 @@ inspect `buildchain.release.json` and know whether the released package
 actually exposes no more and no less than the declared collaboration interface,
 instead of trusting docs or release notes.
 
+### Adopter delivery binding
+
+Pass a completed protocol-neutral adopter delivery gate result as JSON or a
+path with `--adopter-delivery-json`. The collector validates the rooted gate
+closure and writes the same non-qualifying `adopterDelivery` binding into both
+`buildchain.release.json` and `artifact-evidence.json`. Release verification
+fails closed if the product identity, artifact root, gate root, or either copy
+is substituted. Reusable promotion callers can forward the same value with
+`release-passport-adopter-delivery-json`.
+
 ### KFD support projection
 
 Pass the standard full-cut declaration with `--kfd-adopter-manifest-json`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kungfu-tech/buildchain",
-  "version": "3.0.9-alpha.10",
+  "version": "3.0.9-alpha.11",
   "private": false,
   "description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
   "repository": "https://github.com/kungfu-systems/buildchain",
@@ -39,6 +39,8 @@
     "./kfd-adopter-category-driver": "./packages/core/kfd-adopter-category-driver.js",
     "./buildchain-delivery-infrastructure": "./packages/core/buildchain-delivery-infrastructure.js",
     "./buildchain-delivery-bootstrap": "./packages/core/buildchain-delivery-bootstrap.js",
+    "./buildchain-delivery-self-dogfood": "./packages/core/buildchain-delivery-self-dogfood.js",
+    "./published-delivery-authority": "./packages/core/published-delivery-authority.js",
     "./legacy-kfd-adopter-driver": "./packages/core/legacy-kfd-adopter-driver.js",
     "./adopter-delivery-passport": "./packages/core/adopter-delivery-passport.js",
     "./adopter-delivery-vectors": "./packages/core/adopter-delivery-vectors.js",