@kungfu-tech/buildchain 3.0.9-alpha.10 → 3.0.9-alpha.12

package/actions/promote-buildchain-ref/README.md

@@ -403,6 +403,10 @@ product-owned `release-passport-kfd-3-artifact-verify-command` such as
 `kungfu agent verify --json`. Buildchain compares declared shipped public
 surfaces with artifact-exposed public surfaces and writes the result under the
 KFD-provided `kfd-3` passport section.
+Set `release-passport-adopter-delivery-json` to a passed protocol-neutral
+adopter delivery gate result. Buildchain roots the exact product, artifact,
+driver, profile, and semantic report closure into both the Release Passport and
+artifact evidence; either-copy substitution fails release verification.
 Set `release-passport-kfd-adopter-manifest-json` to the standard full-cut
 adopter manifest and `release-passport-kfd-product-gate-jsons` to the
 newline-separated KFD-4, KFD-5, and KFD-7 gate results. Buildchain binds the

package/bin/internal/trust-release-release-handlers.mjs

@@ -242,6 +242,7 @@ async function handleCollectCommand({ args, runScript, packageVersion }) {
       "kfd-3-artifact-verify-cmd",
       "",
     ),
+    adopterDeliveryJson: readFlag(collectArgs, "adopter-delivery-json", ""),
     kfdAdopterManifestJson: readFlag(
       collectArgs,
       "kfd-adopter-manifest-json",

package/dist/site/buildchain-contract.json

@@ -4,7 +4,7 @@
   "product": {
     "name": "Buildchain",
     "package": "@kungfu-tech/buildchain",
-    "version": "3.0.9-alpha.10",
+    "version": "3.0.9-alpha.12",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "majorLine": "v3",
@@ -118,6 +118,60 @@
       "cutRoot": "sha256:3b83f02e22ca82fc4a099b5f8c4353fffb1423b0a5cba41860b1ba86f7c8cbb7",
       "proofRoot": "sha256:36d2e188f43385d6191116393aa81ea025ccf61e21a1c5eae1d56be92a203b31"
     },
+    {
+      "schema": "kungfu.buildchain.compatibility-proof/v1",
+      "proofId": "web-surface-da569f-to-27f0cb",
+      "predicate": "compatible-breaking-digest",
+      "direction": "source-to-target",
+      "operation": "accept-contract-lock",
+      "source": {
+        "contract": "kungfu-buildchain-runtime-contract-world",
+        "surfaceId": "web-surface",
+        "surfaceKind": "workflow",
+        "breakingDigest": "sha256:da569f90374e878948e3d5160ed9929338ce0572473ca8ee54867b0fe1aaeace"
+      },
+      "target": {
+        "contract": "kungfu-buildchain-runtime-contract-world",
+        "surfaceId": "web-surface",
+        "surfaceKind": "workflow",
+        "breakingDigest": "sha256:27f0cb9c7d97288850d215be8696b323471c41fd1cdf3a2ff3ebf21f62541960"
+      },
+      "scope": {
+        "contract": "kungfu-buildchain-runtime-contract-world",
+        "surfaceId": "web-surface",
+        "surfaceKind": "workflow",
+        "majorLines": [
+          "v2",
+          "v3"
+        ],
+        "operation": "accept-contract-lock"
+      },
+      "scopeRoot": "sha256:0288a1bc232405047630819733074df11cfd86596c0fc95afd4403948399d679",
+      "evidence": {
+        "kind": "protected-pull-request-contract-acceptance",
+        "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2089",
+        "protectedBase": "dev/v3/v3.0",
+        "sourceCommit": "1a6cb874bc6f1611f3eef607e711d3532798e9e7",
+        "mergeCommit": "71a75f21159b994241ec7cb2c50f7a150c5d440b",
+        "contractDigest": "sha256:7c2a7c132a2b2722f70f148b81048147047d4d2c46cf33f7cd2dc158aec092e0",
+        "compatibilityDigest": "sha256:61af7d0871220bc0909008bdc571905ad500cccf853e7841bc5d462a34b2d436"
+      },
+      "evidenceRoot": "sha256:8e0184e579c42a66851992a79d54b6f8add9eea776a589bc3004fe0e2177b15c",
+      "authority": {
+        "kind": "protected-base-contract-authority",
+        "repository": "kungfu-systems/buildchain",
+        "protectedBase": "dev/v3/v3.0"
+      },
+      "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
+      "cut": {
+        "kind": "protected-git-cut",
+        "repository": "kungfu-systems/buildchain",
+        "protectedBase": "dev/v3/v3.0",
+        "commit": "71a75f21159b994241ec7cb2c50f7a150c5d440b"
+      },
+      "cutRoot": "sha256:4a758c2d730bf99a28ae37057e865e9f0cb8a516200b5a0c29851ca414efa556",
+      "proofRoot": "sha256:3ba66a1e8f8d00ddd45f3f448bcccb15469cbd31f5765d36f61e4cfe7fd0dd41"
+    },
     {
       "schema": "kungfu.buildchain.compatibility-proof/v1",
       "proofId": "build-lifecycle-307459-to-6b8d38",
@@ -172,6 +226,60 @@
       "cutRoot": "sha256:4fd5ae0cdad01a09e91bbb3f183ac595510a8f25baf7ba865de7633a7eacb3eb",
       "proofRoot": "sha256:3bd1c54198b78a462d2005ac66c139ad4d6f1962925c8f0971b4d0a222f1a7c5"
     },
+    {
+      "schema": "kungfu.buildchain.compatibility-proof/v1",
+      "proofId": "release-propagation-d7a1f1-to-b873ce",
+      "predicate": "compatible-breaking-digest",
+      "direction": "source-to-target",
+      "operation": "accept-contract-lock",
+      "source": {
+        "contract": "kungfu-buildchain-runtime-contract-world",
+        "surfaceId": "controller:release-propagation",
+        "surfaceKind": "controller",
+        "breakingDigest": "sha256:d7a1f15990ce8bd13149474888232c7d4451dd2a49bebf4d4ce1336695da430e"
+      },
+      "target": {
+        "contract": "kungfu-buildchain-runtime-contract-world",
+        "surfaceId": "controller:release-propagation",
+        "surfaceKind": "controller",
+        "breakingDigest": "sha256:b873ceb65618972bea615afcb9c616c138ce834b3246ec7237ef87c1618d68bd"
+      },
+      "scope": {
+        "contract": "kungfu-buildchain-runtime-contract-world",
+        "surfaceId": "controller:release-propagation",
+        "surfaceKind": "controller",
+        "majorLines": [
+          "v2",
+          "v3"
+        ],
+        "operation": "accept-contract-lock"
+      },
+      "scopeRoot": "sha256:0ff862e406419464370403011c3bf90d291d85a2c08ae8179d6b8d540c9e70f2",
+      "evidence": {
+        "kind": "protected-pull-request-contract-acceptance",
+        "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2143",
+        "protectedBase": "dev/v3/v3.0",
+        "sourceCommit": "b63aff4dd63ad6017b8f48e1c690f595a9c832a2",
+        "mergeCommit": "487ee09ca4832ffd15607db00060df4c0839fbae",
+        "contractDigest": "sha256:00c37f8a663387831ba4d066056d0b21d4f3c5f3ea5b0cf84456af332cf8d87e",
+        "compatibilityDigest": "sha256:3bbcaf835844260ed98414d3bd176667245d12131e13fc748e4c2fae12399691"
+      },
+      "evidenceRoot": "sha256:943908ff0b680d7ae84c68dc90412e4e6292323531b5e449ce4d1433061258c8",
+      "authority": {
+        "kind": "protected-base-contract-authority",
+        "repository": "kungfu-systems/buildchain",
+        "protectedBase": "dev/v3/v3.0"
+      },
+      "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
+      "cut": {
+        "kind": "protected-git-cut",
+        "repository": "kungfu-systems/buildchain",
+        "protectedBase": "dev/v3/v3.0",
+        "commit": "487ee09ca4832ffd15607db00060df4c0839fbae"
+      },
+      "cutRoot": "sha256:8bff86e6995cb22ff77eb3ea5a62b843734e9b9688694dc3d6e3e8847fd88499",
+      "proofRoot": "sha256:8b98ff903d3abd8d9a9b6a0b250efd8fdf6fd5d4127aa4d0d0c4a5b3db87f353"
+    },
     {
       "schema": "kungfu.buildchain.compatibility-proof/v1",
       "proofId": "build-lifecycle-e264a7-to-6b8d38",
@@ -226,6 +334,60 @@
       "cutRoot": "sha256:4fd5ae0cdad01a09e91bbb3f183ac595510a8f25baf7ba865de7633a7eacb3eb",
       "proofRoot": "sha256:9024634cef43a9d695fa224d26be9aeb6370d3c981b003ece3b659dde8e73713"
     },
+    {
+      "schema": "kungfu.buildchain.compatibility-proof/v1",
+      "proofId": "reusable-build-a6a353-to-dfbedd",
+      "predicate": "compatible-breaking-digest",
+      "direction": "source-to-target",
+      "operation": "accept-contract-lock",
+      "source": {
+        "contract": "kungfu-buildchain-runtime-contract-world",
+        "surfaceId": "reusable-build",
+        "surfaceKind": "workflow",
+        "breakingDigest": "sha256:a6a35370d6b0d0f46e1b2712dcc01961fe53c2febde95409a27a485c10a36650"
+      },
+      "target": {
+        "contract": "kungfu-buildchain-runtime-contract-world",
+        "surfaceId": "reusable-build",
+        "surfaceKind": "workflow",
+        "breakingDigest": "sha256:dfbedd543ae0c067982b5c8c02d98dd2f7f7df88752be97fb330da6b0ba30faa"
+      },
+      "scope": {
+        "contract": "kungfu-buildchain-runtime-contract-world",
+        "surfaceId": "reusable-build",
+        "surfaceKind": "workflow",
+        "majorLines": [
+          "v2",
+          "v3"
+        ],
+        "operation": "accept-contract-lock"
+      },
+      "scopeRoot": "sha256:b50ae93f868501c8acfc93d93dc2deec916a4fcf12c19f959fbb3893cc11bb6c",
+      "evidence": {
+        "kind": "protected-pull-request-contract-acceptance",
+        "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2089",
+        "protectedBase": "dev/v3/v3.0",
+        "sourceCommit": "1a6cb874bc6f1611f3eef607e711d3532798e9e7",
+        "mergeCommit": "71a75f21159b994241ec7cb2c50f7a150c5d440b",
+        "contractDigest": "sha256:7c2a7c132a2b2722f70f148b81048147047d4d2c46cf33f7cd2dc158aec092e0",
+        "compatibilityDigest": "sha256:61af7d0871220bc0909008bdc571905ad500cccf853e7841bc5d462a34b2d436"
+      },
+      "evidenceRoot": "sha256:8e0184e579c42a66851992a79d54b6f8add9eea776a589bc3004fe0e2177b15c",
+      "authority": {
+        "kind": "protected-base-contract-authority",
+        "repository": "kungfu-systems/buildchain",
+        "protectedBase": "dev/v3/v3.0"
+      },
+      "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
+      "cut": {
+        "kind": "protected-git-cut",
+        "repository": "kungfu-systems/buildchain",
+        "protectedBase": "dev/v3/v3.0",
+        "commit": "71a75f21159b994241ec7cb2c50f7a150c5d440b"
+      },
+      "cutRoot": "sha256:4a758c2d730bf99a28ae37057e865e9f0cb8a516200b5a0c29851ca414efa556",
+      "proofRoot": "sha256:b99176f414752ffb276f4add6183aa81eeb480598368ca4f57804f024212d0f5"
+    },
     {
       "schema": "kungfu.buildchain.compatibility-proof/v1",
       "proofId": "release-candidate-promote-acd401-to-e60642",
@@ -378,7 +540,13 @@
         "retryable GitHub fallback fetches use a bounded attempt budget before exact source SHA and tree verification"
       ],
       "breakingDigest": "sha256:dfbedd543ae0c067982b5c8c02d98dd2f7f7df88752be97fb330da6b0ba30faa",
-      "auditDigest": "sha256:e1a045509343ab4e907cae61d40b931b8cd5e126a85296669ab2bd49f7bc8ad3"
+      "auditDigest": "sha256:e1a045509343ab4e907cae61d40b931b8cd5e126a85296669ab2bd49f7bc8ad3",
+      "compatibleBreakingDigests": [
+        "sha256:a6a35370d6b0d0f46e1b2712dcc01961fe53c2febde95409a27a485c10a36650"
+      ],
+      "compatibilityProofRoots": [
+        "sha256:b99176f414752ffb276f4add6183aa81eeb480598368ca4f57804f024212d0f5"
+      ]
     },
     {
       "contractVersion": 1,
@@ -516,7 +684,7 @@
         "GitHub Release passport and evidence publication is delegated to promote-buildchain-ref after the semver release transaction completes"
       ],
       "breakingDigest": "sha256:e60642aa298933d2c103284794921a6c340a50aa91ee528b06e58892a2a006bf",
-      "auditDigest": "sha256:e35e3aeac79be887ae67b630af274d08581920e686f5124c65fc7ac288519721",
+      "auditDigest": "sha256:9c9efb4fa3f6c75c25ebd6100ceaf4a4e3aea2e8f72d5eea118972a3d042731a",
       "compatibleBreakingDigests": [
         "sha256:acd401cfc46450115a3763fd4b679d85f185e8757ebd52510d6262e1533df4cf"
       ],
@@ -575,7 +743,7 @@
         "resume-from-candidate-run is fail-closed and uses a fresh caller event instead of rerunning a frozen startup graph"
       ],
       "breakingDigest": "sha256:9db8dd07152855d03ff30f9c571438593c689d3e8139fa45431d000f548242f5",
-      "auditDigest": "sha256:27d35c025cbf7b5c87af599da3559657fc1aea88cf9d912a8035ccc1e7057c07",
+      "auditDigest": "sha256:55e0ed7099c1b7ff3f1abaeadc85168080975c633f2001d4148bf1045cf7ce36",
       "compatibleBreakingDigests": [
         "sha256:aa30f22e3af0a89841310bdbdc900844dd95a66974db173fa140a71bbd7e82c0"
       ],
@@ -625,7 +793,13 @@
         "channel-aware artifact host facts are checked against the deploy plan before adapter side effects"
       ],
       "breakingDigest": "sha256:27f0cb9c7d97288850d215be8696b323471c41fd1cdf3a2ff3ebf21f62541960",
-      "auditDigest": "sha256:748e1d69ca28b631e86788de0ff359b11164b3ac1edda1b146ca49f3ac3856dc"
+      "auditDigest": "sha256:748e1d69ca28b631e86788de0ff359b11164b3ac1edda1b146ca49f3ac3856dc",
+      "compatibleBreakingDigests": [
+        "sha256:da569f90374e878948e3d5160ed9929338ce0572473ca8ee54867b0fe1aaeace"
+      ],
+      "compatibilityProofRoots": [
+        "sha256:3ba66a1e8f8d00ddd45f3f448bcccb15469cbd31f5765d36f61e4cfe7fd0dd41"
+      ]
     },
     {
       "contractVersion": 1,
@@ -805,7 +979,7 @@
         "semver GitHub Releases are created or updated only after transaction completion, with prerelease/latest metadata bound to the authoritative publication channel and tag syntax retained as the fallback for ordinary callers"
       ],
       "breakingDigest": "sha256:6147c0a8d5c36bfaa6021871574e1fc28192a3f1b8cfdae4d24ef3059ac1ebda",
-      "auditDigest": "sha256:e7386c747ff6282ef128903bcac9f6dcd47581d19ac4f0bafc589c2037e0467c",
+      "auditDigest": "sha256:5a392996406f1327e7a5f40462663d40953a24e30c33377d7d2854a18ca4d1c1",
       "compatibleBreakingDigests": [
         "sha256:a59f0910e6df842e7699139472e5dd69ac2fdd7f7213bf2cb346d1d622556874"
       ],
@@ -926,7 +1100,7 @@
         "release-state SHA is recorded as a durable audit entrance"
       ],
       "breakingDigest": "sha256:b627e1b2ece9b6049517a942c5139e342e6077cdd3d8962d61cef8481b1f70ad",
-      "auditDigest": "sha256:9fdb16bac3b7d2b4a1cacd684e06b4f029d4d4ff41a0d80b54217fc59e010abd"
+      "auditDigest": "sha256:00d5f388d6abc7aaa730bbbda644cdba0e83cff783558102bf143d68bd7429df"
     },
     {
       "contractVersion": 1,
@@ -975,7 +1149,7 @@
         "prose-only public claims downgrade the release trust passport audit"
       ],
       "breakingDigest": "sha256:f0b636eb925ddbf45ff1a8872454ab7b4dd98857cac12bb75217830130e62a16",
-      "auditDigest": "sha256:9fdb16bac3b7d2b4a1cacd684e06b4f029d4d4ff41a0d80b54217fc59e010abd"
+      "auditDigest": "sha256:00d5f388d6abc7aaa730bbbda644cdba0e83cff783558102bf143d68bd7429df"
     },
     {
       "contractVersion": 1,
@@ -1125,7 +1299,7 @@
         "manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
       ],
       "breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
-      "auditDigest": "sha256:4b31a0588bad10ebe4005984beb10d890ce631c150b59f3f11b12c95ea431be5"
+      "auditDigest": "sha256:85b08f6e7203d96f05af027d90b5080bee2817155b0aebdf5afe4fcb3994f3ea"
     },
     {
       "contractVersion": 1,
@@ -1147,7 +1321,7 @@
         "agents can discover supported Node APIs without importing internal file paths"
       ],
       "breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
-      "auditDigest": "sha256:5f6dc623f216d3d903417a9e551217498fd14b622524f991c425035430aac399"
+      "auditDigest": "sha256:abb073d3d4350fd42e92391bab95f8d63a8cf12c6f8916ada62a7bfbc2059974"
     },
     {
       "contractVersion": 1,
@@ -1198,7 +1372,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:373723a73d188194d389dee04c394d3b79cb0c016a370f2f5d0f60979a02ed48",
-        "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
+        "registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
         "inputClassifications": {
           "buildchain-ref": {
             "classification": "included",
@@ -1381,7 +1555,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:f986e79241d831f027a0955a35c918f946989176c76555e20f156ed31fb10c94",
-        "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
+        "registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
         "inputClassifications": {
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
             "classification": "redacted",
@@ -1919,7 +2093,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:6dfa79003f0c92e336c56f07f45f57cc5572921bdb46e432fd809fb19ee823bb",
-        "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
+        "registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
         "inputClassifications": {
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
             "classification": "redacted",
@@ -2398,7 +2572,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:8e42956a2c10fa109500e72b97994f06b3d22a19cc63a46f66410b2e81706e9d",
-        "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
+        "registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
         "inputClassifications": {
           "artifact-name": {
             "classification": "included",
@@ -2615,7 +2789,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:c5274b37f04d0054559fdc8698c51bd0f0d8ae470baf163e9caa7699aa970575",
-        "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
+        "registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
         "inputClassifications": {
           "artifact-path": {
             "classification": "digest-only",
@@ -2859,7 +3033,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:6b132790b9798e8a5dfbe095701d8e024c160a08bc7c4bd477ee79feef7a9cfd",
-        "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
+        "registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
         "inputClassifications": {
           "artifact-name": {
             "classification": "included",
@@ -3041,7 +3215,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:6d71409659fbf8543c7e520b0c493d8afe86bdf60286b860bb917f0041ebc173",
-        "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
+        "registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
         "inputClassifications": {
           "artifact-name": {
             "classification": "included",
@@ -3334,6 +3508,7 @@
         "release-candidate-workflow-file",
         "release-candidate-workflow-name",
         "release-passport",
+        "release-passport-adopter-delivery-json",
         "release-passport-attachment-command",
         "release-passport-buildchain-self-kfd",
         "release-passport-evidence-command",
@@ -3373,8 +3548,8 @@
       ],
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
-        "digest": "sha256:4d44d0f729fbc112aa309ed22e74b9f1401b0470b99c1e6061c278babe5e4b8b",
-        "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
+        "digest": "sha256:127dc1d80dca63e2bb1fb268d2183d0a31ea2a67eb81bce48dae916f698c02be",
+        "registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
         "inputClassifications": {
           "BUILDCHAIN_ISSUE_APP_ID": {
             "classification": "redacted",
@@ -3716,6 +3891,10 @@
             "classification": "included",
             "source": "workflow-call-input"
           },
+          "release-passport-adopter-delivery-json": {
+            "classification": "digest-only",
+            "source": "workflow-call-input"
+          },
           "release-passport-attachment-command": {
             "classification": "digest-only",
             "source": "workflow-call-input"
@@ -3869,7 +4048,7 @@
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
       "breakingDigest": "sha256:015d8de793adbd4c539416be7d7512e18cc92097e629b0203fa06d2c183e98bd",
-      "auditDigest": "sha256:27d35c025cbf7b5c87af599da3559657fc1aea88cf9d912a8035ccc1e7057c07"
+      "auditDigest": "sha256:55e0ed7099c1b7ff3f1abaeadc85168080975c633f2001d4148bf1045cf7ce36"
     },
     {
       "contractVersion": 1,
@@ -3934,7 +4113,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:660579b5561e8e33375a3f3b1fefbb8a5bd8241a55ba43374d786fb772c24a12",
-        "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
+        "registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
         "inputClassifications": {
           "agent-work-context-json": {
             "classification": "digest-only",
@@ -4025,7 +4204,13 @@
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
       "breakingDigest": "sha256:b873ceb65618972bea615afcb9c616c138ce834b3246ec7237ef87c1618d68bd",
-      "auditDigest": "sha256:ef845b25978cd63c0fc6cbc83271e30b245f9d8605c2c25ae7e87c13a35b1302"
+      "auditDigest": "sha256:ef845b25978cd63c0fc6cbc83271e30b245f9d8605c2c25ae7e87c13a35b1302",
+      "compatibleBreakingDigests": [
+        "sha256:d7a1f15990ce8bd13149474888232c7d4451dd2a49bebf4d4ce1336695da430e"
+      ],
+      "compatibilityProofRoots": [
+        "sha256:8b98ff903d3abd8d9a9b6a0b250efd8fdf6fd5d4127aa4d0d0c4a5b3db87f353"
+      ]
     },
     {
       "contractVersion": 1,
@@ -4069,7 +4254,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555",
-        "registryDigest": "sha256:56d9fd27f8e05f1d5c0f5de354b2dfc1cac62155e8ddc555b16e35e9161459c9",
+        "registryDigest": "sha256:24e8ce3458a737d74337ad80329659f2e9dea49b3edb9238b11f4fdb76e96bca",
         "inputClassifications": {}
       },
       "guarantees": [
@@ -4082,7 +4267,7 @@
       "auditDigest": "sha256:d07482cd66413a2fb3781a3b76f960b8151b6231841799647fe237820de2fde6"
     }
   ],
-  "compatibilityProofRegistryRoot": "sha256:aec674d174461493e3493b3fe3164d62745a9ce18cb6a560f94bd99f2759eb53",
-  "compatibilityDigest": "sha256:eb2fafb181b33002f81102a966f0a801ab1798101446635703ab6acfea51d9aa",
-  "contractDigest": "sha256:beb0c44c85d99dc85ab3468833d42fc7fb5cbf448407ce82e52ed553bcd77967"
+  "compatibilityProofRegistryRoot": "sha256:b7194b811e4d3af2df4390bc4d1731e16a86215bd64ee18cb630dd5492f4fb63",
+  "compatibilityDigest": "sha256:57d37609068590238f547a133b6b69ee994b452825030447d20529683ba61fbd",
+  "contractDigest": "sha256:b47881aae6956ef16b94b0e89c4790fa5c6de94202315756a49bc62b8bff6346"
 }