@kungfu-tech/buildchain 3.0.9-alpha.11 → 3.0.9-alpha.13

package/dist/site/public-surface-audit.json

@@ -8351,8 +8351,8 @@
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
     "cliRegistryDigest": "613ca42d3fe36e953603221d1cf16478ba84e6cf27dd6d11ddb2c1caea42ec3b",
-    "workflowRegistryDigest": "e50967a318b5d2c8b41ea6a059d116057cf9fc3628cae037a3bb05a73ffec7b0",
-    "pageRegistryDigest": "7fcb0964f575151e6c0722a83bf0ac859923994a83369754ed1d47ffffc6fd33"
+    "workflowRegistryDigest": "0f5c0541b3784df88d2908aa88623e5adb48891bc2f9e701eac62785cfd1f600",
+    "pageRegistryDigest": "278318ddd3f832a3681ff805eff19f9a1e3d7da382c62db10a8be663cdc99139"
   },
   "comparison": {
     "missingCliRegistry": [],

package/dist/site/publication-registry.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-publication-release-registry",
-  "generatedAt": "2026-08-13T05:56:34.000Z",
-  "publishedAt": "2026-08-13T05:56:34.000Z",
+  "generatedAt": "2026-08-13T12:00:11.000Z",
+  "publishedAt": "2026-08-13T12:00:11.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "98c2ab8a2242ad52117f5823ac1508572bc83353",
+  "sourceRevision": "0052ce9b07f86ea3dd6eaf81e75ae1751ee79494",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "3.0.9-alpha.11",
+    "version": "3.0.9-alpha.13",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/site-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-manifest",
-  "generatedAt": "2026-08-13T05:56:34.000Z",
-  "publishedAt": "2026-08-13T05:56:34.000Z",
+  "generatedAt": "2026-08-13T12:00:11.000Z",
+  "publishedAt": "2026-08-13T12:00:11.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "98c2ab8a2242ad52117f5823ac1508572bc83353",
+  "sourceRevision": "0052ce9b07f86ea3dd6eaf81e75ae1751ee79494",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "3.0.9-alpha.11",
+    "version": "3.0.9-alpha.13",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",
@@ -253,7 +253,7 @@
       "path": "docs/node-api-reference.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:aaf6b568170bb7083935b622a628ef67e269892727ce083f46e7b02be6b2cd0b"
+      "digest": "sha256:354ccb4a6d2b9d2fbf979d4daace49576919299804129a1e8c9f2d12bf826c5e"
     },
     {
       "id": "build-facts",

package/dist/site/workflow-registry.json

@@ -1970,7 +1970,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "3.0.9-alpha.11",
+      "introducedVersion": "3.0.9-alpha.13",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -1991,7 +1991,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "3.0.9-alpha.11",
+      "introducedVersion": "3.0.9-alpha.13",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2012,7 +2012,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "3.0.9-alpha.11",
+      "introducedVersion": "3.0.9-alpha.13",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2062,7 +2062,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "3.0.9-alpha.11",
+      "introducedVersion": "3.0.9-alpha.13",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",

package/docs/dev-delivery-warrant.md

@@ -8,7 +8,7 @@ confidence: high
 sensitivity: public
 evidence_grade: A
 review_state: self-reviewed
-last_reviewed: 2026-08-11
+last_reviewed: 2026-08-13
 ai_provenance:
   model_family: GPT-5
   product: Codex
@@ -93,10 +93,14 @@ affected closure, dependencies, toolchain, covered paths, and exact acceptance
 evidence. Ready state and approval are established before provisional
 selection.
 
-Native Qualification Proof is separate. It binds semantic source and patch,
+Native Qualification Proof is separate. Its v3 form binds semantic source and patch,
 plan, affected closure, dependency graph, toolchain, the exact execution
-environment contract, covered paths, native shard evidence, and the exact dev
-base used by the native composition. Before reuse, the consumer roots the
+environment contract, covered paths, native shard evidence, the exact dev
+base used by the native composition, and the v2 native heartbeat-run receipt.
+That receipt exposes and roots the exact repository, protected base, source
+head, qualified base, toolchain, and environment binding established before
+process spawn. The proof repeats the binding root and includes the receipt root
+in its shard evidence. Before reuse, the consumer roots the
 complete attributed Dev delta, including both sides of every rename, then
 classifies it:
 
@@ -111,6 +115,11 @@ classifies it:
   changed source, plan, closure, dependency, toolchain, or environment root
   fails closed to full native qualification.
 
+Historical Native Qualification Proof v1 and v2 values remain readable, but
+they cannot be reused because their execution receipt did not bind the
+environment root. They fail closed to explicit native revalidation and produce
+a v3 proof.
+
 The reuse decision binds the exact old and current Dev heads, normalized changed
 paths and rename pairs in `baseDeltaRoot`. This makes local and hosted replay of
 the same inputs byte-deterministic. Generated outputs that participate in the
@@ -134,13 +143,16 @@ buildchain dev warrant submit --repository owner/repository \
   --source-identity-root <root> --source-patch-root <root> \
   --source-proof-root <root> --plan-root <root> --closure-root <root> \
   --dependency-root <root> --toolchain-root <root> \
+  --environment-root <root> \
   --delivery-class native-proof-required
 
 buildchain dev warrant select --repository owner/repository \
   --branch dev/v4/v4.0 --execute
 
 buildchain dev proof native --branch dev/v4/v4.0 \
-  --qualified-base <sha> --environment-root <root> \
+  --source-head <sha> --qualified-base <sha> \
+  --environment-root <root> \
+  --native-execution-receipt native-heartbeat-run.json \
   --affected-paths-json '["packages/native"]' ...
 
 buildchain dev proof classify-native --source-proof native-proof.json \
@@ -168,7 +180,9 @@ equivalent exact consumer). It performs an exact fenced heartbeat before spawn,
 renews throughout the complete child lifetime, performs a final renewal before
 accepting success, and terminates the process group on heartbeat or fencing
 failure. Missing, stale, expired, or mismatched Warrant state therefore blocks
-native spawn instead of becoming qualification evidence.
+native spawn instead of becoming qualification evidence. The environment root
+is validated and included in the execution binding before the first heartbeat
+or process spawn; it cannot be attached only after a successful run.
 
 Proof commands create, verify, classify, and compose the two proof layers:
 
@@ -291,6 +305,12 @@ The reusable `dev-pr-auto-merge.yml` supports three explicit rollout modes:
   configured consumer workflow is dispatched immediately for that exact PR,
   head, and source run; the candidate is not left waiting for a patrol cron.
 
+For a required native delivery class, the reusable controller rejects a
+missing or malformed environment root before runtime checkout, candidate
+submission, Warrant selection, or native execution. The input remains
+conditionally optional so `off`, `shadow`, and `non-native-fast` callers keep
+their documented behavior.
+
 The controller persists a completed native proof before its final base
 reclassification. A later exact retry can supply that proof and avoid the
 expensive native command when the rooted delta still proves reuse safe. A

package/docs/node-api-reference.md

@@ -164,7 +164,7 @@ Target: `./packages/core/index.js`. Public symbols: 608.
 | `computeConsumerIssueFingerprint` | function: function computeConsumerIssueFingerprint(fields = {}) | fields = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { computeConsumerIssueFingerprint } from "@kungfu-tech/buildchain";` | `packages/core/issue-reporting.js:64` |
 | `CONSUMER_PUBLICATION_DECISION_CONTRACT` | constant: const CONSUMER_PUBLICATION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { CONSUMER_PUBLICATION_DECISION_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/publication-authority.js:20` |
 | `consumerIssueMarker` | function: function consumerIssueMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { consumerIssueMarker } from "@kungfu-tech/buildchain";` | `packages/core/issue-reporting.js:76` |
-| `contractSummary` | function: function contractSummary(contractWorld, runtimeRef = "", runtimeSha = "") | contractWorld, runtimeRef = "", runtimeSha = "" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { contractSummary } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-compatibility-proof.js:382` |
+| `contractSummary` | function: function contractSummary(contractWorld, runtimeRef = "", runtimeSha = "") | contractWorld, runtimeRef = "", runtimeSha = "" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { contractSummary } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-compatibility-proof.js:448` |
 | `controllerEvidenceDigest` | function: function controllerEvidenceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { controllerEvidenceDigest } from "@kungfu-tech/buildchain";` | `packages/core/controller-evidence.js:152` |
 | `createActivationReceiptProjectorAdapter` | function: function createActivationReceiptProjectorAdapter(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createActivationReceiptProjectorAdapter } from "@kungfu-tech/buildchain";` | `packages/core/release-tail-provider-adapters.js:181` |
 | `createAnchoredVersionMaterialEvidence` | function: function createAnchoredVersionMaterialEvidence({ cwd = process.cwd(), targetChannel = "", targetRef = "", alphaRef = "", releaseRef = "HEAD", runLifecycle = true, } = {}) | { cwd = process.cwd(), targetChannel = "", targetRef = "", alphaRef = "", releaseRef = "HEAD", runLifecycle = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createAnchoredVersionMaterialEvidence } from "@kungfu-tech/buildchain";` | `packages/core/anchored-version-material.js:118` |
@@ -280,7 +280,7 @@ Target: `./packages/core/index.js`. Public symbols: 608.
 | `enumerateDocCommandRefs` | function: function enumerateDocCommandRefs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateDocCommandRefs } from "@kungfu-tech/buildchain";` | `packages/core/public-surface-audit.js:115` |
 | `enumerateSitePages` | function: function enumerateSitePages({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateSitePages } from "@kungfu-tech/buildchain";` | `packages/core/public-surface-audit.js:106` |
 | `enumerateWorkflowInputs` | function: function enumerateWorkflowInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateWorkflowInputs } from "@kungfu-tech/buildchain";` | `packages/core/public-surface-audit.js:74` |
-| `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock({ lock, current, runtimeRef = "", runtimeSha = "", runtimeClass = "", compatibilityPolicy = "", workflowShellRef = "", expectedChannel = "", expectedMajor = "", allowOpaqueRuntime = false, } = {}) | { lock, current, runtimeRef = "", runtimeSha = "", runtimeClass = "", compatibilityPolicy = "", workflowShellRef = "", expectedChannel = "", expectedMajor = "", allowOpaqueRuntime = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-compatibility-proof.js:476` |
+| `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock({ lock, current, runtimeRef = "", runtimeSha = "", runtimeClass = "", compatibilityPolicy = "", workflowShellRef = "", expectedChannel = "", expectedMajor = "", allowOpaqueRuntime = false, } = {}) | { lock, current, runtimeRef = "", runtimeSha = "", runtimeClass = "", compatibilityPolicy = "", workflowShellRef = "", expectedChannel = "", expectedMajor = "", allowOpaqueRuntime = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-compatibility-proof.js:542` |
 | `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = "", sourcePath = "", reviewAuthority = "kungfu-origin", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = "", sourcePath = "", reviewAuthority = "kungfu-origin", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:425` |
 | `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:694` |
 | `evaluateKfdProductGate` | function: async function evaluateKfdProductGate({ cwd = process.cwd(), input, expectedSourceSha = "", checkedAt = new Date().toISOString(), } = {}) | { cwd = process.cwd(), input, expectedSourceSha = "", checkedAt = new Date().toISOString(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateKfdProductGate } from "@kungfu-tech/buildchain";` | `packages/core/kfd-product-gates.js:419` |
@@ -519,7 +519,7 @@ Target: `./packages/core/index.js`. Public symbols: 608.
 | `releaseTailRoot` | function: function releaseTailRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { releaseTailRoot } from "@kungfu-tech/buildchain";` | `packages/core/release-tail-provider-plane.js:164` |
 | `releaseTailStableJson` | function: function releaseTailStableJson(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { releaseTailStableJson } from "@kungfu-tech/buildchain";` | `packages/core/release-tail-provider-plane.js:149` |
 | `renderBadgeBundleBlock` | function: function renderBadgeBundleBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBadgeBundleBlock } from "@kungfu-tech/buildchain";` | `packages/core/readme-badges.js:840` |
-| `renderBuildchainContractDriftIssueBody` | function: function renderBuildchainContractDriftIssueBody({ repository = "", workflow = "", runUrl = "", lockPath = "", evaluation } = {}) | { repository = "", workflow = "", runUrl = "", lockPath = "", evaluation } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBuildchainContractDriftIssueBody } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-compatibility-proof.js:614` |
+| `renderBuildchainContractDriftIssueBody` | function: function renderBuildchainContractDriftIssueBody({ repository = "", workflow = "", runUrl = "", lockPath = "", evaluation } = {}) | { repository = "", workflow = "", runUrl = "", lockPath = "", evaluation } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBuildchainContractDriftIssueBody } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-compatibility-proof.js:680` |
 | `renderHomebrewFormula` | function: function renderHomebrewFormula(facts) | facts | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderHomebrewFormula } from "@kungfu-tech/buildchain";` | `packages/core/homebrew.js:290` |
 | `renderKfd2ProductClaimOutputs` | function: function renderKfd2ProductClaimOutputs({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = "", channel = "", tag = "", sourceSha = "", } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = "", channel = "", tag = "", sourceSha = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderKfd2ProductClaimOutputs } from "@kungfu-tech/buildchain";` | `packages/core/kfd2-product-claims.js:321` |
 | `renderReadmeBadgeBlock` | function: function renderReadmeBadgeBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderReadmeBadgeBlock } from "@kungfu-tech/buildchain";` | `packages/core/readme-badges.js:836` |
@@ -825,7 +825,7 @@ Target: `./packages/core/index.js`. Public symbols: 608.
 | `computeConsumerIssueFingerprint` | function: function computeConsumerIssueFingerprint(fields = {}) | fields = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { computeConsumerIssueFingerprint } from "@kungfu-tech/buildchain/core";` | `packages/core/issue-reporting.js:64` |
 | `CONSUMER_PUBLICATION_DECISION_CONTRACT` | constant: const CONSUMER_PUBLICATION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { CONSUMER_PUBLICATION_DECISION_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/publication-authority.js:20` |
 | `consumerIssueMarker` | function: function consumerIssueMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { consumerIssueMarker } from "@kungfu-tech/buildchain/core";` | `packages/core/issue-reporting.js:76` |
-| `contractSummary` | function: function contractSummary(contractWorld, runtimeRef = "", runtimeSha = "") | contractWorld, runtimeRef = "", runtimeSha = "" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { contractSummary } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-compatibility-proof.js:382` |
+| `contractSummary` | function: function contractSummary(contractWorld, runtimeRef = "", runtimeSha = "") | contractWorld, runtimeRef = "", runtimeSha = "" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { contractSummary } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-compatibility-proof.js:448` |
 | `controllerEvidenceDigest` | function: function controllerEvidenceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { controllerEvidenceDigest } from "@kungfu-tech/buildchain/core";` | `packages/core/controller-evidence.js:152` |
 | `createActivationReceiptProjectorAdapter` | function: function createActivationReceiptProjectorAdapter(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createActivationReceiptProjectorAdapter } from "@kungfu-tech/buildchain/core";` | `packages/core/release-tail-provider-adapters.js:181` |
 | `createAnchoredVersionMaterialEvidence` | function: function createAnchoredVersionMaterialEvidence({ cwd = process.cwd(), targetChannel = "", targetRef = "", alphaRef = "", releaseRef = "HEAD", runLifecycle = true, } = {}) | { cwd = process.cwd(), targetChannel = "", targetRef = "", alphaRef = "", releaseRef = "HEAD", runLifecycle = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createAnchoredVersionMaterialEvidence } from "@kungfu-tech/buildchain/core";` | `packages/core/anchored-version-material.js:118` |
@@ -941,7 +941,7 @@ Target: `./packages/core/index.js`. Public symbols: 608.
 | `enumerateDocCommandRefs` | function: function enumerateDocCommandRefs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateDocCommandRefs } from "@kungfu-tech/buildchain/core";` | `packages/core/public-surface-audit.js:115` |
 | `enumerateSitePages` | function: function enumerateSitePages({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateSitePages } from "@kungfu-tech/buildchain/core";` | `packages/core/public-surface-audit.js:106` |
 | `enumerateWorkflowInputs` | function: function enumerateWorkflowInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateWorkflowInputs } from "@kungfu-tech/buildchain/core";` | `packages/core/public-surface-audit.js:74` |
-| `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock({ lock, current, runtimeRef = "", runtimeSha = "", runtimeClass = "", compatibilityPolicy = "", workflowShellRef = "", expectedChannel = "", expectedMajor = "", allowOpaqueRuntime = false, } = {}) | { lock, current, runtimeRef = "", runtimeSha = "", runtimeClass = "", compatibilityPolicy = "", workflowShellRef = "", expectedChannel = "", expectedMajor = "", allowOpaqueRuntime = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-compatibility-proof.js:476` |
+| `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock({ lock, current, runtimeRef = "", runtimeSha = "", runtimeClass = "", compatibilityPolicy = "", workflowShellRef = "", expectedChannel = "", expectedMajor = "", allowOpaqueRuntime = false, } = {}) | { lock, current, runtimeRef = "", runtimeSha = "", runtimeClass = "", compatibilityPolicy = "", workflowShellRef = "", expectedChannel = "", expectedMajor = "", allowOpaqueRuntime = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-compatibility-proof.js:542` |
 | `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = "", sourcePath = "", reviewAuthority = "kungfu-origin", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = "", sourcePath = "", reviewAuthority = "kungfu-origin", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:425` |
 | `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:694` |
 | `evaluateKfdProductGate` | function: async function evaluateKfdProductGate({ cwd = process.cwd(), input, expectedSourceSha = "", checkedAt = new Date().toISOString(), } = {}) | { cwd = process.cwd(), input, expectedSourceSha = "", checkedAt = new Date().toISOString(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateKfdProductGate } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd-product-gates.js:419` |
@@ -1180,7 +1180,7 @@ Target: `./packages/core/index.js`. Public symbols: 608.
 | `releaseTailRoot` | function: function releaseTailRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { releaseTailRoot } from "@kungfu-tech/buildchain/core";` | `packages/core/release-tail-provider-plane.js:164` |
 | `releaseTailStableJson` | function: function releaseTailStableJson(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { releaseTailStableJson } from "@kungfu-tech/buildchain/core";` | `packages/core/release-tail-provider-plane.js:149` |
 | `renderBadgeBundleBlock` | function: function renderBadgeBundleBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBadgeBundleBlock } from "@kungfu-tech/buildchain/core";` | `packages/core/readme-badges.js:840` |
-| `renderBuildchainContractDriftIssueBody` | function: function renderBuildchainContractDriftIssueBody({ repository = "", workflow = "", runUrl = "", lockPath = "", evaluation } = {}) | { repository = "", workflow = "", runUrl = "", lockPath = "", evaluation } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBuildchainContractDriftIssueBody } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-compatibility-proof.js:614` |
+| `renderBuildchainContractDriftIssueBody` | function: function renderBuildchainContractDriftIssueBody({ repository = "", workflow = "", runUrl = "", lockPath = "", evaluation } = {}) | { repository = "", workflow = "", runUrl = "", lockPath = "", evaluation } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBuildchainContractDriftIssueBody } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-compatibility-proof.js:680` |
 | `renderHomebrewFormula` | function: function renderHomebrewFormula(facts) | facts | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderHomebrewFormula } from "@kungfu-tech/buildchain/core";` | `packages/core/homebrew.js:290` |
 | `renderKfd2ProductClaimOutputs` | function: function renderKfd2ProductClaimOutputs({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = "", channel = "", tag = "", sourceSha = "", } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = "", channel = "", tag = "", sourceSha = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderKfd2ProductClaimOutputs } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd2-product-claims.js:321` |
 | `renderReadmeBadgeBlock` | function: function renderReadmeBadgeBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderReadmeBadgeBlock } from "@kungfu-tech/buildchain/core";` | `packages/core/readme-badges.js:836` |
@@ -1412,32 +1412,32 @@ Target: `./packages/core/buildchain-contract.js`. Public symbols: 26.
 
 | Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |
 | --- | --- | --- | --- | --- | --- | --- | --- |
-| `assertBuildchainCompatibilityProjection` | function: function assertBuildchainCompatibilityProjection(contractWorld) | contractWorld | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertBuildchainCompatibilityProjection } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:299` |
+| `assertBuildchainCompatibilityProjection` | function: function assertBuildchainCompatibilityProjection(contractWorld) | contractWorld | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertBuildchainCompatibilityProjection } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:365` |
 | `BUILDCHAIN_CHANNELS` | constant: const BUILDCHAIN_CHANNELS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CHANNELS } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-channel-identity.js:8` |
 | `BUILDCHAIN_COMPATIBILITY_PROOF_REGISTRY_SCHEMA` | constant: const BUILDCHAIN_COMPATIBILITY_PROOF_REGISTRY_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_COMPATIBILITY_PROOF_REGISTRY_SCHEMA } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:13` |
 | `BUILDCHAIN_COMPATIBILITY_PROOF_SCHEMA` | constant: const BUILDCHAIN_COMPATIBILITY_PROOF_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_COMPATIBILITY_PROOF_SCHEMA } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:12` |
 | `BUILDCHAIN_COMPATIBILITY_VERIFICATION_RECEIPT_SCHEMA` | constant: const BUILDCHAIN_COMPATIBILITY_VERIFICATION_RECEIPT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_COMPATIBILITY_VERIFICATION_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:14` |
 | `BUILDCHAIN_CONTRACT_LOCK` | constant: const BUILDCHAIN_CONTRACT_LOCK | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-contract.js:36` |
 | `BUILDCHAIN_RUNTIME_CONTRACT_WORLD` | constant: const BUILDCHAIN_RUNTIME_CONTRACT_WORLD | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RUNTIME_CONTRACT_WORLD } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-contract.js:35` |
-| `contractSummary` | function: function contractSummary(contractWorld, runtimeRef = "", runtimeSha = "") | contractWorld, runtimeRef = "", runtimeSha = "" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { contractSummary } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:382` |
-| `createBuildchainCompatibilityProof` | function: function createBuildchainCompatibilityProof(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainCompatibilityProof } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:180` |
-| `createBuildchainCompatibilityProofRegistry` | function: function createBuildchainCompatibilityProofRegistry({ proofs = createHistoricalBuildchainCompatibilityProofs(), surfaces = [], majorLine = "" } = {}) | { proofs = createHistoricalBuildchainCompatibilityProofs(), surfaces = [], majorLine = "" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainCompatibilityProofRegistry } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:275` |
-| `createBuildchainCompatibilityVerificationReceipt` | function: function createBuildchainCompatibilityVerificationReceipt(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainCompatibilityVerificationReceipt } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:345` |
+| `contractSummary` | function: function contractSummary(contractWorld, runtimeRef = "", runtimeSha = "") | contractWorld, runtimeRef = "", runtimeSha = "" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { contractSummary } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:448` |
+| `createBuildchainCompatibilityProof` | function: function createBuildchainCompatibilityProof(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainCompatibilityProof } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:246` |
+| `createBuildchainCompatibilityProofRegistry` | function: function createBuildchainCompatibilityProofRegistry({ proofs = createHistoricalBuildchainCompatibilityProofs(), surfaces = [], majorLine = "" } = {}) | { proofs = createHistoricalBuildchainCompatibilityProofs(), surfaces = [], majorLine = "" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainCompatibilityProofRegistry } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:341` |
+| `createBuildchainCompatibilityVerificationReceipt` | function: function createBuildchainCompatibilityVerificationReceipt(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainCompatibilityVerificationReceipt } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:411` |
 | `createBuildchainContractLock` | function: function createBuildchainContractLock({ buildchainRef = "v3", resolvedSha = "", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {}) | { buildchainRef = "v3", resolvedSha = "", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainContractLock } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-contract.js:846` |
 | `createBuildchainContractWorld` | function: function createBuildchainContractWorld({ root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {}) | { root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainContractWorld } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-contract.js:137` |
-| `createHistoricalBuildchainCompatibilityProofs` | function: function createHistoricalBuildchainCompatibilityProofs() | none | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createHistoricalBuildchainCompatibilityProofs } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:252` |
+| `createHistoricalBuildchainCompatibilityProofs` | function: function createHistoricalBuildchainCompatibilityProofs() | none | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createHistoricalBuildchainCompatibilityProofs } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:318` |
 | `evaluateBuildchainChannelBinding` | function: function evaluateBuildchainChannelBinding({ workflowShellRef = "", runtimeRef = "", lockRef = "", lockMajorLine = "", expectedChannel = "", expectedMajor = "", allowOpaqueRuntime = false } = {}) | { workflowShellRef = "", runtimeRef = "", lockRef = "", lockMajorLine = "", expectedChannel = "", expectedMajor = "", allowOpaqueRuntime = false } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateBuildchainChannelBinding } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-channel-identity.js:96` |
-| `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock({ lock, current, runtimeRef = "", runtimeSha = "", runtimeClass = "", compatibilityPolicy = "", workflowShellRef = "", expectedChannel = "", expectedMajor = "", allowOpaqueRuntime = false, } = {}) | { lock, current, runtimeRef = "", runtimeSha = "", runtimeClass = "", compatibilityPolicy = "", workflowShellRef = "", expectedChannel = "", expectedMajor = "", allowOpaqueRuntime = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:476` |
+| `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock({ lock, current, runtimeRef = "", runtimeSha = "", runtimeClass = "", compatibilityPolicy = "", workflowShellRef = "", expectedChannel = "", expectedMajor = "", allowOpaqueRuntime = false, } = {}) | { lock, current, runtimeRef = "", runtimeSha = "", runtimeClass = "", compatibilityPolicy = "", workflowShellRef = "", expectedChannel = "", expectedMajor = "", allowOpaqueRuntime = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:542` |
 | `finalizeBuildchainContractWorld` | function: function finalizeBuildchainContractWorld(contractWorld) | contractWorld | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { finalizeBuildchainContractWorld } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-contract.js:801` |
 | `normalizeBuildchainRef` | function: function normalizeBuildchainRef(ref = "") | ref = "" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeBuildchainRef } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-channel-identity.js:10` |
 | `parseBuildchainRefIdentity` | function: function parseBuildchainRefIdentity(ref = "") | ref = "" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseBuildchainRefIdentity } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-channel-identity.js:16` |
 | `readBuildchainContractLock` | function: function readBuildchainContractLock(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractLock } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-contract.js:900` |
 | `readBuildchainContractWorld` | function: function readBuildchainContractWorld(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractWorld } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-contract.js:879` |
-| `renderBuildchainContractDriftIssueBody` | function: function renderBuildchainContractDriftIssueBody({ repository = "", workflow = "", runUrl = "", lockPath = "", evaluation } = {}) | { repository = "", workflow = "", runUrl = "", lockPath = "", evaluation } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBuildchainContractDriftIssueBody } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:614` |
+| `renderBuildchainContractDriftIssueBody` | function: function renderBuildchainContractDriftIssueBody({ repository = "", workflow = "", runUrl = "", lockPath = "", evaluation } = {}) | { repository = "", workflow = "", runUrl = "", lockPath = "", evaluation } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBuildchainContractDriftIssueBody } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:680` |
 | `sha256File` | function: function sha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256File } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-contract.js:61` |
 | `sha256Json` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256Json } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-contract.js:57` |
-| `verifyBuildchainCompatibilityProof` | function: function verifyBuildchainCompatibilityProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildchainCompatibilityProof } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:228` |
-| `verifyBuildchainCompatibilityVerificationReceipt` | function: function verifyBuildchainCompatibilityVerificationReceipt(receiptInput) | receiptInput | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildchainCompatibilityVerificationReceipt } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:369` |
+| `verifyBuildchainCompatibilityProof` | function: function verifyBuildchainCompatibilityProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildchainCompatibilityProof } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:294` |
+| `verifyBuildchainCompatibilityVerificationReceipt` | function: function verifyBuildchainCompatibilityVerificationReceipt(receiptInput) | receiptInput | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildchainCompatibilityVerificationReceipt } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:435` |
 
 ## `@kungfu-tech/buildchain/candidate-timeline`
 
@@ -1564,7 +1564,7 @@ Target: `./packages/core/dev-delivery-authority.js`. Public symbols: 22.
 
 ## `@kungfu-tech/buildchain/dev-delivery-warrant`
 
-Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 44.
+Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 49.
 
 | Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |
 | --- | --- | --- | --- | --- | --- | --- | --- |
@@ -1573,9 +1573,11 @@ Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 44.
 | `closeDevDeliveryWarrant` | function: function closeDevDeliveryWarrant(queueInput, warrant, { outcome, evidenceRoot, reason = "", now = new Date().toISOString() } = {}) | queueInput, warrant, { outcome, evidenceRoot, reason = "", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { closeDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:586` |
 | `createDevDeliveryQueue` | function: function createDevDeliveryQueue({ repository: repositoryInput, protectedBase: protectedBaseInput, policy = {}, now = new Date().toISOString() } = {}) | { repository: repositoryInput, protectedBase: protectedBaseInput, policy = {}, now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:120` |
 | `createIntegrationDeliveryProof` | function: function createIntegrationDeliveryProof(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createIntegrationDeliveryProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:207` |
-| `createNativeProofBaseDelta` | function: function createNativeProofBaseDelta(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createNativeProofBaseDelta } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:58` |
-| `createNativeProofReuseDecision` | function: function createNativeProofReuseDecision({ proof, current = {} } = {}) | { proof, current = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createNativeProofReuseDecision } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:288` |
-| `createNativeQualificationProof` | function: function createNativeQualificationProof(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createNativeQualificationProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:88` |
+| `createNativeExecutionBinding` | function: function createNativeExecutionBinding(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createNativeExecutionBinding } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:94` |
+| `createNativeExecutionReceipt` | function: function createNativeExecutionReceipt(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createNativeExecutionReceipt } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:106` |
+| `createNativeProofBaseDelta` | function: function createNativeProofBaseDelta(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createNativeProofBaseDelta } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:64` |
+| `createNativeProofReuseDecision` | function: function createNativeProofReuseDecision({ proof, current = {} } = {}) | { proof, current = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createNativeProofReuseDecision } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:423` |
+| `createNativeQualificationProof` | function: function createNativeQualificationProof(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createNativeQualificationProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:161` |
 | `createProjectCutReplayPlan` | function: function createProjectCutReplayPlan(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createProjectCutReplayPlan } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:121` |
 | `createProjectCutReplayProof` | function: function createProjectCutReplayProof(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createProjectCutReplayProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:141` |
 | `createReleaseBlockerPriorityClaim` | function: function createReleaseBlockerPriorityClaim(repairInput, input = {}) | repairInput, input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseBlockerPriorityClaim } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/release-blocker-priority.js:32` |
@@ -1584,7 +1586,7 @@ Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 44.
 | `DEV_DELIVERY_CLASSES` | constant: const DEV_DELIVERY_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_CLASSES } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:24` |
 | `DEV_DELIVERY_LEASE_RECEIPT_SCHEMA` | constant: const DEV_DELIVERY_LEASE_RECEIPT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_LEASE_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:16` |
 | `DEV_DELIVERY_PRIORITIES` | constant: const DEV_DELIVERY_PRIORITIES | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_PRIORITIES } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:18` |
-| `DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA` | constant: const DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:18` |
+| `DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA` | constant: const DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:24` |
 | `DEV_DELIVERY_QUEUE_CONTRACT` | constant: const DEV_DELIVERY_QUEUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_QUEUE_CONTRACT } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:12` |
 | `DEV_DELIVERY_SELECTION_RECEIPT_SCHEMA` | constant: const DEV_DELIVERY_SELECTION_RECEIPT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_SELECTION_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:15` |
 | `DEV_DELIVERY_SETTLEMENT_RECEIPT_SCHEMA` | value: DEV_DELIVERY_SETTLEMENT_RECEIPT_SCHEMA | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { DEV_DELIVERY_SETTLEMENT_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:1` |
@@ -1593,8 +1595,10 @@ Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 44.
 | `devDeliveryContentRoot` | function: function devDeliveryContentRoot(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { devDeliveryContentRoot } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-common.js:27` |
 | `heartbeatDevDeliveryWarrant` | function: function heartbeatDevDeliveryWarrant(queueInput, warrant, { now = new Date().toISOString(), leaseSeconds } = {}) | queueInput, warrant, { now = new Date().toISOString(), leaseSeconds } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { heartbeatDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:508` |
 | `INTEGRATION_DELIVERY_PROOF_SCHEMA` | constant: const INTEGRATION_DELIVERY_PROOF_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { INTEGRATION_DELIVERY_PROOF_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:5` |
-| `NATIVE_PROOF_BASE_DELTA_SCHEMA` | constant: const NATIVE_PROOF_BASE_DELTA_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { NATIVE_PROOF_BASE_DELTA_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:20` |
-| `NATIVE_PROOF_REUSE_DECISION_SCHEMA` | constant: const NATIVE_PROOF_REUSE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { NATIVE_PROOF_REUSE_DECISION_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:16` |
+| `NATIVE_EXECUTION_BINDING_SCHEMA` | constant: const NATIVE_EXECUTION_BINDING_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { NATIVE_EXECUTION_BINDING_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:18` |
+| `NATIVE_EXECUTION_RECEIPT_SCHEMA` | constant: const NATIVE_EXECUTION_RECEIPT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { NATIVE_EXECUTION_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:20` |
+| `NATIVE_PROOF_BASE_DELTA_SCHEMA` | constant: const NATIVE_PROOF_BASE_DELTA_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { NATIVE_PROOF_BASE_DELTA_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:26` |
+| `NATIVE_PROOF_REUSE_DECISION_SCHEMA` | constant: const NATIVE_PROOF_REUSE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { NATIVE_PROOF_REUSE_DECISION_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:22` |
 | `NATIVE_QUALIFICATION_PROOF_SCHEMA` | constant: const NATIVE_QUALIFICATION_PROOF_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { NATIVE_QUALIFICATION_PROOF_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:12` |
 | `normalizeDevDeliveryQueue` | function: function normalizeDevDeliveryQueue(input, expected = {}) | input, expected = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:135` |
 | `observeDevDeliveryQueue` | function: function observeDevDeliveryQueue(queueInput, { now = new Date().toISOString() } = {}) | queueInput, { now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { observeDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:652` |
@@ -1608,8 +1612,9 @@ Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 44.
 | `SOURCE_QUALIFICATION_PROOF_SCHEMA` | constant: const SOURCE_QUALIFICATION_PROOF_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { SOURCE_QUALIFICATION_PROOF_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:3` |
 | `submitDevDeliveryCandidate` | function: function submitDevDeliveryCandidate(queueInput, input, { now = new Date().toISOString() } = {}) | queueInput, input, { now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { submitDevDeliveryCandidate } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:245` |
 | `verifyIntegrationDeliveryProof` | function: function verifyIntegrationDeliveryProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyIntegrationDeliveryProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:228` |
-| `verifyNativeProofReuseDecision` | function: function verifyNativeProofReuseDecision(decisionInput, { proof, current = {} } = {}) | decisionInput, { proof, current = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyNativeProofReuseDecision } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:292` |
-| `verifyNativeQualificationProof` | function: function verifyNativeQualificationProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyNativeQualificationProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:119` |
+| `verifyNativeExecutionReceipt` | function: function verifyNativeExecutionReceipt(receiptInput, expected = {}) | receiptInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyNativeExecutionReceipt } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:127` |
+| `verifyNativeProofReuseDecision` | function: function verifyNativeProofReuseDecision(decisionInput, { proof, current = {} } = {}) | decisionInput, { proof, current = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyNativeProofReuseDecision } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:427` |
+| `verifyNativeQualificationProof` | function: function verifyNativeQualificationProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyNativeQualificationProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:215` |
 | `verifyProjectCutReplayProof` | function: function verifyProjectCutReplayProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyProjectCutReplayProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:187` |
 | `verifySourceQualificationProof` | function: function verifySourceQualificationProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifySourceQualificationProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:52` |
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kungfu-tech/buildchain",
-  "version": "3.0.9-alpha.11",
+  "version": "3.0.9-alpha.13",
   "private": false,
   "description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
   "repository": "https://github.com/kungfu-systems/buildchain",

package/packages/core/buildchain-compatibility-proof.js

@@ -132,6 +132,72 @@ const HISTORICAL_ACCEPTANCES = [
       commit: "34fad9d3a94c450d75c0d06fd6ed00470c992ff7",
     },
   },
+  {
+    proofId: "reusable-build-a6a353-to-dfbedd",
+    surfaceId: "reusable-build",
+    surfaceKind: "workflow",
+    sourceBreakingDigest: "sha256:a6a35370d6b0d0f46e1b2712dcc01961fe53c2febde95409a27a485c10a36650",
+    targetBreakingDigest: "sha256:dfbedd543ae0c067982b5c8c02d98dd2f7f7df88752be97fb330da6b0ba30faa",
+    evidence: {
+      kind: "protected-pull-request-contract-acceptance",
+      pullRequest: "https://github.com/kungfu-systems/buildchain/pull/2089",
+      protectedBase: "dev/v3/v3.0",
+      sourceCommit: "1a6cb874bc6f1611f3eef607e711d3532798e9e7",
+      mergeCommit: "71a75f21159b994241ec7cb2c50f7a150c5d440b",
+      contractDigest: "sha256:7c2a7c132a2b2722f70f148b81048147047d4d2c46cf33f7cd2dc158aec092e0",
+      compatibilityDigest: "sha256:61af7d0871220bc0909008bdc571905ad500cccf853e7841bc5d462a34b2d436",
+    },
+    cut: {
+      kind: "protected-git-cut",
+      repository: "kungfu-systems/buildchain",
+      protectedBase: "dev/v3/v3.0",
+      commit: "71a75f21159b994241ec7cb2c50f7a150c5d440b",
+    },
+  },
+  {
+    proofId: "web-surface-da569f-to-27f0cb",
+    surfaceId: "web-surface",
+    surfaceKind: "workflow",
+    sourceBreakingDigest: "sha256:da569f90374e878948e3d5160ed9929338ce0572473ca8ee54867b0fe1aaeace",
+    targetBreakingDigest: "sha256:27f0cb9c7d97288850d215be8696b323471c41fd1cdf3a2ff3ebf21f62541960",
+    evidence: {
+      kind: "protected-pull-request-contract-acceptance",
+      pullRequest: "https://github.com/kungfu-systems/buildchain/pull/2089",
+      protectedBase: "dev/v3/v3.0",
+      sourceCommit: "1a6cb874bc6f1611f3eef607e711d3532798e9e7",
+      mergeCommit: "71a75f21159b994241ec7cb2c50f7a150c5d440b",
+      contractDigest: "sha256:7c2a7c132a2b2722f70f148b81048147047d4d2c46cf33f7cd2dc158aec092e0",
+      compatibilityDigest: "sha256:61af7d0871220bc0909008bdc571905ad500cccf853e7841bc5d462a34b2d436",
+    },
+    cut: {
+      kind: "protected-git-cut",
+      repository: "kungfu-systems/buildchain",
+      protectedBase: "dev/v3/v3.0",
+      commit: "71a75f21159b994241ec7cb2c50f7a150c5d440b",
+    },
+  },
+  {
+    proofId: "release-propagation-d7a1f1-to-b873ce",
+    surfaceId: "controller:release-propagation",
+    surfaceKind: "controller",
+    sourceBreakingDigest: "sha256:d7a1f15990ce8bd13149474888232c7d4451dd2a49bebf4d4ce1336695da430e",
+    targetBreakingDigest: "sha256:b873ceb65618972bea615afcb9c616c138ce834b3246ec7237ef87c1618d68bd",
+    evidence: {
+      kind: "protected-pull-request-contract-acceptance",
+      pullRequest: "https://github.com/kungfu-systems/buildchain/pull/2143",
+      protectedBase: "dev/v3/v3.0",
+      sourceCommit: "b63aff4dd63ad6017b8f48e1c690f595a9c832a2",
+      mergeCommit: "487ee09ca4832ffd15607db00060df4c0839fbae",
+      contractDigest: "sha256:00c37f8a663387831ba4d066056d0b21d4f3c5f3ea5b0cf84456af332cf8d87e",
+      compatibilityDigest: "sha256:3bbcaf835844260ed98414d3bd176667245d12131e13fc748e4c2fae12399691",
+    },
+    cut: {
+      kind: "protected-git-cut",
+      repository: "kungfu-systems/buildchain",
+      protectedBase: "dev/v3/v3.0",
+      commit: "487ee09ca4832ffd15607db00060df4c0839fbae",
+    },
+  },
 ];
 
 function exactText(value, label) {