@kungfu-tech/buildchain 3.0.9-alpha.12 → 3.0.9-alpha.13

package/dist/site/public-surface-audit.json

@@ -8351,8 +8351,8 @@
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
     "cliRegistryDigest": "613ca42d3fe36e953603221d1cf16478ba84e6cf27dd6d11ddb2c1caea42ec3b",
-    "workflowRegistryDigest": "1f65066ee83c6e2bc76e4e631326a61ae68f31b34e8661211f58c79630ddf472",
-    "pageRegistryDigest": "70222b937ad00c08cd6e1eef3713c85cbcabcc77c881195df2efa4fc977602f3"
+    "workflowRegistryDigest": "0f5c0541b3784df88d2908aa88623e5adb48891bc2f9e701eac62785cfd1f600",
+    "pageRegistryDigest": "278318ddd3f832a3681ff805eff19f9a1e3d7da382c62db10a8be663cdc99139"
   },
   "comparison": {
     "missingCliRegistry": [],

package/dist/site/publication-registry.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-publication-release-registry",
-  "generatedAt": "2026-08-13T09:17:14.000Z",
-  "publishedAt": "2026-08-13T09:17:14.000Z",
+  "generatedAt": "2026-08-13T12:00:11.000Z",
+  "publishedAt": "2026-08-13T12:00:11.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "394251989f8d0b181d792470eab9e59296308ebe",
+  "sourceRevision": "0052ce9b07f86ea3dd6eaf81e75ae1751ee79494",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "3.0.9-alpha.12",
+    "version": "3.0.9-alpha.13",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/site-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-manifest",
-  "generatedAt": "2026-08-13T09:17:14.000Z",
-  "publishedAt": "2026-08-13T09:17:14.000Z",
+  "generatedAt": "2026-08-13T12:00:11.000Z",
+  "publishedAt": "2026-08-13T12:00:11.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "394251989f8d0b181d792470eab9e59296308ebe",
+  "sourceRevision": "0052ce9b07f86ea3dd6eaf81e75ae1751ee79494",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "3.0.9-alpha.12",
+    "version": "3.0.9-alpha.13",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",
@@ -253,7 +253,7 @@
       "path": "docs/node-api-reference.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:3694cb4ecd55b79e45f7643d9e29e1f70139092a3a8c8a84280f9100aee6fc7b"
+      "digest": "sha256:354ccb4a6d2b9d2fbf979d4daace49576919299804129a1e8c9f2d12bf826c5e"
     },
     {
       "id": "build-facts",

package/dist/site/workflow-registry.json

@@ -1970,7 +1970,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "3.0.9-alpha.12",
+      "introducedVersion": "3.0.9-alpha.13",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -1991,7 +1991,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "3.0.9-alpha.12",
+      "introducedVersion": "3.0.9-alpha.13",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2012,7 +2012,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "3.0.9-alpha.12",
+      "introducedVersion": "3.0.9-alpha.13",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2062,7 +2062,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "3.0.9-alpha.12",
+      "introducedVersion": "3.0.9-alpha.13",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",

package/docs/dev-delivery-warrant.md

@@ -8,7 +8,7 @@ confidence: high
 sensitivity: public
 evidence_grade: A
 review_state: self-reviewed
-last_reviewed: 2026-08-11
+last_reviewed: 2026-08-13
 ai_provenance:
   model_family: GPT-5
   product: Codex
@@ -93,10 +93,14 @@ affected closure, dependencies, toolchain, covered paths, and exact acceptance
 evidence. Ready state and approval are established before provisional
 selection.
 
-Native Qualification Proof is separate. It binds semantic source and patch,
+Native Qualification Proof is separate. Its v3 form binds semantic source and patch,
 plan, affected closure, dependency graph, toolchain, the exact execution
-environment contract, covered paths, native shard evidence, and the exact dev
-base used by the native composition. Before reuse, the consumer roots the
+environment contract, covered paths, native shard evidence, the exact dev
+base used by the native composition, and the v2 native heartbeat-run receipt.
+That receipt exposes and roots the exact repository, protected base, source
+head, qualified base, toolchain, and environment binding established before
+process spawn. The proof repeats the binding root and includes the receipt root
+in its shard evidence. Before reuse, the consumer roots the
 complete attributed Dev delta, including both sides of every rename, then
 classifies it:
 
@@ -111,6 +115,11 @@ classifies it:
   changed source, plan, closure, dependency, toolchain, or environment root
   fails closed to full native qualification.
 
+Historical Native Qualification Proof v1 and v2 values remain readable, but
+they cannot be reused because their execution receipt did not bind the
+environment root. They fail closed to explicit native revalidation and produce
+a v3 proof.
+
 The reuse decision binds the exact old and current Dev heads, normalized changed
 paths and rename pairs in `baseDeltaRoot`. This makes local and hosted replay of
 the same inputs byte-deterministic. Generated outputs that participate in the
@@ -134,13 +143,16 @@ buildchain dev warrant submit --repository owner/repository \
   --source-identity-root <root> --source-patch-root <root> \
   --source-proof-root <root> --plan-root <root> --closure-root <root> \
   --dependency-root <root> --toolchain-root <root> \
+  --environment-root <root> \
   --delivery-class native-proof-required
 
 buildchain dev warrant select --repository owner/repository \
   --branch dev/v4/v4.0 --execute
 
 buildchain dev proof native --branch dev/v4/v4.0 \
-  --qualified-base <sha> --environment-root <root> \
+  --source-head <sha> --qualified-base <sha> \
+  --environment-root <root> \
+  --native-execution-receipt native-heartbeat-run.json \
   --affected-paths-json '["packages/native"]' ...
 
 buildchain dev proof classify-native --source-proof native-proof.json \
@@ -168,7 +180,9 @@ equivalent exact consumer). It performs an exact fenced heartbeat before spawn,
 renews throughout the complete child lifetime, performs a final renewal before
 accepting success, and terminates the process group on heartbeat or fencing
 failure. Missing, stale, expired, or mismatched Warrant state therefore blocks
-native spawn instead of becoming qualification evidence.
+native spawn instead of becoming qualification evidence. The environment root
+is validated and included in the execution binding before the first heartbeat
+or process spawn; it cannot be attached only after a successful run.
 
 Proof commands create, verify, classify, and compose the two proof layers:
 
@@ -291,6 +305,12 @@ The reusable `dev-pr-auto-merge.yml` supports three explicit rollout modes:
   configured consumer workflow is dispatched immediately for that exact PR,
   head, and source run; the candidate is not left waiting for a patrol cron.
 
+For a required native delivery class, the reusable controller rejects a
+missing or malformed environment root before runtime checkout, candidate
+submission, Warrant selection, or native execution. The input remains
+conditionally optional so `off`, `shadow`, and `non-native-fast` callers keep
+their documented behavior.
+
 The controller persists a completed native proof before its final base
 reclassification. A later exact retry can supply that proof and avoid the
 expensive native command when the rooted delta still proves reuse safe. A

package/docs/node-api-reference.md

@@ -1564,7 +1564,7 @@ Target: `./packages/core/dev-delivery-authority.js`. Public symbols: 22.
 
 ## `@kungfu-tech/buildchain/dev-delivery-warrant`
 
-Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 44.
+Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 49.
 
 | Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |
 | --- | --- | --- | --- | --- | --- | --- | --- |
@@ -1573,9 +1573,11 @@ Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 44.
 | `closeDevDeliveryWarrant` | function: function closeDevDeliveryWarrant(queueInput, warrant, { outcome, evidenceRoot, reason = "", now = new Date().toISOString() } = {}) | queueInput, warrant, { outcome, evidenceRoot, reason = "", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { closeDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:586` |
 | `createDevDeliveryQueue` | function: function createDevDeliveryQueue({ repository: repositoryInput, protectedBase: protectedBaseInput, policy = {}, now = new Date().toISOString() } = {}) | { repository: repositoryInput, protectedBase: protectedBaseInput, policy = {}, now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:120` |
 | `createIntegrationDeliveryProof` | function: function createIntegrationDeliveryProof(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createIntegrationDeliveryProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:207` |
-| `createNativeProofBaseDelta` | function: function createNativeProofBaseDelta(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createNativeProofBaseDelta } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:58` |
-| `createNativeProofReuseDecision` | function: function createNativeProofReuseDecision({ proof, current = {} } = {}) | { proof, current = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createNativeProofReuseDecision } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:288` |
-| `createNativeQualificationProof` | function: function createNativeQualificationProof(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createNativeQualificationProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:88` |
+| `createNativeExecutionBinding` | function: function createNativeExecutionBinding(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createNativeExecutionBinding } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:94` |
+| `createNativeExecutionReceipt` | function: function createNativeExecutionReceipt(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createNativeExecutionReceipt } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:106` |
+| `createNativeProofBaseDelta` | function: function createNativeProofBaseDelta(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createNativeProofBaseDelta } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:64` |
+| `createNativeProofReuseDecision` | function: function createNativeProofReuseDecision({ proof, current = {} } = {}) | { proof, current = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createNativeProofReuseDecision } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:423` |
+| `createNativeQualificationProof` | function: function createNativeQualificationProof(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createNativeQualificationProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:161` |
 | `createProjectCutReplayPlan` | function: function createProjectCutReplayPlan(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createProjectCutReplayPlan } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:121` |
 | `createProjectCutReplayProof` | function: function createProjectCutReplayProof(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createProjectCutReplayProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:141` |
 | `createReleaseBlockerPriorityClaim` | function: function createReleaseBlockerPriorityClaim(repairInput, input = {}) | repairInput, input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseBlockerPriorityClaim } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/release-blocker-priority.js:32` |
@@ -1584,7 +1586,7 @@ Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 44.
 | `DEV_DELIVERY_CLASSES` | constant: const DEV_DELIVERY_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_CLASSES } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:24` |
 | `DEV_DELIVERY_LEASE_RECEIPT_SCHEMA` | constant: const DEV_DELIVERY_LEASE_RECEIPT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_LEASE_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:16` |
 | `DEV_DELIVERY_PRIORITIES` | constant: const DEV_DELIVERY_PRIORITIES | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_PRIORITIES } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:18` |
-| `DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA` | constant: const DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:18` |
+| `DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA` | constant: const DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:24` |
 | `DEV_DELIVERY_QUEUE_CONTRACT` | constant: const DEV_DELIVERY_QUEUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_QUEUE_CONTRACT } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:12` |
 | `DEV_DELIVERY_SELECTION_RECEIPT_SCHEMA` | constant: const DEV_DELIVERY_SELECTION_RECEIPT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_SELECTION_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:15` |
 | `DEV_DELIVERY_SETTLEMENT_RECEIPT_SCHEMA` | value: DEV_DELIVERY_SETTLEMENT_RECEIPT_SCHEMA | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { DEV_DELIVERY_SETTLEMENT_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:1` |
@@ -1593,8 +1595,10 @@ Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 44.
 | `devDeliveryContentRoot` | function: function devDeliveryContentRoot(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { devDeliveryContentRoot } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-common.js:27` |
 | `heartbeatDevDeliveryWarrant` | function: function heartbeatDevDeliveryWarrant(queueInput, warrant, { now = new Date().toISOString(), leaseSeconds } = {}) | queueInput, warrant, { now = new Date().toISOString(), leaseSeconds } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { heartbeatDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:508` |
 | `INTEGRATION_DELIVERY_PROOF_SCHEMA` | constant: const INTEGRATION_DELIVERY_PROOF_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { INTEGRATION_DELIVERY_PROOF_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:5` |
-| `NATIVE_PROOF_BASE_DELTA_SCHEMA` | constant: const NATIVE_PROOF_BASE_DELTA_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { NATIVE_PROOF_BASE_DELTA_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:20` |
-| `NATIVE_PROOF_REUSE_DECISION_SCHEMA` | constant: const NATIVE_PROOF_REUSE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { NATIVE_PROOF_REUSE_DECISION_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:16` |
+| `NATIVE_EXECUTION_BINDING_SCHEMA` | constant: const NATIVE_EXECUTION_BINDING_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { NATIVE_EXECUTION_BINDING_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:18` |
+| `NATIVE_EXECUTION_RECEIPT_SCHEMA` | constant: const NATIVE_EXECUTION_RECEIPT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { NATIVE_EXECUTION_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:20` |
+| `NATIVE_PROOF_BASE_DELTA_SCHEMA` | constant: const NATIVE_PROOF_BASE_DELTA_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { NATIVE_PROOF_BASE_DELTA_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:26` |
+| `NATIVE_PROOF_REUSE_DECISION_SCHEMA` | constant: const NATIVE_PROOF_REUSE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { NATIVE_PROOF_REUSE_DECISION_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:22` |
 | `NATIVE_QUALIFICATION_PROOF_SCHEMA` | constant: const NATIVE_QUALIFICATION_PROOF_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { NATIVE_QUALIFICATION_PROOF_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:12` |
 | `normalizeDevDeliveryQueue` | function: function normalizeDevDeliveryQueue(input, expected = {}) | input, expected = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:135` |
 | `observeDevDeliveryQueue` | function: function observeDevDeliveryQueue(queueInput, { now = new Date().toISOString() } = {}) | queueInput, { now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { observeDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:652` |
@@ -1608,8 +1612,9 @@ Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 44.
 | `SOURCE_QUALIFICATION_PROOF_SCHEMA` | constant: const SOURCE_QUALIFICATION_PROOF_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { SOURCE_QUALIFICATION_PROOF_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:3` |
 | `submitDevDeliveryCandidate` | function: function submitDevDeliveryCandidate(queueInput, input, { now = new Date().toISOString() } = {}) | queueInput, input, { now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { submitDevDeliveryCandidate } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:245` |
 | `verifyIntegrationDeliveryProof` | function: function verifyIntegrationDeliveryProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyIntegrationDeliveryProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:228` |
-| `verifyNativeProofReuseDecision` | function: function verifyNativeProofReuseDecision(decisionInput, { proof, current = {} } = {}) | decisionInput, { proof, current = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyNativeProofReuseDecision } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:292` |
-| `verifyNativeQualificationProof` | function: function verifyNativeQualificationProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyNativeQualificationProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:119` |
+| `verifyNativeExecutionReceipt` | function: function verifyNativeExecutionReceipt(receiptInput, expected = {}) | receiptInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyNativeExecutionReceipt } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:127` |
+| `verifyNativeProofReuseDecision` | function: function verifyNativeProofReuseDecision(decisionInput, { proof, current = {} } = {}) | decisionInput, { proof, current = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyNativeProofReuseDecision } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:427` |
+| `verifyNativeQualificationProof` | function: function verifyNativeQualificationProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyNativeQualificationProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:215` |
 | `verifyProjectCutReplayProof` | function: function verifyProjectCutReplayProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyProjectCutReplayProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:187` |
 | `verifySourceQualificationProof` | function: function verifySourceQualificationProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifySourceQualificationProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:52` |
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kungfu-tech/buildchain",
-  "version": "3.0.9-alpha.12",
+  "version": "3.0.9-alpha.13",
   "private": false,
   "description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
   "repository": "https://github.com/kungfu-systems/buildchain",

package/packages/core/dev-delivery-native-proof.js

@@ -10,9 +10,15 @@ import {
 } from "./dev-delivery-common.js";
 
 export const NATIVE_QUALIFICATION_PROOF_SCHEMA =
+  "kungfu.buildchain.native-qualification-proof/v3";
+const LEGACY_NATIVE_QUALIFICATION_PROOF_V2_SCHEMA =
   "kungfu.buildchain.native-qualification-proof/v2";
 const LEGACY_NATIVE_QUALIFICATION_PROOF_SCHEMA =
   "kungfu.buildchain.native-qualification-proof/v1";
+export const NATIVE_EXECUTION_BINDING_SCHEMA =
+  "kungfu.buildchain.native-execution-binding/v1";
+export const NATIVE_EXECUTION_RECEIPT_SCHEMA =
+  "kungfu.buildchain.native-heartbeat-run-receipt/v2";
 export const NATIVE_PROOF_REUSE_DECISION_SCHEMA =
   "kungfu.buildchain.native-proof-reuse-decision/v1";
 export const DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA =
@@ -85,7 +91,94 @@ function rooted(body) {
   return { ...body, decisionRoot: devDeliveryContentRoot(body) };
 }
 
+export function createNativeExecutionBinding(input = {}) {
+  return {
+    schema: NATIVE_EXECUTION_BINDING_SCHEMA,
+    repository: repository(input.repository),
+    protectedBase: protectedBase(input.protectedBase),
+    sourceHead: exactSha(input.sourceHead, "sourceHead"),
+    qualifiedBase: exactSha(input.qualifiedBase, "qualifiedBase"),
+    toolchainRoot: exactRoot(input.toolchainRoot, "toolchainRoot"),
+    environmentRoot: exactRoot(input.environmentRoot, "environmentRoot"),
+  };
+}
+
+export function createNativeExecutionReceipt(input = {}) {
+  const executionBinding = createNativeExecutionBinding(input.executionBinding);
+  const receipt = {
+    schema: NATIVE_EXECUTION_RECEIPT_SCHEMA,
+    outcome: input.outcome === "succeeded" ? "succeeded" : text(input.outcome),
+    commandRoot: exactRoot(input.commandRoot, "commandRoot"),
+    executionBinding,
+    executionBindingRoot: devDeliveryContentRoot(executionBinding),
+    startedAt: timestamp(input.startedAt, "startedAt"),
+    completedAt: timestamp(input.completedAt, "completedAt"),
+    heartbeatCount: Number(input.heartbeatCount),
+  };
+  if (receipt.outcome !== "succeeded") {
+    throw new Error("native execution receipt must record succeeded outcome");
+  }
+  if (!Number.isInteger(receipt.heartbeatCount) || receipt.heartbeatCount < 1) {
+    throw new Error("heartbeatCount must be a positive integer");
+  }
+  return { ...receipt, receiptRoot: devDeliveryContentRoot(receipt) };
+}
+
+export function verifyNativeExecutionReceipt(receiptInput, expected = {}) {
+  try {
+    const receipt = clone(receiptInput || {});
+    if (receipt.schema !== NATIVE_EXECUTION_RECEIPT_SCHEMA) {
+      return { ok: false, reason: "unsupported-schema" };
+    }
+    const receiptRoot = receipt.receiptRoot;
+    delete receipt.receiptRoot;
+    if (devDeliveryContentRoot(receipt) !== receiptRoot) {
+      return { ok: false, reason: "receipt-root-drift" };
+    }
+    const normalized = createNativeExecutionReceipt({
+      ...receipt,
+      executionBinding: receipt.executionBinding,
+    });
+    if (normalized.receiptRoot !== receiptRoot) {
+      return { ok: false, reason: "receipt-input-drift" };
+    }
+    for (const [field, value] of Object.entries(expected)) {
+      if (value !== undefined && receipt.executionBinding?.[field] !== value) {
+        return { ok: false, reason: `${field}-mismatch` };
+      }
+    }
+    return {
+      ok: true,
+      reason: "exact-native-execution-receipt",
+      receiptRoot,
+      executionBindingRoot: receipt.executionBindingRoot,
+    };
+  } catch (error) {
+    return { ok: false, reason: "invalid-receipt", error: error.message };
+  }
+}
+
 export function createNativeQualificationProof(input = {}) {
+  const sourceHead = exactSha(input.sourceHead, "sourceHead");
+  const qualifiedBase = exactSha(input.qualifiedBase, "qualifiedBase");
+  const toolchainRoot = exactRoot(input.toolchainRoot, "toolchainRoot");
+  const environmentRoot = exactRoot(input.environmentRoot, "environmentRoot");
+  const executionReceipt = verifyNativeExecutionReceipt(
+    input.nativeExecutionReceipt,
+    {
+      repository: repository(input.repository),
+      protectedBase: protectedBase(input.protectedBase),
+      sourceHead,
+      qualifiedBase,
+      toolchainRoot,
+      environmentRoot,
+    },
+  );
+  if (!executionReceipt.ok) {
+    throw new Error(
+      `native execution receipt rejected: ${executionReceipt.reason}`,
+    );
+  }
   const body = {
     schema: NATIVE_QUALIFICATION_PROOF_SCHEMA,
     rootSemantics: NATIVE_QUALIFICATION_ROOT_SEMANTICS,
@@ -99,12 +192,15 @@ export function createNativeQualificationProof(input = {}) {
     planRoot: exactRoot(input.planRoot, "planRoot"),
     closureRoot: exactRoot(input.closureRoot, "closureRoot"),
     dependencyRoot: exactRoot(input.dependencyRoot, "dependencyRoot"),
-    toolchainRoot: exactRoot(input.toolchainRoot, "toolchainRoot"),
-    environmentRoot: exactRoot(input.environmentRoot, "environmentRoot"),
-    qualifiedBase: exactSha(input.qualifiedBase, "qualifiedBase"),
+    toolchainRoot,
+    environmentRoot,
+    sourceHead,
+    qualifiedBase,
+    nativeExecutionBindingRoot: executionReceipt.executionBindingRoot,
+    nativeExecutionReceiptRoot: executionReceipt.receiptRoot,
     affectedPaths: normalizedPaths(input.affectedPaths || []),
     shardEvidenceRoots: exactRoots(
-      input.shardEvidenceRoots,
+      [...(input.shardEvidenceRoots || []), executionReceipt.receiptRoot],
       "shardEvidenceRoots",
     ),
     qualifiedAt: timestamp(input.qualifiedAt, "qualifiedAt"),
@@ -122,6 +218,7 @@ export function verifyNativeQualificationProof(proofInput, expected = {}) {
     if (
       ![
         NATIVE_QUALIFICATION_PROOF_SCHEMA,
+        LEGACY_NATIVE_QUALIFICATION_PROOF_V2_SCHEMA,
         LEGACY_NATIVE_QUALIFICATION_PROOF_SCHEMA,
       ].includes(proof.schema)
     ) {
@@ -146,7 +243,38 @@ export function verifyNativeQualificationProof(proofInput, expected = {}) {
       }
     }
     if (proof.schema === NATIVE_QUALIFICATION_PROOF_SCHEMA) {
-      createNativeQualificationProof(proof);
+      repository(proof.repository);
+      protectedBase(proof.protectedBase);
+      exactSha(proof.sourceHead, "sourceHead");
+      exactSha(proof.qualifiedBase, "qualifiedBase");
+      for (const field of [
+        "sourceIdentityRoot",
+        "sourcePatchRoot",
+        "planRoot",
+        "closureRoot",
+        "dependencyRoot",
+        "toolchainRoot",
+        "environmentRoot",
+        "nativeExecutionBindingRoot",
+        "nativeExecutionReceiptRoot",
+      ]) {
+        exactRoot(proof[field], field);
+      }
+      const expectedBindingRoot = devDeliveryContentRoot(
+        createNativeExecutionBinding(proof),
+      );
+      if (proof.nativeExecutionBindingRoot !== expectedBindingRoot) {
+        return { ok: false, reason: "native-execution-binding-root-drift" };
+      }
+      const shardEvidenceRoots = exactRoots(
+        proof.shardEvidenceRoots,
+        "shardEvidenceRoots",
+      );
+      if (!shardEvidenceRoots.includes(proof.nativeExecutionReceiptRoot)) {
+        return { ok: false, reason: "native-execution-receipt-unbound" };
+      }
+      normalizedPaths(proof.affectedPaths || []);
+      timestamp(proof.qualifiedAt, "qualifiedAt");
     } else {
       repository(proof.repository);
       protectedBase(proof.protectedBase);
@@ -205,8 +333,15 @@ function nativeReuseBody(proof, current) {
     requiredValidation: "full-native",
   };
   if (!verification.ok) return base;
+  if (proof.schema !== NATIVE_QUALIFICATION_PROOF_SCHEMA) {
+    return {
+      ...base,
+      reason: "native-execution-evidence-unbound",
+    };
+  }
 
   const semanticFields = [
+    "sourceHead",
     "sourceIdentityRoot",
     "sourcePatchRoot",
     "planRoot",
@@ -346,6 +481,7 @@ export function createDevDeliveryWarrantQualifier({
         const proofVerification = verifyNativeQualificationProof(nativeProof, {
           repository: before.repository,
           protectedBase: before.protectedBase,
+          sourceHead: active.sourceHead,
           sourceIdentityRoot: active.sourceIdentityRoot,
           sourcePatchRoot: active.sourcePatchRoot,
           planRoot: active.planRoot,
@@ -363,6 +499,7 @@ export function createDevDeliveryWarrantQualifier({
             proof: nativeProof,
             current: {
               ...current,
+              sourceHead: active.sourceHead,
               sourceIdentityRoot: active.sourceIdentityRoot,
               sourcePatchRoot: active.sourcePatchRoot,
               planRoot: active.planRoot,

package/packages/core/dev-delivery-warrant.js

@@ -7,7 +7,7 @@ import { compareReleaseBlockerPriority, normalizeReleaseBlockerPriorityClaim } f
 export { devDeliveryContentRoot } from "./dev-delivery-common.js";
 export { RELEASE_BLOCKER_PRIORITY_CLAIM_SCHEMA, createReleaseBlockerPriorityClaim } from "./release-blocker-priority.js";
 export { SOURCE_QUALIFICATION_PROOF_SCHEMA, PROJECT_CUT_REPLAY_PROOF_SCHEMA, INTEGRATION_DELIVERY_PROOF_SCHEMA, classifyDevDeliveryDelta, createIntegrationDeliveryProof, createProjectCutReplayPlan, createProjectCutReplayProof, createSourceQualificationProof, verifyIntegrationDeliveryProof, verifyProjectCutReplayProof, verifySourceQualificationProof } from "./dev-delivery-proof.js";
-export { DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA, NATIVE_QUALIFICATION_PROOF_SCHEMA, NATIVE_PROOF_REUSE_DECISION_SCHEMA, NATIVE_PROOF_BASE_DELTA_SCHEMA, createNativeProofBaseDelta, createNativeProofReuseDecision, createNativeQualificationProof, verifyNativeProofReuseDecision, verifyNativeQualificationProof } from "./dev-delivery-native-proof.js";
+export { DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA, NATIVE_EXECUTION_BINDING_SCHEMA, NATIVE_EXECUTION_RECEIPT_SCHEMA, NATIVE_QUALIFICATION_PROOF_SCHEMA, NATIVE_PROOF_REUSE_DECISION_SCHEMA, NATIVE_PROOF_BASE_DELTA_SCHEMA, createNativeExecutionBinding, createNativeExecutionReceipt, createNativeProofBaseDelta, createNativeProofReuseDecision, createNativeQualificationProof, verifyNativeExecutionReceipt, verifyNativeProofReuseDecision, verifyNativeQualificationProof } from "./dev-delivery-native-proof.js";
 export { DEV_DELIVERY_CANCELLATION_RECEIPT_SCHEMA };
 export const DEV_DELIVERY_QUEUE_CONTRACT = "kungfu-buildchain-dev-delivery-warrant-queue";
 export const DEV_DELIVERY_WARRANT_SCHEMA = "kungfu.buildchain.dev-delivery-warrant/v1";

package/scripts/dev-delivery-native-run.mjs

@@ -3,7 +3,7 @@ import { spawn } from "node:child_process";
 import fs from "node:fs";
 import path from "node:path";
 
-import { devDeliveryContentRoot } from "../packages/core/dev-delivery-warrant.js";
+import { createNativeExecutionBinding, createNativeExecutionReceipt, devDeliveryContentRoot } from "../packages/core/dev-delivery-warrant.js";
 import { runDevDeliveryCommand } from "./dev-delivery-warrant.mjs";
 
 function flag(args, name, fallback = "") {
@@ -46,6 +46,7 @@ export async function runNativeWithHeartbeat({
   if (typeof heartbeat !== "function") {
     throw new Error("heartbeat callback is required");
   }
+  const boundExecution = createNativeExecutionBinding(executionBinding);
   const startedAt = now();
   try {
     await heartbeat();
@@ -138,16 +139,14 @@ export async function runNativeWithHeartbeat({
   }
   await beat();
   const completedAt = now();
-  const receipt = {
-    schema: "kungfu.buildchain.native-heartbeat-run-receipt/v1",
+  return createNativeExecutionReceipt({
     outcome: "succeeded",
     commandRoot: devDeliveryContentRoot({ command }),
-    executionBindingRoot: devDeliveryContentRoot(executionBinding),
+    executionBinding: boundExecution,
     startedAt,
     completedAt,
     heartbeatCount,
-  };
-  return { ...receipt, receiptRoot: devDeliveryContentRoot(receipt) };
+  });
 }
 
 async function main() {
@@ -163,6 +162,26 @@ async function main() {
     "command",
     process.env.BUILDCHAIN_DEV_DELIVERY_NATIVE_COMMAND,
   );
+  const sourceHead = flag(
+    args,
+    "source-head",
+    process.env.BUILDCHAIN_DEV_DELIVERY_SOURCE_HEAD,
+  );
+  const qualifiedBase = flag(
+    args,
+    "qualified-base",
+    process.env.BUILDCHAIN_DEV_DELIVERY_QUALIFIED_BASE,
+  );
+  const toolchainRoot = flag(
+    args,
+    "toolchain-root",
+    process.env.BUILDCHAIN_DEV_DELIVERY_TOOLCHAIN_ROOT,
+  );
+  const environmentRoot = flag(
+    args,
+    "environment-root",
+    process.env.BUILDCHAIN_DEV_DELIVERY_ENVIRONMENT_ROOT,
+  );
   const cwd = path.resolve(
     flag(args, "working-directory", process.env.GITHUB_WORKSPACE),
   );
@@ -210,6 +229,14 @@ async function main() {
     command,
     cwd,
     intervalMs: heartbeatSeconds * 1000,
+    executionBinding: {
+      repository,
+      protectedBase: branch,
+      sourceHead,
+      qualifiedBase,
+      toolchainRoot,
+      environmentRoot,
+    },
     heartbeat: async () => {
       await runDevDeliveryCommand({
         command: "heartbeat",

package/scripts/dev-delivery-proof.mjs

@@ -54,6 +54,7 @@ export function devDeliveryProofCliOptions(args = [], environment = process.env)
     shardEvidenceRoots: flag(rest, "shard-evidence-roots-json", environment.BUILDCHAIN_DEV_DELIVERY_SHARD_EVIDENCE_ROOTS || "[]"),
     qualifiedAt: flag(rest, "qualified-at", environment.BUILDCHAIN_DEV_DELIVERY_QUALIFIED_AT),
     qualifiedBase: flag(rest, "qualified-base", environment.BUILDCHAIN_DEV_DELIVERY_QUALIFIED_BASE),
+    nativeExecutionReceiptPath: flag(rest, "native-execution-receipt", environment.BUILDCHAIN_DEV_DELIVERY_NATIVE_EXECUTION_RECEIPT),
     sourceProofPath: flag(rest, "source-proof", environment.BUILDCHAIN_DEV_DELIVERY_SOURCE_PROOF),
     sourceProofRoot: flag(rest, "source-proof-root", environment.BUILDCHAIN_DEV_DELIVERY_SOURCE_PROOF_ROOT),
     warrantResultPath: flag(rest, "warrant-result", environment.BUILDCHAIN_DEV_DELIVERY_WARRANT_RESULT),
@@ -132,7 +133,9 @@ export function runDevDeliveryProofCommand(options) {
       dependencyRoot: options.dependencyRoot,
       toolchainRoot: options.toolchainRoot,
       environmentRoot: options.environmentRoot,
+      sourceHead: options.sourceHead,
       qualifiedBase: options.qualifiedBase,
+      nativeExecutionReceipt: jsonFile(options.nativeExecutionReceiptPath, "native execution receipt"),
       affectedPaths: jsonList(options.affectedPaths, "affected paths"),
       shardEvidenceRoots: jsonList(options.shardEvidenceRoots, "shard evidence roots", { required: true }),
       qualifiedAt: options.qualifiedAt,